$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa File: 42ca2390-8cdd-3071-9349-acf8de5d2be1.roa (raw, json) Hash identifier: k88SAOrZ66f/EBYV6RQSw/8M93NHkCI7cz7QeaBCJos= Subject key identifier: 79:1B:F5:E2:AE:D5:97:AD:B8:99:A3:8E:23:5A:05:65:06:B3:B0:49 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285847B3CC1289ED9F290C6AE448C0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 33442 IP address blocks: 149.23.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:12:89:ed:9f:29:0c:6a:e4:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=62b10ab7-020b-4cb6-a215-cd8c0b4fb824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:23:fd:1a:50:fb:92:5b:f0:01:35:1c:8f:9b: 3c:19:38:59:70:40:82:83:58:75:cd:88:c0:30:63: 4b:9a:c3:f7:37:90:00:5e:1a:66:37:f7:bb:25:f5: c9:a9:71:77:17:51:03:05:b4:c0:26:5e:d1:94:db: 4f:bf:16:10:58:b8:b8:46:ec:a6:39:7a:cf:31:08: 11:d1:70:3a:c5:4f:66:c1:f7:03:e2:6e:01:c2:35: cb:15:1c:05:38:26:3c:3a:01:7b:ab:93:6a:50:a4: 49:aa:6c:a0:2f:28:1d:4d:17:b8:67:8f:32:62:20: a1:0a:5c:ee:fe:b9:93:9c:0f:06:a3:b5:78:37:41: 2b:47:ce:6e:ef:8d:4a:fe:b4:ba:56:6f:fb:3b:ba: ca:2d:16:b2:ae:7b:83:5f:f6:fa:b1:b6:ee:2f:15: 48:72:10:0f:b1:6c:31:03:cd:71:93:76:4d:c5:37: 13:a7:c5:52:ad:37:17:e0:25:81:4d:4d:a9:38:90: 17:be:4d:f5:a8:8a:f2:91:2a:0f:c4:5a:dd:5f:69: 5f:c9:08:53:bc:00:05:60:ae:67:8e:d3:cf:94:a9: 22:48:7c:02:33:a2:52:55:52:6b:ab:b2:e9:7e:5c: a7:56:e2:69:9b:19:c1:94:2a:43:99:a9:fe:be:67: 89:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:F5:E2:AE:D5:97:AD:B8:99:A3:8E:23:5A:05:65:06:B3:B0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:43:85:62:6e:97:27:ad:55:e9:c4:98:34:05:76:be:9f:6b: 7d:37:91:e4:b2:aa:4f:1e:a3:2f:d6:78:b1:c2:53:2c:ec:bb: 6d:0f:ba:f3:96:51:e9:44:08:b5:42:a6:a4:7e:7e:97:05:00: 7d:4b:de:d3:ed:18:e8:09:2c:8a:20:63:8d:a4:68:65:b4:04: 59:3d:6a:88:a9:2d:59:b7:fa:14:f1:65:9a:a7:b9:45:95:4f: fd:22:18:b9:c7:81:37:d9:8a:68:c2:71:f2:f0:e7:da:79:0d: 0e:9d:e4:8c:99:91:90:8e:4d:77:d7:ea:36:47:43:90:c4:b1: 48:57:cd:d7:57:a3:59:9b:2c:14:03:ff:2e:34:18:8d:1a:96: cc:58:7d:7f:f2:73:9f:e2:e5:2c:bc:67:0d:2e:08:f6:88:98: 3c:1d:33:00:23:36:fd:07:a4:a6:29:4b:39:fe:a3:29:90:7d: 78:9f:a6:bf:7c:dc:1b:63:58:0e:15:ef:12:61:f3:0e:84:82: af:9f:5e:76:fe:95:02:8a:54:7f:dd:87:e5:86:f9:41:ee:af: 80:f6:48:ee:47:50:5b:35:98:e8:a7:af:8f:e6:66:a1:95:be: 95:1f:b5:ae:2f:16:51:8e:92:a1:06:37:63:cf:01:22:53:e6: 1f:73:e3:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEezzBKJ7Z8pDGrkSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk NjJiMTBhYjctMDIwYi00Y2I2LWEyMTUtY2Q4YzBiNGZiODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSP9GlD7klvwATUcj5s8GThZcECCg1h1zYjA MGNLmsP3N5AAXhpmN/e7JfXJqXF3F1EDBbTAJl7RlNtPvxYQWLi4RuymOXrPMQgR 0XA6xU9mwfcD4m4BwjXLFRwFOCY8OgF7q5NqUKRJqmygLygdTRe4Z48yYiChClzu /rmTnA8Go7V4N0ErR85u741K/rS6Vm/7O7rKLRayrnuDX/b6sbbuLxVIchAPsWwx A81xk3ZNxTcTp8VSrTcX4CWBTU2pOJAXvk31qIrykSoPxFrdX2lfyQhTvAAFYK5n jtPPlKkiSHwCM6JSVVJrq7LpflynVuJpmxnBlCpDman+vmeJmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkb9eKu1ZetuJmjjiNaBWUGs7BJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNDJjYTIzOTAtOGNkZC0z MDcxLTkzNDktYWNmOGRlNWQyYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5DhWJulyetVenEmDQFdr6fa303keSyqk8eoy/WeLHCUyzsu20PuvOW UelECLVCpqR+fpcFAH1L3tPtGOgJLIogY42kaGW0BFk9aoipLVm3+hTxZZqnuUWV T/0iGLnHgTfZimjCcfLw59p5DQ6d5IyZkZCOTXfX6jZHQ5DEsUhXzddXo1mbLBQD /y40GI0alsxYfX/yc5/i5Sy8Zw0uCPaImDwdMwAjNv0HpKYpSzn+oymQfXifpr98 3BtjWA4V7xJh8w6Egq+fXnb+lQKKVH/dh+WG+UHur4D2SO5HUFs1mOinr4/mZqGV vpUfta4vFlGOkqEGN2PPASJT5h9z45Q= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org