$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa File: ab844670-ed3c-32c6-85dc-3ed39dee509e.roa (raw, json) Hash identifier: aQrXH1bHXWyDhsLZ+hkQOhy32xKQsXuHxlK8sz+MCBA= Subject key identifier: 9D:3E:CF:0A:84:0E:21:ED:44:C8:B5:A2:5B:1C:CE:61:F3:F1:BE:25 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F43285847DF2F51EBAB22355674BCC980 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 13445 IP address blocks: 144.196.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:51:eb:ab:22:35:56:74:bc:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=1e5938de-7793-40b6-9512-b17e147f9119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:ff:9b:b1:46:79:2f:ab:67:98:01:19:20: 26:2e:e5:0e:19:e1:7a:77:52:db:a9:3e:a2:b3:12: 4d:ae:3a:1c:81:d3:19:f6:f2:1f:0c:c6:62:8c:f8: ff:e9:2d:44:7e:a1:89:17:a8:78:82:63:42:91:54: 04:99:74:39:0c:ba:ba:a4:69:33:cb:01:ab:c3:7d: f7:19:f6:92:53:eb:03:8a:e5:08:38:e5:b5:4e:32: 18:7f:be:70:14:c3:27:49:99:ae:21:7e:6a:dc:b1: b5:c0:86:7e:94:88:8d:ab:1a:8c:2e:a1:1e:6a:a6: 05:5d:1a:7f:ca:8a:cb:db:09:f6:f3:70:2e:2e:1c: d4:94:7c:14:62:61:ec:5d:1e:b0:29:89:4a:2d:06: 3c:b3:8c:5b:38:5e:54:74:fd:76:1a:14:07:de:c6: 13:77:73:31:8e:fc:2c:a9:3e:ee:a1:4f:83:c6:40: ec:a9:7f:91:84:f4:18:76:fe:7f:4c:d5:63:3a:7f: 8a:b9:24:b7:cf:83:42:4c:88:3b:45:22:9f:67:f3: 99:3a:f3:07:26:6d:0c:5c:10:7f:a9:fd:ee:95:5f: cb:e8:16:98:ca:92:9b:ec:d6:14:8c:3d:78:d8:79: b4:ce:f7:dd:53:f3:b1:94:e5:32:c5:be:9c:36:85: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3E:CF:0A:84:0E:21:ED:44:C8:B5:A2:5B:1C:CE:61:F3:F1:BE:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 144.196.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c6:0a:a5:0d:42:24:ee:3a:5f:93:84:f0:eb:98:6b:df:d9: c9:4a:bc:b8:51:61:d9:08:b8:81:83:32:06:71:9c:a6:b1:5d: 4c:10:33:f9:07:0b:89:9c:ba:ef:ce:46:be:fd:bf:81:1b:51: ec:a6:2e:0f:af:e9:4b:6a:00:19:02:77:a3:45:83:59:64:b6: 84:2d:bb:75:dd:b7:8b:3c:a6:17:d7:91:ea:16:a8:bf:2e:fa: f2:a6:e6:b6:5f:e9:fc:2f:4c:48:74:49:8c:08:e3:90:26:52: 44:f8:58:bd:51:c5:75:92:cf:82:6b:a1:b0:78:15:1a:2d:e1: 21:69:a8:e6:c0:38:cf:26:e8:0f:e9:bc:84:2b:6f:7b:3f:fa: fd:1d:c4:2d:07:f0:6b:24:8f:6a:23:56:39:f7:58:b9:65:77: 90:56:46:86:e4:1c:2d:20:cb:a3:7f:7e:78:59:ec:24:a7:87: da:6d:eb:b5:59:e8:de:f6:14:f0:07:16:40:55:a7:5b:e9:0f: 07:28:70:6d:a3:86:7c:d2:e8:b9:8f:68:89:29:20:22:e3:96: f8:41:f5:81:a7:a7:94:41:6f:8b:49:07:d0:1b:43:99:d0:ba: 41:11:39:b3:0e:66:df:de:33:aa:62:fd:f4:dc:7e:5c:08:4b: 41:18:d3:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1HrqyI1VnS8yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk MWU1OTM4ZGUtNzc5My00MGI2LTk1MTItYjE3ZTE0N2Y5MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT3/m7FGeS+rZ5gBGSAmLuUOGeF6d1LbqT6i sxJNrjocgdMZ9vIfDMZijPj/6S1EfqGJF6h4gmNCkVQEmXQ5DLq6pGkzywGrw333 GfaSU+sDiuUIOOW1TjIYf75wFMMnSZmuIX5q3LG1wIZ+lIiNqxqMLqEeaqYFXRp/ yorL2wn283AuLhzUlHwUYmHsXR6wKYlKLQY8s4xbOF5UdP12GhQH3sYTd3Mxjvws qT7uoU+DxkDsqX+RhPQYdv5/TNVjOn+KuSS3z4NCTIg7RSKfZ/OZOvMHJm0MXBB/ qf3ulV/L6BaYypKb7NYUjD142Hm0zvfdU/OxlOUyxb6cNoVngQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0+zwqEDiHtRMi1olsczmHz8b4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYWI4NDQ2NzAtZWQzYy0z MmM2LTg1ZGMtM2VkMzlkZWU1MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXGCqUNQiTuOl+ThPDrmGvf2clKvLhRYdkIuIGDMgZxnKaxXUwQM/kH C4mcuu/ORr79v4EbUeymLg+v6UtqABkCd6NFg1lktoQtu3Xdt4s8phfXkeoWqL8u +vKm5rZf6fwvTEh0SYwI45AmUkT4WL1RxXWSz4JrobB4FRot4SFpqObAOM8m6A/p vIQrb3s/+v0dxC0H8Gskj2ojVjn3WLlld5BWRobkHC0gy6N/fnhZ7CSnh9pt67VZ 6N72FPAHFkBVp1vpDwcocG2jhnzS6LmPaIkpICLjlvhB9YGnp5RBb4tJB9AbQ5nQ ukERObMOZt/eM6pi/fTcflwIS0EY07Q= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org