$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa File: 91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa (raw, json) Hash identifier: n7EISFq6gZQMwa5n8rx/H/HgBzgo4B8YYaq814J3PnA= Subject key identifier: 91:06:9E:0F:32:C4:53:46:3F:3D:C9:D7:26:33:A6:FD:65:3B:0C:6C Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F43285847643B7369F5C484CBBC9CA300 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 3462 IP address blocks: 149.117.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:73:69:f5:c4:84:cb:bc:9c:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=5f2951f5-9c71-479f-a0f4-1371c741857f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0c:91:0c:59:2a:b7:e9:48:34:83:5f:71:58: fd:80:d1:c7:7f:06:dc:f2:df:d5:b9:1d:7c:a7:ce: 08:c7:88:44:3f:7c:bc:0c:a1:fd:c0:f3:d9:d5:46: 9f:c6:f6:89:a3:3b:23:e7:66:64:8e:f9:f3:5c:6c: f4:ad:26:ef:c1:c4:37:12:cd:ed:a8:55:ee:4b:e5: bf:26:94:fb:10:9a:83:df:24:00:44:76:1c:c4:24: d0:3c:4b:1a:0e:92:8d:ad:17:6d:2a:a5:42:92:ad: 4c:fe:a6:c7:cb:7b:ca:d7:31:a6:99:31:4b:9a:c3: 34:dd:19:cd:c7:c2:f6:40:eb:70:ad:68:71:a6:e5: 0a:54:d7:12:3b:a2:00:8f:9d:4e:41:c5:5e:b3:70: 96:09:60:1b:90:10:7e:da:6a:39:34:26:07:5b:7d: 55:00:89:a0:bf:fb:29:90:16:32:b8:14:a7:2d:54: 0d:97:c2:66:f8:fd:4c:79:24:a8:6c:2e:e6:21:ae: 8f:f7:f5:41:f8:9d:b2:63:0f:8c:20:a6:3c:11:74: 4e:e0:ca:c1:02:07:87:2c:9b:d4:1c:a2:29:1b:bb: e8:83:3c:2d:58:97:08:9e:26:1f:3e:2d:4f:50:6f: 6f:40:4c:ca:8e:dc:1f:fe:f5:1c:3e:36:e0:da:08: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:06:9E:0F:32:C4:53:46:3F:3D:C9:D7:26:33:A6:FD:65:3B:0C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:81:68:64:0a:da:c8:9d:66:ff:3d:3a:4a:78:7f:74:ca:93: 8d:1e:c7:ed:67:a0:1d:c8:74:27:33:48:23:49:6c:a4:c8:a6: 25:56:b4:40:ef:6a:1d:9a:ee:b1:f0:4b:1f:98:2e:a1:1a:58: da:a2:3c:b6:5e:9f:ba:40:fa:de:56:f6:d5:96:e4:7b:26:af: 38:d0:38:e7:12:49:23:cc:d2:d4:e8:54:15:fa:49:e7:db:81: 36:eb:c7:fb:83:e4:ea:47:36:2a:cd:25:5f:62:91:54:90:5b: 18:69:6e:6d:73:05:ca:ef:aa:59:0c:ba:a1:0a:b4:c5:84:00: 11:71:58:13:98:f3:54:69:96:fa:46:58:f4:24:bc:eb:31:54: b7:27:2a:63:f7:08:df:e2:40:2e:af:8f:8f:5e:d5:56:75:a3: 41:76:e2:a7:cb:de:7a:d9:05:44:7c:7b:70:87:4f:ef:03:37: 92:ee:5c:4d:28:ed:e1:34:ed:2d:2c:59:33:a8:6d:66:9a:06: 40:6c:31:ae:5d:70:88:ac:e2:5a:3b:36:c1:ff:c5:b3:35:3a: 22:10:04:2e:46:ab:71:83:4e:c8:08:02:35:7b:fb:22:21:09: 73:46:6f:98:18:3c:80:0a:c1:46:db:47:fb:c5:9d:0c:62:76: 39:27:6a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO3Np9cSEy7ycowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk NWYyOTUxZjUtOWM3MS00NzlmLWEwZjQtMTM3MWM3NDE4NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAyRDFkqt+lININfcVj9gNHHfwbc8t/VuR18 p84Ix4hEP3y8DKH9wPPZ1UafxvaJozsj52ZkjvnzXGz0rSbvwcQ3Es3tqFXuS+W/ JpT7EJqD3yQARHYcxCTQPEsaDpKNrRdtKqVCkq1M/qbHy3vK1zGmmTFLmsM03RnN x8L2QOtwrWhxpuUKVNcSO6IAj51OQcVes3CWCWAbkBB+2mo5NCYHW31VAImgv/sp kBYyuBSnLVQNl8Jm+P1MeSSobC7mIa6P9/VB+J2yYw+MIKY8EXRO4MrBAgeHLJvU HKIpG7vogzwtWJcIniYfPi1PUG9vQEzKjtwf/vUcPjbg2gi9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEGng8yxFNGPz3J1yYzpv1lOwxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOTFlMjA5YjktYjZjOC0z ZTk3LTlhNWYtMzBlYjE2MmY2ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSBaGQK2sidZv89Okp4f3TKk40ex+1noB3IdCczSCNJbKTIpiVWtEDv ah2a7rHwSx+YLqEaWNqiPLZen7pA+t5W9tWW5HsmrzjQOOcSSSPM0tToVBX6Sefb gTbrx/uD5OpHNirNJV9ikVSQWxhpbm1zBcrvqlkMuqEKtMWEABFxWBOY81RplvpG WPQkvOsxVLcnKmP3CN/iQC6vj49e1VZ1o0F24qfL3nrZBUR8e3CHT+8DN5LuXE0o 7eE07S0sWTOobWaaBkBsMa5dcIis4lo7NsH/xbM1OiIQBC5Gq3GDTsgIAjV7+yIh CXNGb5gYPIAKwUbbR/vFnQxidjknags= -----END CERTIFICATE-----Generated at Sun Nov 24 20:10:13 2024 by rpki-client on console-ams.rpki-client.org