$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/836a4a01-8197-3e4b-8aae-57d631ee820a.roa File: 836a4a01-8197-3e4b-8aae-57d631ee820a.roa (raw, json) Hash identifier: +2X2GqlouKHmFGiW0FiczaaOYm4XFz6x6mphHVp6bz0= Subject key identifier: D8:07:27:87:CF:D3:55:A2:59:8B:C7:1D:8B:D1:A5:8F:8A:19:5D:55 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285847EFEF81B61650CE56F0464940 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/836a4a01-8197-3e4b-8aae-57d631ee820a.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 396253 IP address blocks: 149.19.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:81:b6:16:50:ce:56:f0:46:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=d82a6516-4dbe-41bd-af52-0a683df31b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:ff:50:24:33:77:ee:97:b2:95:87:b3:ed: 23:14:04:4f:49:c0:23:6f:dd:07:91:69:69:5a:b5: 26:95:52:dc:a8:d3:bc:9e:c3:e4:8c:0e:60:ef:85: 59:41:f3:11:4b:fa:24:26:2f:c1:f8:a3:bf:af:4c: 95:79:fa:3b:4e:8b:aa:4f:10:05:e2:c1:9c:89:09: f8:bc:7c:c0:c3:ca:86:cc:f4:63:a3:df:47:f8:a7: 24:2c:2c:8d:2b:3f:60:f8:4a:b2:5d:c9:16:67:02: 86:f5:28:53:65:e7:44:92:5a:ce:89:29:ff:e6:0a: f6:d3:24:3a:f5:a7:2b:c4:1a:31:33:f2:c8:13:9c: 8d:e3:2b:ee:89:a9:71:9d:6c:c6:7b:0a:3a:de:de: 9b:66:d4:c2:a2:73:b6:4f:8e:ac:b0:0f:e9:cb:e3: 48:98:ad:7a:12:0e:53:51:2e:77:dd:7e:6e:ab:87: a6:5c:09:c5:c4:03:f5:81:03:c5:1a:8b:1d:35:ae: ca:50:12:c1:7d:ed:aa:8b:02:2a:21:3b:f9:83:75: 09:c1:95:23:6f:f7:44:55:c7:ec:69:d8:0d:91:aa: 8f:43:e1:b6:ca:19:a1:81:f1:ca:7b:d8:26:8d:32: 37:d6:7c:60:8f:1a:a3:c2:ed:c2:cf:4c:e3:16:8c: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:27:87:CF:D3:55:A2:59:8B:C7:1D:8B:D1:A5:8F:8A:19:5D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/836a4a01-8197-3e4b-8aae-57d631ee820a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:80:63:28:64:21:e6:9b:bb:bb:96:5b:b4:36:11:05:b3:a3: a7:9d:bd:85:42:57:62:83:9c:f3:d1:2f:af:b2:91:bc:8d:00: 45:e6:2f:a0:92:1e:d3:73:a2:a5:3c:b1:1d:2f:0d:ee:5e:78: 1a:7e:58:f6:af:74:16:c0:fc:53:f3:40:e2:f1:f2:70:79:96: 54:db:d4:fd:ae:ba:69:ba:75:de:d3:d3:1d:8d:8d:6b:25:13: 56:df:94:1d:bf:1b:60:85:2a:b0:d2:17:60:db:05:e7:42:9d: ca:63:bf:74:17:f0:33:15:a0:77:8e:6f:b1:39:50:00:1d:77: df:01:e1:8a:a2:94:5c:a0:29:2e:60:81:b2:14:c3:09:61:2b: ba:6e:5d:3d:de:30:4c:d6:3a:fd:f7:da:99:27:81:cc:a6:4d: 74:42:7a:0d:5a:d8:85:a4:00:8b:10:7f:7b:92:14:30:b2:4b: 09:bd:e1:c4:f1:95:14:99:2b:15:83:f2:e0:69:b7:bc:ce:d6: 81:81:b1:29:fa:21:fe:07:cc:12:69:05:dd:5f:6d:64:41:55: d2:e1:26:55:67:fb:81:a5:c5:af:df:a7:af:01:ce:2c:23:94: e5:a5:54:f2:e8:f6:94:0e:dd:91:e1:81:5b:17:eb:b0:af:48: 7a:3c:02:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74G2FlDOVvBGSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk ZDgyYTY1MTYtNGRiZS00MWJkLWFmNTItMGE2ODNkZjMxYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0L/UCQzd+6XspWHs+0jFARPScAjb90HkWlp WrUmlVLcqNO8nsPkjA5g74VZQfMRS/okJi/B+KO/r0yVefo7TouqTxAF4sGciQn4 vHzAw8qGzPRjo99H+KckLCyNKz9g+EqyXckWZwKG9ShTZedEklrOiSn/5gr20yQ6 9acrxBoxM/LIE5yN4yvuialxnWzGewo63t6bZtTConO2T46ssA/py+NImK16Eg5T US533X5uq4emXAnFxAP1gQPFGosdNa7KUBLBfe2qiwIqITv5g3UJwZUjb/dEVcfs adgNkaqPQ+G2yhmhgfHKe9gmjTI31nxgjxqjwu3Cz0zjFozrBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgHJ4fP01WiWYvHHYvRpY+KGV1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODM2YTRhMDEtODE5Ny0z ZTRiLThhYWUtNTdkNjMxZWU4MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+AYyhkIeabu7uWW7Q2EQWzo6edvYVCV2KDnPPRL6+ykbyNAEXmL6CS HtNzoqU8sR0vDe5eeBp+WPavdBbA/FPzQOLx8nB5llTb1P2uumm6dd7T0x2NjWsl E1bflB2/G2CFKrDSF2DbBedCncpjv3QX8DMVoHeOb7E5UAAdd98B4YqilFygKS5g gbIUwwlhK7puXT3eMEzWOv332pkngcymTXRCeg1a2IWkAIsQf3uSFDCySwm94cTx lRSZKxWD8uBpt7zO1oGBsSn6If4HzBJpBd1fbWRBVdLhJlVn+4Glxa/fp68Bziwj lOWlVPLo9pQO3ZHhgVsX67CvSHo8AuA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org