$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa File: a958d35b-5bff-30c1-9a51-b65ae1791370.roa (raw, json) Hash identifier: NLqTFJIq2k8h3M4aBoTgeihmxTE0j6OZodUe0VZteR4= Subject key identifier: D9:A3:51:EF:A9:25:C5:8C:66:A2:E4:7D:30:42:E3:D4:23:AA:7B:FC Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285847EFEF7D1F5BCBC4D22244D180 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 396253 IP address blocks: 149.19.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:7d:1f:5b:cb:c4:d2:22:44:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=4f1e0a86-e2ee-4646-a7a1-70897c49ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:ce:44:0d:fe:fb:cd:7f:28:b3:b3:ff:80: 16:a5:f4:12:94:1e:c1:30:e8:35:28:3e:5d:8e:3b: 7b:0a:2f:19:30:70:22:84:6a:60:41:3a:20:a6:72: a8:d5:92:b2:e4:ff:1b:5e:d8:45:87:97:1d:19:11: 85:7a:ab:6f:4e:89:7f:40:6b:6a:62:64:89:61:ba: e7:b4:54:6e:1f:02:11:a5:e4:b6:05:07:39:fb:93: 57:a0:dc:f8:59:65:6f:2a:ca:b2:c3:d0:5b:e4:93: 27:fc:33:7d:1f:51:8c:2d:52:2c:56:e8:2f:7b:fc: 8b:cb:da:9d:85:d0:ed:fd:35:a1:e7:3c:42:9a:e1: 3b:e1:29:eb:f5:81:28:05:6e:05:23:4e:e2:d4:59: 6c:9c:51:b1:20:89:cd:9d:35:e2:5f:69:02:e9:a4: b5:42:09:f7:4a:08:d7:17:ef:87:be:d3:8c:f2:6b: d1:f5:70:30:74:a1:c4:12:f1:cd:55:79:8c:30:b2: f2:75:82:d0:91:28:a8:87:2e:88:63:1e:89:a3:a2: b9:11:47:5f:92:9b:33:d5:cd:d8:86:b3:94:6b:11: bc:20:d7:43:3e:28:5b:b7:ce:01:a7:74:93:44:fd: fb:65:07:5a:c9:a3:af:11:d0:18:e6:17:77:76:d3: a6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A3:51:EF:A9:25:C5:8C:66:A2:E4:7D:30:42:E3:D4:23:AA:7B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:48:1e:db:5f:fc:6c:69:3b:25:6d:14:67:af:5b:60:cf:8a: ea:11:21:43:aa:d3:50:1a:b7:0c:61:07:e6:92:b9:78:4c:0b: fa:5a:5f:f1:c6:5c:cd:fe:2c:10:d2:33:fd:0a:f5:86:90:ce: b1:82:0a:c5:a6:eb:92:53:98:6c:8f:ff:34:f1:56:27:c5:44: cf:48:1a:9f:96:72:71:45:ae:05:9e:3f:f0:cf:74:ac:bf:11: 49:78:62:c2:07:18:60:12:6c:3b:ec:60:84:2a:74:2c:7a:1a: eb:2b:8c:d4:2c:e8:2f:31:e8:e0:97:ea:55:da:ee:8a:10:68: 5d:99:b5:f5:fb:aa:67:46:b3:20:17:dc:36:9b:4c:a4:fe:41: 32:67:2f:d1:91:7c:74:d7:b3:14:27:de:ba:9e:45:e6:96:08: 4a:d4:6e:67:43:7f:4f:60:4f:6c:37:47:bb:17:c7:a3:f5:50: 56:b4:0d:58:6d:f0:01:27:a3:20:29:69:23:b4:2c:77:7a:f5: f2:a5:4d:51:ea:50:37:29:35:d1:f9:f1:0f:89:e0:90:05:04: 1e:74:5a:61:98:85:1c:49:65:e0:75:05:6e:5e:ee:da:1f:94: 01:20:57:c1:54:bf:2e:87:77:0e:69:bf:42:e3:ef:4a:80:eb: 94:75:fc:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv730fW8vE0iJE0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk NGYxZTBhODYtZTJlZS00NjQ2LWE3YTEtNzA4OTdjNDlmZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5DORA3++81/KLOz/4AWpfQSlB7BMOg1KD5d jjt7Ci8ZMHAihGpgQTogpnKo1ZKy5P8bXthFh5cdGRGFeqtvTol/QGtqYmSJYbrn tFRuHwIRpeS2BQc5+5NXoNz4WWVvKsqyw9Bb5JMn/DN9H1GMLVIsVugve/yLy9qd hdDt/TWh5zxCmuE74Snr9YEoBW4FI07i1FlsnFGxIInNnTXiX2kC6aS1Qgn3SgjX F++HvtOM8mvR9XAwdKHEEvHNVXmMMLLydYLQkSiohy6IYx6Jo6K5EUdfkpsz1c3Y hrOUaxG8INdDPihbt84Bp3STRP37ZQdayaOvEdAY5hd3dtOmkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmjUe+pJcWMZqLkfTBC49Qjqnv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTk1OGQzNWItNWJmZi0z MGMxLTlhNTEtYjY1YWUxNzkxMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFIHttf/GxpOyVtFGevW2DPiuoRIUOq01AatwxhB+aSuXhMC/paX/HG XM3+LBDSM/0K9YaQzrGCCsWm65JTmGyP/zTxVifFRM9IGp+WcnFFrgWeP/DPdKy/ EUl4YsIHGGASbDvsYIQqdCx6GusrjNQs6C8x6OCX6lXa7ooQaF2ZtfX7qmdGsyAX 3DabTKT+QTJnL9GRfHTXsxQn3rqeReaWCErUbmdDf09gT2w3R7sXx6P1UFa0DVht 8AEnoyApaSO0LHd69fKlTVHqUDcpNdH58Q+J4JAFBB50WmGYhRxJZeB1BW5e7tof lAEgV8FUvy6Hdw5pv0Lj70qA65R1/Os= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org