$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa File: e4e25509-90e2-3048-8aef-d1f4b44a806e.roa (raw, json) Hash identifier: 9JivCzbEZrKP6uA2jMQ/TCqSTVRauSQU4ZoWqkEATwU= Subject key identifier: 0A:38:1D:3D:78:AA:03:85:76:B9:82:D6:5A:47:33:E9:DD:9B:91:BF Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F43285847EFEF7F23F499CF42FE607180 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 22987 IP address blocks: 152.86.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:7f:23:f4:99:cf:42:fe:60:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=42b7ecec-4523-439d-97dc-7593d15fe365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:d6:be:cb:7e:d6:30:e7:88:7e:cb:6d:f4: 27:45:50:41:45:34:4a:8a:e0:a9:77:6c:78:62:7b: dd:21:ca:11:7a:f0:59:98:f8:d8:8c:2b:43:c5:16: 45:ab:65:37:04:f2:e9:00:0e:81:2f:d0:ec:c3:59: 22:fd:c2:27:84:e1:1c:10:7b:26:a7:cb:1f:12:ef: b2:8f:7f:20:7f:24:d0:e0:74:64:9b:33:23:7c:fe: b8:c3:c9:2c:03:0b:13:f3:bf:9f:6f:95:6a:d8:b6: 53:d2:e2:dc:e4:76:e4:7e:7d:c1:a7:07:3a:78:d1: 1c:a4:7b:d5:26:89:7c:fe:26:24:31:a6:4e:41:b6: cc:47:de:c1:42:cb:4b:36:65:8c:63:fa:b8:23:f0: ba:f2:45:af:8e:51:fb:c7:ec:04:89:a5:35:06:67: c4:b4:c2:87:27:b4:54:1f:da:57:bb:75:6f:8a:8e: a6:d8:74:55:ba:77:59:05:44:7b:3e:23:3d:b4:83: 1b:e4:79:76:ee:17:9e:3d:f8:59:e3:1f:86:4f:1c: b1:9f:ea:54:65:ef:2a:40:c0:9e:1e:2e:d3:0d:10: 0c:b4:a2:68:86:ff:ea:f7:3a:9b:ce:8d:a3:8d:24: e8:03:ca:2b:6f:fa:cc:8a:35:cd:65:64:d0:aa:08: 37:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:38:1D:3D:78:AA:03:85:76:B9:82:D6:5A:47:33:E9:DD:9B:91:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 152.86.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2c:ab:d6:c9:a1:49:ca:c2:45:33:38:ac:57:34:4b:41:c2: 2b:6b:19:d5:fc:ec:8d:4a:30:15:5f:32:23:3e:a9:64:b0:17: 24:69:19:81:64:e3:b4:b5:66:aa:ba:58:a2:b9:17:9f:32:f8: 82:2d:89:fe:e7:85:fb:fd:b1:e7:5b:e2:28:83:8f:89:f0:51: ca:15:3f:9a:48:3e:f6:d9:fa:5a:18:5c:60:94:58:61:64:b5: d1:81:2e:c6:a8:db:6f:10:47:cf:9f:99:ca:ad:22:24:29:6e: 3f:91:3e:da:e0:39:b6:97:51:a8:06:a1:0a:be:63:68:a4:c4: 3e:20:ac:ac:3b:6d:b3:dc:3d:ea:47:f3:0c:cf:c9:c5:8b:a4: f3:e3:84:d1:4d:17:cb:37:fc:16:8b:8c:67:94:23:36:c9:c0: b5:ba:bf:71:4e:27:24:bd:5d:75:ff:69:d9:9e:b1:ca:a0:75: c1:02:85:dc:a3:d5:19:91:62:99:3e:9b:55:0e:b1:fe:0c:f5: b7:9e:d7:75:95:ee:97:2e:03:20:5d:35:53:a1:d5:2f:b0:45: 7e:0d:49:df:e8:60:bd:59:51:35:80:5a:05:4a:88:e5:ba:be: b4:07:e6:2d:3b:66:db:52:67:1e:96:13:e9:65:c8:16:76:31: 41:8e:9c:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv738j9JnPQv5gcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk NDJiN2VjZWMtNDUyMy00MzlkLTk3ZGMtNzU5M2QxNWZlMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG3Wvst+1jDniH7LbfQnRVBBRTRKiuCpd2x4 YnvdIcoRevBZmPjYjCtDxRZFq2U3BPLpAA6BL9Dsw1ki/cInhOEcEHsmp8sfEu+y j38gfyTQ4HRkmzMjfP64w8ksAwsT87+fb5Vq2LZT0uLc5Hbkfn3Bpwc6eNEcpHvV Jol8/iYkMaZOQbbMR97BQstLNmWMY/q4I/C68kWvjlH7x+wEiaU1BmfEtMKHJ7RU H9pXu3Vvio6m2HRVundZBUR7PiM9tIMb5Hl27heePfhZ4x+GTxyxn+pUZe8qQMCe Hi7TDRAMtKJohv/q9zqbzo2jjSToA8orb/rMijXNZWTQqgg3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo4HT14qgOFdrmC1lpHM+ndm5G/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvZTRlMjU1MDktOTBlMi0z MDQ4LThhZWYtZDFmNGI0NGE4MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmFZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMsq9bJoUnKwkUzOKxXNEtBwitrGdX87I1KMBVfMiM+qWSwFyRpGYFk 47S1Zqq6WKK5F58y+IItif7nhfv9sedb4iiDj4nwUcoVP5pIPvbZ+loYXGCUWGFk tdGBLsao228QR8+fmcqtIiQpbj+RPtrgObaXUagGoQq+Y2ikxD4grKw7bbPcPepH 8wzPycWLpPPjhNFNF8s3/BaLjGeUIzbJwLW6v3FOJyS9XXX/admescqgdcEChdyj 1RmRYpk+m1UOsf4M9bee13WV7pcuAyBdNVOh1S+wRX4NSd/oYL1ZUTWAWgVKiOW6 vrQH5i07ZttSZx6WE+llyBZ2MUGOnKg= -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org