$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa File: 51c93d61-da59-3492-9aa3-1e6063528f1f.roa (raw, json) Hash identifier: vftOuTLSancKXCWjk02WhApkzagbDOgLoUKc8DU8TUk= Subject key identifier: 0D:9F:72:31:60:80:FC:59:2A:95:48:F9:B8:A2:48:3C:14:55:F3:E9 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F432858472F307A03ED9C54BCAF5B2860 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 13325 IP address blocks: 148.149.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:7a:03:ed:9c:54:bc:af:5b:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=30b015cb-6b82-458e-9e69-83b2a418b6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:e8:e7:66:f6:f7:59:81:16:7f:a1:85:7d: ac:9e:af:b3:13:90:11:e4:19:de:79:de:8f:38:c0: 1b:30:2f:65:90:c6:ed:70:75:2a:81:9c:2c:96:a5: ab:8a:b9:b3:f0:d6:27:66:d7:45:76:d8:b2:f9:41: f2:1b:34:9b:fe:49:21:3a:97:7a:f7:22:84:54:f3: 20:63:36:f8:ae:cf:ef:06:a0:ee:7f:a0:46:47:91: d0:93:fc:93:90:13:44:26:fc:67:41:7d:ab:d1:4f: 7f:7c:a4:d7:b5:1c:8a:eb:ef:20:18:a3:92:b9:88: d8:73:1b:2c:8f:30:de:1d:84:3a:ac:be:8c:56:29: 0d:d6:f4:f0:14:65:7c:e6:d6:ae:1a:05:51:fa:4e: c9:5b:76:fb:15:60:4a:8b:85:f3:f8:e1:89:53:0e: 89:48:d9:33:4b:c9:37:ff:d2:66:df:ed:d1:24:6d: de:4a:ac:6c:10:fa:6c:e6:dc:49:91:5a:f4:9d:c2: 32:5d:74:96:c8:16:b5:76:36:90:96:47:67:3b:f9: cd:e2:0b:fe:c8:76:2c:48:11:89:7b:7c:93:1e:17: 53:ce:5d:e5:43:a2:b0:de:62:d3:e3:04:ef:75:04: 5b:0b:02:04:2a:0d:12:82:2e:34:21:c5:cb:72:c5: ca:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9F:72:31:60:80:FC:59:2A:95:48:F9:B8:A2:48:3C:14:55:F3:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/51c93d61-da59-3492-9aa3-1e6063528f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 148.149.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0a:e6:92:2a:ce:ff:64:7f:d9:cb:a9:10:a0:5f:ae:fc:18: 3e:c3:13:f0:7d:62:83:bc:e4:f4:89:5c:1a:df:c5:4c:30:c0: 67:6f:a3:86:80:2d:f6:12:d0:60:df:55:a2:d6:19:7f:2f:24: 06:3d:2c:da:db:bc:e3:66:95:fa:fb:79:8f:8b:47:99:94:8d: 12:d9:40:7f:00:f6:bc:4b:74:ae:f6:34:79:ac:0d:10:b7:c1: 84:d3:15:fd:9a:47:86:2a:3d:f0:cf:3b:0c:e0:a9:0b:01:d8: 05:14:93:d7:06:2e:2c:9e:2c:93:86:26:d8:03:13:5b:d7:bf: 1a:f0:3d:55:0e:c2:99:25:cb:d5:11:12:3e:94:53:d1:26:2b: 17:eb:80:db:cd:37:af:40:2e:4b:0a:7a:70:f6:9e:0f:b3:a9: 35:dc:0f:66:42:96:7d:28:b4:4c:aa:58:0f:75:96:f3:9e:32: a1:66:c1:a6:c2:f5:5d:1c:29:c3:3e:48:05:76:1c:8b:4e:01: 45:e4:55:00:96:f2:c2:c7:7a:9f:1e:84:c0:40:ee:4f:97:05: b4:05:8a:09:c2:d0:cf:b7:07:bf:0d:c0:1f:5a:d7:d1:29:ef: 0f:0d:20:63:c5:4f:a4:d4:92:b6:c0:08:24:9e:35:c3:82:c9: 1f:ef:1b:a7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcvMHoD7ZxUvK9bKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk MzBiMDE1Y2ItNmI4Mi00NThlLTllNjktODNiMmE0MThiNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlovo52b291mBFn+hhX2snq+zE5AR5Bneed6P OMAbMC9lkMbtcHUqgZwslqWrirmz8NYnZtdFdtiy+UHyGzSb/kkhOpd69yKEVPMg Yzb4rs/vBqDuf6BGR5HQk/yTkBNEJvxnQX2r0U9/fKTXtRyK6+8gGKOSuYjYcxss jzDeHYQ6rL6MVikN1vTwFGV85tauGgVR+k7JW3b7FWBKi4Xz+OGJUw6JSNkzS8k3 /9Jm3+3RJG3eSqxsEPps5txJkVr0ncIyXXSWyBa1djaQlkdnO/nN4gv+yHYsSBGJ e3yTHhdTzl3lQ6Kw3mLT4wTvdQRbCwIEKg0Sgi40IcXLcsXKmwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA2fcjFggPxZKpVI+biiSDwUVfPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTFjOTNkNjEtZGE1OS0z NDkyLTlhYTMtMWU2MDYzNTI4ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlJUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOgrmkirO/2R/2cupEKBfrvwYPsMT8H1ig7zk9IlcGt/FTDDAZ2+jhoAt 9hLQYN9VotYZfy8kBj0s2tu842aV+vt5j4tHmZSNEtlAfwD2vEt0rvY0eawNELfB hNMV/ZpHhio98M87DOCpCwHYBRST1wYuLJ4sk4Ym2AMTW9e/GvA9VQ7CmSXL1RES PpRT0SYrF+uA2803r0AuSwp6cPaeD7OpNdwPZkKWfSi0TKpYD3WW854yoWbBpsL1 XRwpwz5IBXYci04BReRVAJbywsd6nx6EwEDuT5cFtAWKCcLQz7cHvw3AH1rX0Snv Dw0gY8VPpNSStsAIJJ41w4LJH+8bpw== -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org