$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa File: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (raw, json) Hash identifier: P7uH+4OUspN6r0iSs1UlN62hM46nAbaZEiD2TNHnAOM= Subject key identifier: 4C:94:4F:B7:24:A3:4D:37:47:F9:B4:44:BE:7A:CD:AF:72:2C:A6:60 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F43285847B5314EE8D532E69DA52FF400 Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 54542 IP address blocks: 148.59.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:4e:e8:d5:32:e6:9d:a5:2f:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=ae6549cd-45ae-4933-9bc5-b99e941bf8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:14:d4:39:f2:f7:b4:27:a4:bb:a7:de:36:3a: c6:e7:3d:08:e3:01:22:09:6a:88:dc:74:a2:fc:4a: 97:f5:5d:77:7a:54:fd:c8:64:5e:5b:66:0d:86:57: 76:98:57:40:61:5d:2e:5b:23:6b:f0:f8:d3:83:aa: 5f:60:44:9f:44:e4:2d:29:7a:f2:9c:2a:33:ea:3c: dc:a0:a8:5f:15:b4:53:91:05:a6:ac:c6:38:37:16: 3a:07:5b:e2:b2:d1:dd:bb:c2:2d:d0:04:6c:56:09: b7:00:1d:88:60:d6:01:4b:a4:74:2e:00:df:05:3e: b8:51:dd:30:93:52:1e:ba:6a:93:0a:ca:67:8c:db: 35:f7:fd:3c:94:5b:f3:bb:c3:5e:7a:80:55:be:03: cd:21:d0:8b:9e:44:0e:1a:84:d6:31:87:4d:9e:fa: b6:1b:fa:91:71:c0:2e:3b:d7:e4:80:3a:da:5e:f8: 13:a2:41:3c:2c:3d:07:09:7a:c2:9a:7a:c1:55:5a: 54:48:3a:a4:33:39:bc:e3:2a:7a:40:a3:b1:d9:db: 0a:96:5b:82:d8:79:20:93:6f:64:19:7f:d7:7d:64: 23:06:52:ee:96:82:66:25:e4:68:39:c6:6e:de:a3: f2:16:25:2c:f1:ba:e7:17:c8:35:f8:fc:06:b1:17: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:4F:B7:24:A3:4D:37:47:F9:B4:44:BE:7A:CD:AF:72:2C:A6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: 148.59.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4d:9d:80:4f:74:d5:8e:f1:3b:36:52:75:9c:c8:ec:eb:a6: 4b:ba:7a:43:ac:dd:d9:a4:c9:00:b8:87:16:8f:7b:da:96:71: be:56:7d:1a:7b:d3:c6:c9:41:91:16:27:2d:09:89:d7:df:ae: 7c:57:f9:93:ad:22:43:f4:4b:d5:4a:ae:92:40:10:b3:da:6d: 3b:1c:fb:8e:49:62:67:86:b0:50:f8:e0:b2:03:4d:4f:2e:af: b8:7c:71:9d:10:50:4f:16:72:91:55:9d:5d:5f:f7:23:ac:f9: 58:5a:ef:5e:e2:49:96:b8:14:f3:42:c6:73:47:3d:b3:6e:62: c6:79:fe:66:0c:00:0f:71:66:98:73:af:09:5c:a5:30:6c:60: e1:ed:fe:7b:40:84:be:ae:3b:e5:04:15:d8:5c:25:89:a3:a2: 76:a5:87:a3:52:a5:a5:c7:ca:18:15:8f:47:4f:97:72:5f:48: 20:bc:01:3f:21:09:45:b8:43:2b:e1:e0:7f:b8:aa:8b:06:c2: b7:05:5d:cc:ee:60:b9:2b:0e:6e:24:e2:c7:b7:ff:22:6d:e6: 05:60:89:a8:cc:8d:fc:39:f6:d2:bd:c3:fd:63:a7:6d:9a:65: 88:0e:c3:54:77:8c:c9:49:98:af:6d:bd:b7:b2:5d:50:a4:31: 85:67:3d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MU7o1TLmnaUv9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk YWU2NTQ5Y2QtNDVhZS00OTMzLTliYzUtYjk5ZTk0MWJmOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhTUOfL3tCeku6feNjrG5z0I4wEiCWqI3HSi /EqX9V13elT9yGReW2YNhld2mFdAYV0uWyNr8PjTg6pfYESfROQtKXrynCoz6jzc oKhfFbRTkQWmrMY4NxY6B1vistHdu8It0ARsVgm3AB2IYNYBS6R0LgDfBT64Ud0w k1IeumqTCspnjNs19/08lFvzu8NeeoBVvgPNIdCLnkQOGoTWMYdNnvq2G/qRccAu O9fkgDraXvgTokE8LD0HCXrCmnrBVVpUSDqkMzm84yp6QKOx2dsKlluC2Hkgk29k GX/XfWQjBlLuloJmJeRoOcZu3qPyFiUs8brnF8g1+PwGsRc+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyUT7cko003R/m0RL56za9yLKZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvZjJmY2MzNDktNjI0Yy0z OGI3LTg4YTUtOWZlZTQ3YmMwNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlDvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdNnYBPdNWO8Ts2UnWcyOzrpku6ekOs3dmkyQC4hxaPe9qWcb5WfRp7 08bJQZEWJy0JidffrnxX+ZOtIkP0S9VKrpJAELPabTsc+45JYmeGsFD44LIDTU8u r7h8cZ0QUE8WcpFVnV1f9yOs+Vha717iSZa4FPNCxnNHPbNuYsZ5/mYMAA9xZphz rwlcpTBsYOHt/ntAhL6uO+UEFdhcJYmjonalh6NSpaXHyhgVj0dPl3JfSCC8AT8h CUW4Qyvh4H+4qosGwrcFXczuYLkrDm4k4se3/yJt5gVgiajMjfw59tK9w/1jp22a ZYgOw1R3jMlJmK9tvbeyXVCkMYVnPQ4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org