$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/544454e1-7b81-3bd5-8608-bb5a53a05170.roa File: 544454e1-7b81-3bd5-8608-bb5a53a05170.roa (raw, json) Hash identifier: vc46tQf2Rx9LkPYvFF2uzsfsUpwwCT4VSuphwF24JhE= Subject key identifier: 8B:C0:13:44:10:F8:BC:FB:32:E2:9F:D7:98:30:CF:91:EA:7C:F9:E1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847EB8CE0B02CFFA92E3F52FC00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/544454e1-7b81-3bd5-8608-bb5a53a05170.roa Signing time: Mon 18 Nov 2024 12:18:46 +0000 ROA not before: Mon 18 Nov 2024 12:18:46 +0000 ROA not after: Sun 16 Feb 2025 12:18:46 +0000 asID: 28920 IP address blocks: 149.143.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:eb:8c:e0:b0:2c:ff:a9:2e:3f:52:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 18 12:18:46 2024 GMT Not After : Feb 16 12:18:46 2025 GMT Subject: CN=89bd9c5d-f28c-4b73-afb2-bb7e32be92af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:16:cb:5b:dd:b0:d5:da:98:9c:ff:98:15: e9:84:1a:72:30:c0:9a:98:90:90:ae:eb:bc:ef:0c: 23:a4:fe:d9:ae:5d:2c:55:3e:52:29:5c:26:2e:66: 6b:aa:b7:d8:b9:a8:e3:b9:59:69:8d:ed:8d:96:ca: f8:3a:55:58:7e:bc:2b:9d:a3:67:33:6a:3c:98:d0: 64:7f:2e:02:72:03:1c:2a:25:15:d1:3d:c6:4d:66: a4:ad:80:0e:a0:fc:3f:c9:6d:8a:55:75:f6:3c:d5: 17:de:3c:e6:3e:5b:36:56:15:0a:6e:58:04:9e:32: ec:99:dc:6d:3c:d4:2e:be:14:b6:cd:8f:0a:23:3c: 0c:07:f0:69:60:1f:54:cd:fe:77:a3:5a:f3:1b:f1: 8f:77:6e:19:66:c9:3c:f8:4e:0d:bb:0b:cf:56:ab: b9:71:03:96:dd:1f:32:b6:a5:4c:d2:2e:96:df:c4: 14:03:97:e8:52:10:4e:68:f7:4d:7f:4a:3a:a3:85: a3:5d:4d:83:6b:26:35:c1:93:10:7e:58:ec:b2:89: 24:86:c4:1a:13:40:e1:33:f4:2f:22:27:e7:58:e3: ab:bd:f5:5e:2e:29:fd:d2:15:40:c6:a2:f9:98:52: e5:72:f0:aa:b5:84:15:a1:e5:c2:b5:b4:66:12:f5: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:13:44:10:F8:BC:FB:32:E2:9F:D7:98:30:CF:91:EA:7C:F9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/544454e1-7b81-3bd5-8608-bb5a53a05170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0e:ff:60:ff:53:fe:45:c5:d1:da:b8:2c:c2:ea:b6:6d:bd: 61:93:23:21:d0:80:c4:28:95:d3:6b:a7:f5:0e:5d:18:31:38: 56:c1:4d:ba:aa:d3:d7:4c:86:99:90:a8:a3:52:bd:bd:90:ce: 90:33:29:34:9a:8e:a6:4b:ad:36:f2:89:a7:c8:65:cd:74:bb: f8:f8:be:43:48:88:25:09:2f:0d:f2:21:e1:f2:f5:1c:64:92: 88:61:5e:e1:4e:d4:7c:7b:08:fd:31:34:7b:ca:f6:5d:e1:18: 45:32:9a:57:a8:a0:1f:b9:dc:fb:34:49:99:7a:ed:7a:00:53: d2:ae:c6:fb:4c:1e:64:b2:1f:c7:83:b2:a7:88:c8:31:74:a7: 49:bd:ee:73:2c:48:19:68:fc:72:f2:73:d0:1e:78:58:f4:e7: 43:c4:be:f0:0e:94:5a:9e:e4:18:f2:71:f2:77:ff:29:ec:ae: 44:04:eb:c1:2b:5c:e0:4a:ca:3d:2b:56:30:45:69:29:d4:56: 31:85:5e:46:5e:2e:26:55:8e:48:0b:57:8a:37:74:70:f0:84: f3:fb:70:7c:bc:00:2e:ff:af:15:fb:fc:b1:dc:c1:35:b1:01: 03:ae:3a:5c:7e:35:06:c0:3d:ee:78:fc:d9:51:0f:76:03:ea: ba:1b:14:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrjOCwLP+pLj9S/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTExODEyMTg0NloXDTI1MDIxNjEyMTg0NlowLzEtMCsGA1UEAxMk ODliZDljNWQtZjI4Yy00YjczLWFmYjItYmI3ZTMyYmU5MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvwWy1vdsNXamJz/mBXphBpyMMCamJCQruu8 7wwjpP7Zrl0sVT5SKVwmLmZrqrfYuajjuVlpje2Nlsr4OlVYfrwrnaNnM2o8mNBk fy4CcgMcKiUV0T3GTWakrYAOoPw/yW2KVXX2PNUX3jzmPls2VhUKblgEnjLsmdxt PNQuvhS2zY8KIzwMB/BpYB9Uzf53o1rzG/GPd24ZZsk8+E4NuwvPVqu5cQOW3R8y tqVM0i6W38QUA5foUhBOaPdNf0o6o4WjXU2DayY1wZMQfljssokkhsQaE0DhM/Qv IifnWOOrvfVeLin90hVAxqL5mFLlcvCqtYQVoeXCtbRmEvWXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvAE0QQ+Lz7MuKf15gwz5HqfPnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTQ0NDU0ZTEtN2I4MS0z YmQ1LTg2MDgtYmI1YTUzYTA1MTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlY+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQO/2D/U/5FxdHauCzC6rZtvWGTIyHQgMQoldNrp/UOXRgxOFbBTbqq 09dMhpmQqKNSvb2QzpAzKTSajqZLrTbyiafIZc10u/j4vkNIiCUJLw3yIeHy9Rxk kohhXuFO1Hx7CP0xNHvK9l3hGEUymleooB+53Ps0SZl67XoAU9KuxvtMHmSyH8eD sqeIyDF0p0m97nMsSBlo/HLyc9AeeFj050PEvvAOlFqe5BjycfJ3/ynsrkQE68Er XOBKyj0rVjBFaSnUVjGFXkZeLiZVjkgLV4o3dHDwhPP7cHy8AC7/rxX7/LHcwTWx AQOuOlx+NQbAPe54/NlRD3YD6robFFM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:51 2024 by rpki-client on console-fra.rpki-client.org