$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa File: a21f29a1-e715-3d1f-bd89-c419d22db812.roa (raw, json) Hash identifier: XGcuACegbzBVWKsclDYWQt3DFM2ke7PMR0C1PRY70MY= Subject key identifier: 86:48:5C:C6:47:1C:05:79:27:C2:6D:2F:37:FC:66:A8:BD:4F:CF:5A Certificate issuer: /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Certificate serial: 010D0C9F432858478CB680BE05E938AE59295700 Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 985 IP address blocks: 149.112.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:80:be:05:e9:38:ae:59:29:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=65fb5db5-b4ba-4b0f-ac26-fcae1ab3610b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:cf:6b:48:09:19:41:86:34:9f:43:13:ec: 66:d7:80:09:b6:77:04:fb:a8:6b:c5:23:42:b6:5a: 5c:c5:c3:b1:93:12:5e:38:1a:9c:da:c9:ef:00:5a: b7:98:f6:4c:b3:5d:cb:cf:25:1d:27:45:8c:e9:5f: 2c:fd:36:a2:38:4a:98:0d:83:13:a1:d2:e5:4c:be: 5b:92:4d:ca:80:45:f2:81:9f:e8:c5:dc:f9:88:e1: 46:97:7c:e2:4c:d5:3a:02:48:3f:68:f8:2b:f5:64: 2f:3c:2a:db:7c:f6:28:d8:14:e8:89:61:18:72:0e: 4c:d4:5a:26:a0:81:dc:d6:9f:25:f5:4e:c6:66:0d: 34:b4:cd:ed:be:25:33:d8:19:c2:a8:aa:e8:fe:30: 4f:95:39:a8:6e:af:12:6d:37:1b:f0:15:d4:75:08: 50:3f:4e:13:8f:3d:37:84:55:14:17:0c:00:7f:22: 1b:dc:a3:82:39:5d:b1:72:68:db:1f:36:d2:a1:51: 58:5a:cc:be:93:f5:70:5f:5b:a6:cf:06:5d:da:d5: 2e:52:b2:21:04:23:b6:71:11:39:c7:c9:32:a3:9b: 73:55:21:68:9b:42:16:77:f7:b7:f5:44:45:94:1a: ed:80:66:43:f0:56:dd:06:a3:fd:7f:c9:d5:51:5c: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:48:5C:C6:47:1C:05:79:27:C2:6D:2F:37:FC:66:A8:BD:4F:CF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/a21f29a1-e715-3d1f-bd89-c419d22db812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl X509v3 Authority Key Identifier: keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer sbgp-ipAddrBlock: critical IPv4: 149.112.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a7:52:06:3a:85:1d:17:8d:bd:72:89:9a:a5:02:41:2a:e4: 38:0a:5e:89:76:f5:30:f2:f2:a9:30:05:8b:cd:a5:14:dc:ba: 69:d4:c8:99:1f:26:ee:6a:a0:ca:15:61:22:a1:47:e1:a1:1c: b3:05:a5:27:14:99:c3:03:e7:58:87:e9:9c:85:cf:77:c9:5f: d5:61:df:98:1a:3f:d5:c4:fa:95:45:eb:35:93:46:fe:73:69: ab:71:53:41:f0:fb:b6:58:83:b2:dd:24:62:41:0d:12:fa:50: b7:54:0d:34:27:20:b3:34:ef:19:a5:ec:51:9b:fb:e4:28:25: 11:96:39:48:d7:7d:61:ac:42:15:2b:dd:09:77:9f:00:1b:09: d1:b4:29:da:c7:26:7b:de:9d:15:a6:73:01:bd:19:03:cf:8b: a9:5e:90:03:89:59:28:4d:20:79:9a:cd:fd:70:62:54:2b:e1: e3:ab:fc:11:fd:4b:ad:7e:95:1e:e7:61:04:f1:7a:63:bf:a0: 05:a2:9c:4b:50:d7:cf:f8:e0:17:30:69:c8:04:19:f3:0d:06: dc:ec:cb:16:96:b7:e3:d8:73:ef:77:25:50:66:ce:65:2b:c2: ee:67:70:e9:fc:1d:0a:3c:81:83:f1:3f:3a:ea:5c:d2:e1:31: 97:a8:b1:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtoC+Bek4rlkpVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm YjhjMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk NjVmYjVkYjUtYjRiYS00YjBmLWFjMjYtZmNhZTFhYjM2MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPvPa0gJGUGGNJ9DE+xm14AJtncE+6hrxSNC tlpcxcOxkxJeOBqc2snvAFq3mPZMs13LzyUdJ0WM6V8s/TaiOEqYDYMTodLlTL5b kk3KgEXygZ/oxdz5iOFGl3ziTNU6Akg/aPgr9WQvPCrbfPYo2BToiWEYcg5M1Fom oIHc1p8l9U7GZg00tM3tviUz2BnCqKro/jBPlTmobq8SbTcb8BXUdQhQP04Tjz03 hFUUFwwAfyIb3KOCOV2xcmjbHzbSoVFYWsy+k/VwX1umzwZd2tUuUrIhBCO2cRE5 x8kyo5tzVSFom0IWd/e39URFlBrtgGZD8FbdBqP9f8nVUVzyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZIXMZHHAV5J8JtLzf8Zqi9T89aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4 YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvYTIxZjI5YTEtZTcxNS0z ZDFmLWJkODktYzQxOWQyMmRiODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2 ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj NGU0NmZiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFenUgY6hR0Xjb1yiZqlAkEq5DgKXol29TDy8qkwBYvNpRTcumnUyJkf Ju5qoMoVYSKhR+GhHLMFpScUmcMD51iH6ZyFz3fJX9Vh35gaP9XE+pVF6zWTRv5z aatxU0Hw+7ZYg7LdJGJBDRL6ULdUDTQnILM07xml7FGb++QoJRGWOUjXfWGsQhUr 3Ql3nwAbCdG0KdrHJnvenRWmcwG9GQPPi6lekAOJWShNIHmazf1wYlQr4eOr/BH9 S61+lR7nYQTxemO/oAWinEtQ18/44BcwacgEGfMNBtzsyxaWt+PYc+93JVBmzmUr wu5ncOn8HQo8gYPxPzrqXNLhMZeosek= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:43 2024 by rpki-client on console-fra.rpki-client.org