$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: w6wpXCkmQUO0NViVUl6CM5OQlT68waF+2QoF/XXEfRA= Subject key identifier: 97:F6:BE:B4:16:2E:B1:47:72:D3:42:32:92:C6:14:14:43:05:87:2D Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858479AABE61A8FCF76D52652A970 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e6:1a:8f:cf:76:d5:26:52:a9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=5a0e94ae-22a9-424d-8e81-98ebe1e34f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:3f:f6:53:ce:df:6d:93:c3:46:9c:d2:03: 72:a3:0e:8a:aa:ba:d2:0d:d0:09:8f:4e:f3:1f:8f: 7f:e0:1a:a2:80:5f:15:06:84:4a:fc:06:07:e0:a2: 5c:fe:31:08:44:22:ab:a4:ea:5c:17:16:67:68:5c: a6:5c:9f:a9:1c:bb:4b:0d:c1:78:34:bd:45:e3:f1: af:e4:28:8a:e7:32:3f:5a:4a:50:79:54:66:b8:53: 1b:53:93:91:b3:cb:fe:35:4e:c5:ba:4c:6f:43:9a: d0:39:b4:5f:ab:de:73:e9:02:5e:e1:9f:49:82:cd: 69:7c:e0:b1:f1:95:ab:7b:59:29:58:9a:47:60:14: 3c:41:0c:1d:78:59:37:e4:65:3a:08:d8:a2:49:af: 30:ab:b8:59:98:72:ea:30:2f:44:25:f7:7b:41:c3: 77:c2:fc:4b:e7:98:a6:4b:1f:ad:d8:f5:6d:dd:54: e6:4e:5f:e6:79:0e:b8:88:9b:a6:d3:58:fa:5c:8e: 31:5f:e5:22:4e:ab:b5:20:03:60:ff:d3:2f:ff:50: 39:bd:d7:69:02:1b:ff:76:6c:29:54:4b:38:f0:07: 71:f6:23:e8:56:30:64:54:fd:f0:07:9d:b3:24:18: 5a:de:0a:64:39:12:c4:63:07:ee:ae:cd:dd:1c:ec: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:BE:B4:16:2E:B1:47:72:D3:42:32:92:C6:14:14:43:05:87:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:28:c8:2f:1e:5c:ba:c3:5d:86:a2:f1:9a:81:eb:16:09:ba: 7a:2c:2a:9e:97:41:04:13:33:8b:b1:a1:83:c4:40:ec:86:bd: 3c:01:ed:ba:7c:1e:0f:5d:e7:40:75:5a:ab:2e:5b:9a:c4:31: 28:3f:c2:d6:f2:97:c2:e6:45:2a:66:5c:d9:dd:b4:8a:91:dc: 47:77:3f:2b:8c:b1:dc:f4:13:68:ba:b5:e0:81:b1:63:02:10: cd:dd:50:22:24:8c:66:2a:1b:b1:fa:93:d2:bd:1e:6f:05:3a: 84:5d:0b:3c:e3:5c:d9:40:e4:46:42:2d:94:43:aa:db:55:1d: 1d:4b:29:5e:0a:2f:48:de:00:a6:37:31:5e:ae:0a:94:42:04: ff:c7:20:f6:16:57:21:19:60:92:f8:ee:84:25:26:73:79:86: 6b:ff:b0:3c:34:1b:91:0d:8e:68:f8:bb:88:36:df:3b:0c:bd: ee:e6:6a:e6:8c:03:27:75:e3:94:96:da:c9:5a:fa:01:e3:fa: 39:b4:b3:d3:ed:7d:4f:79:b9:74:f0:7e:48:08:bb:fb:90:0d: 92:6c:39:51:4f:4a:28:b6:65:e0:32:af:df:59:30:bd:52:9c: fd:a9:cc:b0:97:af:6e:7b:1c:a8:6a:e3:59:cc:11:99:83:2b: 2e:8d:97:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+Yaj8921SZSqXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NWEwZTk0YWUtMjJhOS00MjRkLThlODEtOThlYmUxZTM0ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkog/9lPO322Tw0ac0gNyow6KqrrSDdAJj07z H49/4BqigF8VBoRK/AYH4KJc/jEIRCKrpOpcFxZnaFymXJ+pHLtLDcF4NL1F4/Gv 5CiK5zI/WkpQeVRmuFMbU5ORs8v+NU7FukxvQ5rQObRfq95z6QJe4Z9Jgs1pfOCx 8ZWre1kpWJpHYBQ8QQwdeFk35GU6CNiiSa8wq7hZmHLqMC9EJfd7QcN3wvxL55im Sx+t2PVt3VTmTl/meQ64iJum01j6XI4xX+UiTqu1IANg/9Mv/1A5vddpAhv/dmwp VEs48Adx9iPoVjBkVP3wB52zJBha3gpkORLEYwfurs3dHOyXgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf2vrQWLrFHctNCMpLGFBRDBYctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8oyC8eXLrDXYai8ZqB6xYJunosKp6XQQQTM4uxoYPEQOyGvTwB7bp8 Hg9d50B1WqsuW5rEMSg/wtbyl8LmRSpmXNndtIqR3Ed3PyuMsdz0E2i6teCBsWMC EM3dUCIkjGYqG7H6k9K9Hm8FOoRdCzzjXNlA5EZCLZRDqttVHR1LKV4KL0jeAKY3 MV6uCpRCBP/HIPYWVyEZYJL47oQlJnN5hmv/sDw0G5ENjmj4u4g23zsMve7mauaM Ayd145SW2sla+gHj+jm0s9PtfU95uXTwfkgIu/uQDZJsOVFPSii2ZeAyr99ZML1S nP2pzLCXr257HKhq41nMEZmDKy6NlxQ= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org