$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa File: 20ed8e04-a83d-3139-937f-62183b6e5173.roa (raw, json) Hash identifier: Z2rao4t6hcGB0/F4RtqJzqdWhJAH3g61fbkinCVlDl4= Subject key identifier: 7E:5B:BF:FD:FD:BF:A1:7E:E1:A4:29:B1:74:73:12:8D:80:F0:2C:B9 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285847AE36B23F55E77507A8E72480 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 33442 IP address blocks: 149.23.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:b2:3f:55:e7:75:07:a8:e7:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=ac54a87b-e220-4348-be1c-d4f44bf0be79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:6e:ed:74:62:1b:c6:61:4c:e8:2d:9e:2d: 8d:7a:61:79:14:30:65:02:4e:26:8b:44:f0:fa:fe: ef:f4:4b:bf:7f:97:35:a4:b9:2b:ec:af:68:e7:db: bd:f6:ce:82:17:c8:f2:36:54:d0:b3:8a:24:b8:1a: a9:2f:03:d5:0e:14:70:89:9f:06:ae:50:02:cc:76: 00:e4:e1:1d:f0:b9:e4:7d:4e:d3:13:c6:92:37:75: 16:d1:64:23:50:ab:57:21:88:b6:4a:8e:04:88:df: 6a:49:9c:48:2b:31:98:f7:ea:6e:20:4c:84:11:24: 43:92:27:af:8d:7a:5a:41:74:54:20:2a:e7:a8:06: 69:09:ea:e0:31:af:b4:d5:ef:93:53:ca:86:54:4f: 2b:db:87:0a:60:5e:bb:70:16:40:7f:f5:d9:6d:01: 47:bf:0b:86:d8:51:70:54:e1:77:b4:63:dd:ff:59: 54:09:ee:cf:62:d9:4b:57:76:de:d2:e0:59:d9:2c: 04:2d:a2:1a:d3:47:71:d3:c2:e3:7f:e7:48:85:91: 6d:8d:44:01:0e:b5:1d:91:7a:c7:0f:42:c0:47:a5: 4a:bd:a1:6f:aa:79:55:0b:d5:20:ea:9e:60:6a:17: 6b:b1:08:ee:4f:1b:8b:8b:3c:69:10:eb:15:4a:6c: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5B:BF:FD:FD:BF:A1:7E:E1:A4:29:B1:74:73:12:8D:80:F0:2C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6a:3d:3e:b6:13:e0:13:d0:5b:c2:84:ce:d2:cb:b6:95:63: 0d:14:2e:15:fb:55:96:f0:5e:a1:2b:69:46:c1:36:e5:67:06: a9:65:ff:a1:7f:21:6b:99:5a:60:ca:d9:54:1b:bf:5a:6d:35: b5:e5:09:69:ae:0a:ba:94:69:5c:a8:6b:91:35:32:44:a4:a7: 56:5d:b9:72:21:16:9a:35:45:0c:33:b6:28:e3:06:0b:e0:28: 2c:9b:8e:80:30:b0:1e:65:35:41:5b:47:05:2a:7c:19:7e:b7: ab:13:9e:61:45:dc:14:dd:e6:ae:0c:b9:2e:f1:0d:53:65:22: 46:93:ff:22:4d:11:57:da:66:80:c8:44:1a:cb:6a:15:e6:df: 3f:2a:6a:bf:3e:b3:35:31:50:14:70:9c:c1:24:48:44:87:94: ea:ca:8b:26:0a:0b:47:69:7d:6b:27:55:b8:d4:6a:f1:35:d8: 6a:3c:50:19:0d:14:a3:1f:ea:6a:03:5a:fe:ea:32:e3:46:39: 46:a7:7b:b3:18:68:56:2b:9e:b7:e6:c5:ce:56:99:5d:46:3e: 85:d4:f8:ad:77:11:d9:99:91:c8:c5:99:44:5b:25:36:11:dc: a7:0e:39:6d:b0:8d:eb:23:1e:d1:84:96:27:1f:d5:1f:14:d5: 2d:9c:79:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNrI/Ved1B6jnJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YWM1NGE4N2ItZTIyMC00MzQ4LWJlMWMtZDRmNDRiZjBiZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPhu7XRiG8ZhTOgtni2NemF5FDBlAk4mi0Tw +v7v9Eu/f5c1pLkr7K9o59u99s6CF8jyNlTQs4okuBqpLwPVDhRwiZ8GrlACzHYA 5OEd8LnkfU7TE8aSN3UW0WQjUKtXIYi2So4EiN9qSZxIKzGY9+puIEyEESRDkiev jXpaQXRUICrnqAZpCergMa+01e+TU8qGVE8r24cKYF67cBZAf/XZbQFHvwuG2FFw VOF3tGPd/1lUCe7PYtlLV3be0uBZ2SwELaIa00dx08Ljf+dIhZFtjUQBDrUdkXrH D0LAR6VKvaFvqnlVC9Ug6p5gahdrsQjuTxuLizxpEOsVSmxftQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5bv/39v6F+4aQpsXRzEo2A8Cy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMjBlZDhlMDQtYTgzZC0z MTM5LTkzN2YtNjIxODNiNmU1MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVqPT62E+AT0FvChM7Sy7aVYw0ULhX7VZbwXqEraUbBNuVnBqll/6F/ IWuZWmDK2VQbv1ptNbXlCWmuCrqUaVyoa5E1MkSkp1ZduXIhFpo1RQwztijjBgvg KCybjoAwsB5lNUFbRwUqfBl+t6sTnmFF3BTd5q4MuS7xDVNlIkaT/yJNEVfaZoDI RBrLahXm3z8qar8+szUxUBRwnMEkSESHlOrKiyYKC0dpfWsnVbjUavE12Go8UBkN FKMf6moDWv7qMuNGOUane7MYaFYrnrfmxc5WmV1GPoXU+K13EdmZkcjFmURbJTYR 3KcOOW2wjesjHtGElicf1R8U1S2ceac= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org