$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa File: 832a3037-6f58-31ad-97d9-1d5379dadd18.roa (raw, json) Hash identifier: /wjusL6gwnLfdwrzwzYNXBUmggbmpxR0bWpwxXv3kDQ= Subject key identifier: 3C:13:4A:4C:6B:B1:49:FA:68:57:92:42:19:23:2F:6A:8A:79:27:D4 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F432858450EEACE49F53028D6E7ADBB80 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa Signing time: Fri 01 Mar 2024 02:00:27 +0000 ROA not before: Fri 01 Mar 2024 02:00:27 +0000 ROA not after: Thu 30 May 2024 01:00:27 +0000 asID: 33442 IP address blocks: 149.23.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0e:ea:ce:49:f5:30:28:d6:e7:ad:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Mar 1 02:00:27 2024 GMT Not After : May 30 01:00:27 2024 GMT Subject: CN=3f9ee0a7-369f-40d8-a357-a08faa4395be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:c4:95:43:c3:a2:39:3d:5b:53:14:72:64: 7f:c2:c8:05:0e:aa:72:a9:39:c2:45:3d:25:02:68: fa:9a:07:2f:60:c3:69:59:b9:9b:dc:d5:ec:43:c3: db:ed:5f:86:f2:11:b7:7e:44:94:70:22:79:95:07: 5e:cb:d9:87:ec:82:55:46:6e:b6:68:86:e3:8e:ef: ca:03:55:56:0c:25:5c:83:4b:9f:8f:7d:dc:6b:3f: 5e:86:43:9b:ce:46:47:ee:66:1e:34:1d:4e:66:f6: 9b:b1:ea:61:df:ff:0c:4a:45:ee:a9:41:27:52:ef: 37:58:ac:80:1d:f9:bb:ee:1c:1b:05:20:04:1b:63: 26:c5:be:c2:e2:c4:82:30:ab:fe:a2:72:d7:91:9b: 8b:28:2e:d2:ec:52:7f:ec:d2:2d:56:88:bc:6b:66: 58:30:e3:8e:7f:fe:b4:f3:e5:ab:17:5d:6a:38:79: ef:17:94:cb:c7:c2:38:af:cf:b3:17:ca:ae:80:4f: f7:36:60:53:85:32:fe:84:17:73:48:19:95:e3:8d: dc:50:58:c3:77:83:c1:e0:bd:28:b2:02:f5:9b:9b: 5a:cf:a9:02:72:2f:11:44:63:1a:8d:6d:93:a7:4e: 5b:10:bb:1d:b9:e5:fc:05:2e:2f:fa:a5:22:53:32: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:13:4A:4C:6B:B1:49:FA:68:57:92:42:19:23:2F:6A:8A:79:27:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:02:1e:61:87:3e:d5:22:91:d8:38:5a:8c:39:7c:81:61:25: 57:48:11:a9:fb:24:12:e6:73:a0:e3:9f:b9:a9:27:7b:0a:d8: 34:46:29:47:6d:43:ea:29:1b:06:0b:74:aa:f2:78:e4:99:dd: 94:ce:4b:d1:cc:e6:ed:5d:55:c0:d6:a1:5e:2a:61:8f:61:58: 05:e4:07:dd:c1:68:83:11:69:3b:bf:0d:01:5d:53:8d:77:b0: 3c:f6:ad:f1:39:86:8d:b8:49:32:fd:6d:1d:d2:fe:dd:b3:30: db:43:31:62:e2:a4:b8:17:a3:61:16:fd:52:1d:32:f7:34:3e: 80:46:84:99:c6:d2:14:f3:26:82:33:b2:8b:29:58:d4:7d:0e: 35:4a:64:df:87:1a:04:57:a5:ca:a8:67:04:a9:59:32:e8:2a: 11:97:f5:d1:5d:62:dc:35:80:a8:c7:5f:66:fc:78:19:b4:9d: f2:d7:0f:cd:72:95:56:1a:bf:31:0a:1d:ba:26:5d:ed:e1:5d: 07:94:d0:c8:76:a4:30:f3:cc:80:7d:28:e5:a0:0e:73:ce:c5: 53:e5:27:2f:44:4c:53:25:c4:1b:1d:c9:bd:e3:6b:3a:4e:51: 3d:d8:1e:86:03:b5:9f:18:2e:00:99:cc:07:1a:06:9a:ca:55: 49:28:57:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUO6s5J9TAo1uetu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk M2Y5ZWUwYTctMzY5Zi00MGQ4LWEzNTctYTA4ZmFhNDM5NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGrElUPDojk9W1MUcmR/wsgFDqpyqTnCRT0l Amj6mgcvYMNpWbmb3NXsQ8Pb7V+G8hG3fkSUcCJ5lQdey9mH7IJVRm62aIbjju/K A1VWDCVcg0ufj33caz9ehkObzkZH7mYeNB1OZvabseph3/8MSkXuqUEnUu83WKyA Hfm77hwbBSAEG2Mmxb7C4sSCMKv+onLXkZuLKC7S7FJ/7NItVoi8a2ZYMOOOf/60 8+WrF11qOHnvF5TLx8I4r8+zF8qugE/3NmBThTL+hBdzSBmV443cUFjDd4PB4L0o sgL1m5taz6kCci8RRGMajW2Tp05bELsdueX8BS4v+qUiUzJMtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwTSkxrsUn6aFeSQhkjL2qKeSfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvODMyYTMwMzctNmY1OC0z MWFkLTk3ZDktMWQ1Mzc5ZGFkZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACICHmGHPtUikdg4Wow5fIFhJVdIEan7JBLmc6Djn7mpJ3sK2DRGKUdt Q+opGwYLdKryeOSZ3ZTOS9HM5u1dVcDWoV4qYY9hWAXkB93BaIMRaTu/DQFdU413 sDz2rfE5ho24STL9bR3S/t2zMNtDMWLipLgXo2EW/VIdMvc0PoBGhJnG0hTzJoIz sospWNR9DjVKZN+HGgRXpcqoZwSpWTLoKhGX9dFdYtw1gKjHX2b8eBm0nfLXD81y lVYavzEKHbomXe3hXQeU0Mh2pDDzzIB9KOWgDnPOxVPlJy9ETFMlxBsdyb3jazpO UT3YHoYDtZ8YLgCZzAcaBprKVUkoV5c= -----END CERTIFICATE-----Generated at Fri May 10 06:10:01 2024 by rpki-client on console-fra.rpki-client.org