$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa File: 38342da4-e45f-3645-a61f-9ff395a6995d.roa (raw, json) Hash identifier: iQNhfLeTIxPPd12IK6XL55M3arK4EbhT76cM1eBgB/g= Subject key identifier: CE:05:1B:B1:D4:15:4F:ED:53:B2:B9:8B:E7:D1:59:F4:5F:E7:E9:0E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847ED24BE1AD9612B8CCA826F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 7018 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:be:1a:d9:61:2b:8c:ca:82:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=ff5b5b60-fc0e-4570-bb7d-278b655e7c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:19:dc:d3:6c:97:a9:72:f5:8d:af:06:d1: 14:c5:68:26:67:d2:3b:6d:83:28:e9:1f:c6:49:22: c1:72:40:db:84:3e:9d:b8:b7:66:c6:ea:5a:e3:9a: 75:ae:60:c0:5b:e4:25:cf:ce:1d:ef:60:b0:5d:b1: ac:0d:de:bc:9e:d7:a5:04:bf:0a:e9:eb:21:a3:e9: d1:c8:81:cb:b4:13:d4:a8:26:c2:b7:66:f6:41:6d: 66:dc:38:d1:33:ad:f7:07:9b:1b:b9:91:0d:03:b1: c5:ad:93:17:f6:cb:22:b0:96:f6:aa:ae:dc:d5:7b: 42:6b:6f:fd:63:17:79:32:2d:57:f1:0e:5e:36:15: ce:ae:dd:56:79:f7:4d:b2:24:e8:7d:0b:4c:38:a1: f8:df:b5:1b:8b:ed:8c:cc:98:9d:06:2d:70:a0:51: 41:6a:e3:c9:b6:05:b4:e0:d9:c2:74:2b:d5:e5:a8: 67:ac:73:e6:b4:26:ee:cd:e2:d9:45:b2:4f:72:11: 3f:30:6f:80:51:0d:53:91:c0:cf:a0:2a:d5:69:4c: e7:6d:08:54:5d:ef:e0:05:cd:21:e0:22:5b:2a:79: 21:fb:9a:f8:c7:c3:ef:2f:21:be:d9:7f:9a:d1:15: f1:49:ae:b6:66:cf:77:d7:2a:45:af:2e:6e:cd:64: ba:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:05:1B:B1:D4:15:4F:ED:53:B2:B9:8B:E7:D1:59:F4:5F:E7:E9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c4:da:ea:95:0d:5d:6f:dd:38:89:84:f0:ce:fb:d7:4d:3d: aa:15:fd:39:ae:b8:da:78:28:5b:f8:55:10:c2:50:5d:d5:a9: e1:e4:65:12:f9:5b:38:64:d8:de:05:c3:0c:df:bb:83:c9:be: 25:df:3e:b2:9c:06:69:4f:0f:1f:4d:77:b3:08:81:ca:f8:09: fc:b3:c7:40:b6:09:8c:94:90:25:7e:64:ff:d3:b0:c4:ec:ea: e0:a4:40:2b:6b:85:3d:68:1f:88:c1:65:38:77:66:a6:66:7c: c1:76:1c:aa:58:37:20:83:c9:97:90:cf:5e:17:db:44:9b:64: 9f:3a:98:73:70:ef:64:1c:d3:2a:49:c7:f6:29:4d:c5:d6:7a: 2d:1f:e2:14:9c:35:87:b1:78:41:78:28:44:56:c3:26:80:e5: 72:c9:e4:b9:b2:e6:ef:df:1f:ca:18:b2:b0:21:f4:59:42:b8: 5e:12:ec:44:d3:cb:13:0c:e3:02:a8:b8:09:58:c6:99:89:61: cd:8f:7c:b8:87:69:0b:67:e7:8d:15:5d:6a:ac:47:34:51:03: 20:6d:e8:d2:14:cd:21:b3:8e:b4:44:fd:70:96:27:21:58:d2: 6f:4f:de:bf:37:4a:af:23:f3:8e:02:0b:52:6d:a3:97:82:1c: 1b:3c:cc:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJL4a2WErjMqCb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZmY1YjViNjAtZmMwZS00NTcwLWJiN2QtMjc4YjY1NWU3YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MEZ3NNsl6ly9Y2vBtEUxWgmZ9I7bYMo6R/G SSLBckDbhD6duLdmxupa45p1rmDAW+Qlz84d72CwXbGsDd68ntelBL8K6esho+nR yIHLtBPUqCbCt2b2QW1m3DjRM633B5sbuZENA7HFrZMX9ssisJb2qq7c1XtCa2/9 Yxd5Mi1X8Q5eNhXOrt1WefdNsiTofQtMOKH437Ubi+2MzJidBi1woFFBauPJtgW0 4NnCdCvV5ahnrHPmtCbuzeLZRbJPchE/MG+AUQ1TkcDPoCrVaUznbQhUXe/gBc0h 4CJbKnkh+5r4x8PvLyG+2X+a0RXxSa62Zs931ypFry5uzWS6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4FG7HUFU/tU7K5i+fRWfRf5+kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzgzNDJkYTQtZTQ1Zi0z NjQ1LWE2MWYtOWZmMzk1YTY5OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDE2uqVDV1v3TiJhPDO+9dNPaoV/TmuuNp4KFv4VRDCUF3VqeHkZRL5 Wzhk2N4Fwwzfu4PJviXfPrKcBmlPDx9Nd7MIgcr4Cfyzx0C2CYyUkCV+ZP/TsMTs 6uCkQCtrhT1oH4jBZTh3ZqZmfMF2HKpYNyCDyZeQz14X20SbZJ86mHNw72Qc0ypJ x/YpTcXWei0f4hScNYexeEF4KERWwyaA5XLJ5Lmy5u/fH8oYsrAh9FlCuF4S7ETT yxMM4wKouAlYxpmJYc2PfLiHaQtn540VXWqsRzRRAyBt6NIUzSGzjrRE/XCWJyFY 0m9P3r83Sq8j844CC1Jto5eCHBs8zE4= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org