$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa File: 24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa (raw, json) Hash identifier: sb8H2+YQy/3DXmNU/Jw1xCyHNbzwD8+vOROfe8lE/NM= Subject key identifier: 08:52:A9:06:91:29:00:7B:F5:A9:23:64:D0:61:5F:06:B6:2D:47:8B Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584550682BFD0FC9151BD487A9C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa Signing time: Sun 24 Mar 2024 13:00:33 +0000 ROA not before: Sun 24 Mar 2024 13:00:33 +0000 ROA not after: Sat 22 Jun 2024 13:00:33 +0000 asID: 202276 IP address blocks: 149.19.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:50:68:2b:fd:0f:c9:15:1b:d4:87:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 24 13:00:33 2024 GMT Not After : Jun 22 13:00:33 2024 GMT Subject: CN=16e178f4-3da8-4309-abd1-dfd2f342fc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:57:e2:f0:88:9a:dd:92:42:44:32:33:89: 21:c0:d2:62:7a:a6:9f:7e:45:d6:47:3c:7d:92:11: 73:3a:ad:27:da:a1:c0:d9:79:fe:f8:9a:e5:d4:0a: a4:ea:41:53:32:2d:03:ef:08:6b:d1:20:a7:a9:c7: 03:dd:4e:d1:08:5b:1c:e5:15:a1:89:48:03:b9:a7: 6c:18:b2:ca:c6:03:ee:0c:24:38:9e:4a:c8:a2:50: ad:30:e2:18:3a:f2:50:ab:32:96:b8:e7:28:0e:ca: 65:ae:71:84:69:9a:64:cc:1b:0a:df:3f:ae:2e:52: a7:64:2a:f0:7a:6e:69:cb:a4:fe:17:02:7a:51:52: f7:cf:8f:cb:84:07:39:40:d6:59:21:90:6f:5c:db: e6:41:30:38:2e:4f:af:63:4e:3a:49:e8:43:6e:ce: 9e:43:ab:ef:d5:36:85:21:75:fb:b9:da:50:47:d5: 53:0c:c3:70:5b:53:25:5d:36:65:6f:4b:13:8f:07: f3:8f:1d:03:ec:d0:bf:1c:78:0f:cc:d3:c5:d4:31: 1c:f6:5e:88:44:3f:87:92:38:b1:b1:2c:53:ac:cb: ff:28:a9:72:2a:85:49:d1:31:d4:f2:0f:4c:b7:2c: b2:9e:35:dc:2b:bc:f5:c7:dd:fd:29:97:da:50:d5: 44:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:52:A9:06:91:29:00:7B:F5:A9:23:64:D0:61:5F:06:B6:2D:47:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4a:14:fe:ef:40:64:29:1b:84:1c:51:5f:9d:e6:88:f5:2f: ef:d6:01:94:a6:d7:d9:f8:0c:c3:0a:78:bf:e2:db:5a:ab:29: 07:c5:3d:33:93:26:68:07:c1:f5:73:7e:91:82:88:0b:62:7a: 80:87:ca:b9:9e:af:31:77:5d:ca:b2:f1:8a:a1:e7:52:58:40: 5e:f2:6d:c3:95:74:80:e6:34:cc:f2:93:bb:e4:b8:a3:2b:25: 7c:97:89:b3:d0:ae:91:b1:d8:0c:95:28:85:3f:65:ab:21:7c: 3d:b9:13:0d:88:5e:ef:31:84:be:7d:02:23:4a:60:89:1c:c4: 84:dd:34:71:8d:99:ec:36:c8:19:e0:60:2c:ca:9e:73:59:26: 58:3e:dd:88:11:58:e3:a9:f9:68:a1:44:67:8d:78:9d:44:f8: fe:15:82:eb:77:08:af:b5:ea:43:57:de:ad:35:94:5f:2b:a3: ea:36:d7:4f:2d:22:c0:d4:4a:40:b4:9a:c6:27:07:a3:60:b4: 54:6a:a8:82:1b:fc:d3:d5:a7:e1:bf:93:b7:fc:66:6d:fe:b8: 3d:47:da:71:61:ca:70:4d:38:c2:9c:b8:44:f8:9d:af:50:09: d1:58:fb:ed:62:b1:e1:68:ad:fa:c3:35:f7:d1:52:42:50:9c: 4b:fd:28:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVQaCv9D8kVG9SHqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI0MDMyNDEzMDAzM1oXDTI0MDYyMjEzMDAzM1owLzEtMCsGA1UEAxMk MTZlMTc4ZjQtM2RhOC00MzA5LWFiZDEtZGZkMmYzNDJmYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPhX4vCImt2SQkQyM4khwNJieqaffkXWRzx9 khFzOq0n2qHA2Xn++Jrl1Aqk6kFTMi0D7whr0SCnqccD3U7RCFsc5RWhiUgDuads GLLKxgPuDCQ4nkrIolCtMOIYOvJQqzKWuOcoDsplrnGEaZpkzBsK3z+uLlKnZCrw em5py6T+FwJ6UVL3z4/LhAc5QNZZIZBvXNvmQTA4Lk+vY046SehDbs6eQ6vv1TaF IXX7udpQR9VTDMNwW1MlXTZlb0sTjwfzjx0D7NC/HHgPzNPF1DEc9l6IRD+Hkjix sSxTrMv/KKlyKoVJ0THU8g9MtyyynjXcK7z1x939KZfaUNVE5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhSqQaRKQB79akjZNBhXwa2LUeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMjRhNjhmMzItZGFhNy0z YWFkLTgxODgtMmU5ZjQxNmNkMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZKFP7vQGQpG4QcUV+d5oj1L+/WAZSm19n4DMMKeL/i21qrKQfFPTOT JmgHwfVzfpGCiAtieoCHyrmerzF3Xcqy8Yqh51JYQF7ybcOVdIDmNMzyk7vkuKMr JXyXibPQrpGx2AyVKIU/ZashfD25Ew2IXu8xhL59AiNKYIkcxITdNHGNmew2yBng YCzKnnNZJlg+3YgRWOOp+WihRGeNeJ1E+P4Vgut3CK+16kNX3q01lF8ro+o2108t IsDUSkC0msYnB6NgtFRqqIIb/NPVp+G/k7f8Zm3+uD1H2nFhynBNOMKcuET4na9Q CdFY++1iseForfrDNffRUkJQnEv9KJI= -----END CERTIFICATE-----Generated at Sun May 19 03:48:54 2024 by rpki-client on console-fra.rpki-client.org