$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa File: 32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa (raw, json) Hash identifier: mn4YVHcvhvMCl/rMgaKhmiQailLMbfV9ru6QKPsAOHw= Subject key identifier: BE:40:3A:E4:39:D4:66:52:F2:5C:8A:F2:B5:93:3D:DC:CA:47:C5:03 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847A5D6AC17454620F659410040 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 7018 IP address blocks: 149.143.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:ac:17:45:46:20:f6:59:41:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=e3bbe890-f5e3-4b6f-809c-7e16c795a44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:56:9f:be:83:3e:30:d9:39:33:06:5a:2d:46: 7e:2d:83:95:99:bf:f8:96:84:3c:7b:60:33:40:79: 7b:f0:55:54:4b:58:ee:d3:20:c6:94:d2:46:db:58: 71:da:66:33:61:33:67:4d:8a:ec:5f:cc:1d:ed:8b: 51:f2:75:6e:90:cd:12:dc:d7:c5:f5:aa:3f:bf:5c: a2:02:c6:97:8a:ca:03:4b:b6:3f:6a:48:2d:b5:06: 41:47:4f:c9:fe:08:68:1b:49:fe:95:9e:a5:01:45: d0:64:08:51:c7:b8:a1:e7:f1:0e:23:1e:3d:30:3b: da:37:d7:1a:d5:16:22:b2:be:d8:1f:21:bc:96:94: 41:00:06:6d:43:bc:b1:32:71:af:29:59:ce:de:cd: a8:de:33:e4:0d:9f:96:54:7e:35:75:0c:5b:33:8f: ab:f6:b0:15:36:76:3e:34:13:84:15:76:b5:a7:fd: d0:5c:1a:e1:bf:e0:14:34:68:9f:b5:7a:04:ed:6f: 16:b3:76:ac:cc:8f:14:e5:1e:36:85:df:e1:8b:57: fb:79:16:e8:15:59:e9:88:f1:95:9f:ec:70:1a:c1: e0:2f:64:6a:ee:8d:33:36:9a:d0:01:f6:e0:22:ce: 43:72:0f:88:b3:1f:0d:e0:73:87:d6:c2:c3:1a:1d: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:40:3A:E4:39:D4:66:52:F2:5C:8A:F2:B5:93:3D:DC:CA:47:C5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:33:be:8d:e6:72:8b:ae:b0:2e:9a:e6:73:e0:05:ff:1e:32: 49:b5:ba:af:f7:4f:dd:86:b1:04:de:87:df:2f:88:90:44:e3: c1:7b:ab:f1:04:84:b0:93:6c:3c:87:26:cc:c3:0a:eb:5c:16: 99:a4:a4:a9:ad:b3:21:5b:60:6f:a0:2b:4d:4a:9c:a2:29:9b: ee:22:10:c4:2c:28:24:9b:b4:3b:dd:e0:9a:41:a7:95:b4:e8: d9:96:f5:e2:b0:7d:2c:7b:fa:fd:98:55:9d:34:e9:2b:28:70: 31:0c:3c:3a:19:1c:2d:0b:76:e4:84:79:2f:ca:50:dd:07:1e: bc:32:bc:6a:bf:86:40:1c:ea:56:a0:75:21:9b:1f:21:46:ee: 1e:70:27:cb:33:d1:53:4c:59:12:5b:44:5f:b0:ea:5e:1b:37: 3d:7e:35:1a:04:fb:15:ba:9b:be:08:c2:e7:81:a1:e4:d4:64: c1:ef:c4:e3:33:c1:b9:4f:dc:77:d8:c3:e6:2a:8e:8d:0e:b9: 06:97:05:e1:68:e4:a0:e5:b3:4b:ad:42:d8:e4:1a:5d:b6:2c: de:09:4d:19:9c:b6:ef:b9:55:e3:d6:f8:7b:a6:ec:70:3f:68: ae:02:28:de:17:ac:93:ec:cb:94:ba:b8:4d:74:05:f4:7f:44: 2d:1c:45:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qwXRUYg9llBAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZTNiYmU4OTAtZjVlMy00YjZmLTgwOWMtN2UxNmM3OTVhNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VafvoM+MNk5MwZaLUZ+LYOVmb/4loQ8e2Az QHl78FVUS1ju0yDGlNJG21hx2mYzYTNnTYrsX8wd7YtR8nVukM0S3NfF9ao/v1yi AsaXisoDS7Y/akgttQZBR0/J/ghoG0n+lZ6lAUXQZAhRx7ih5/EOIx49MDvaN9ca 1RYisr7YHyG8lpRBAAZtQ7yxMnGvKVnO3s2o3jPkDZ+WVH41dQxbM4+r9rAVNnY+ NBOEFXa1p/3QXBrhv+AUNGiftXoE7W8Ws3aszI8U5R42hd/hi1f7eRboFVnpiPGV n+xwGsHgL2Rq7o0zNprQAfbgIs5Dcg+Isx8N4HOH1sLDGh3i+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5AOuQ51GZS8lyK8rWTPdzKR8UDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzJlN2FjMjItNGIzYi0z MWMwLWIxODEtOWIwYmU5ZDgwYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGszvo3mcouusC6a5nPgBf8eMkm1uq/3T92GsQTeh98viJBE48F7q/EE hLCTbDyHJszDCutcFpmkpKmtsyFbYG+gK01KnKIpm+4iEMQsKCSbtDvd4JpBp5W0 6NmW9eKwfSx7+v2YVZ006SsocDEMPDoZHC0LduSEeS/KUN0HHrwyvGq/hkAc6lag dSGbHyFG7h5wJ8sz0VNMWRJbRF+w6l4bNz1+NRoE+xW6m74IwueBoeTUZMHvxOMz wblP3HfYw+Yqjo0OuQaXBeFo5KDls0utQtjkGl22LN4JTRmctu+5VePW+Hum7HA/ aK4CKN4XrJPsy5S6uE10BfR/RC0cRVQ= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org