$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa File: 73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa (raw, json) Hash identifier: OlcpR24BQQ8zVQOd9DEAzpBvixrb0aFBFF0a1LxresY= Subject key identifier: B1:0E:8D:F6:F4:1C:62:0C:FD:5F:86:15:CC:23:0E:0F:30:AF:1E:B8 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847A5D6A4D4699BCC6453E52080 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 7018 IP address blocks: 149.143.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a4:d4:69:9b:cc:64:53:e5:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=6a2ca5eb-3b7d-4293-892e-7bf07ce9b4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:d3:ff:4e:85:2b:7c:11:91:36:db:1b:5d: e0:39:63:8f:43:34:13:16:b8:0a:39:05:12:a5:46: 61:53:ff:94:1b:eb:4e:8f:56:cb:70:e1:93:da:c2: 6d:fb:f0:79:a0:7f:ab:29:02:bb:eb:72:99:25:49: e3:96:9f:45:64:74:66:9f:a4:5d:64:11:2a:be:6a: 4f:32:f5:8e:96:8c:7b:39:d3:68:22:18:61:80:21: af:63:91:59:f7:8b:da:2d:d4:b0:8e:dd:12:a4:a4: 63:24:31:11:30:6d:ca:83:14:72:dc:dd:0e:41:82: 68:45:f0:9b:3a:65:7b:1d:d8:11:95:86:aa:e0:b7: cf:b3:d2:f0:ca:be:6e:80:6b:57:8b:6d:d2:3c:73: 11:b5:9e:a3:b9:68:bc:d1:84:4d:ee:d1:a1:ff:97: 25:db:5b:be:30:f1:e8:dc:f4:fd:66:cc:47:ee:57: 17:66:d1:da:b0:e7:28:ad:85:1b:e5:42:b0:94:8c: d5:89:2a:61:3d:87:06:fa:80:ab:0e:da:8a:57:f5: a4:b6:e9:a1:5f:81:db:2c:ff:e6:04:d9:c5:47:31: 2b:3b:48:30:5b:b9:b2:e9:bd:c3:7c:98:78:88:13: 72:8a:ea:f4:90:7b:58:5d:16:62:b3:e6:a4:e7:40: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0E:8D:F6:F4:1C:62:0C:FD:5F:86:15:CC:23:0E:0F:30:AF:1E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:62:6e:e5:dd:95:e7:37:26:ca:4f:83:d6:0c:c5:9f:a1:74: 04:4c:bc:90:64:e0:b2:4f:76:c6:89:f2:14:12:b1:6f:4b:19: 6a:d2:95:e2:3b:fb:64:1d:9f:62:d1:9a:6a:ab:f3:8c:d5:9e: 60:5b:15:15:1a:32:fc:68:50:68:b6:5e:fd:9f:0f:59:87:12: fe:b7:df:48:84:00:88:13:f7:96:00:98:eb:ea:51:2f:71:4b: aa:e3:8f:19:24:80:b2:70:2a:3c:d4:89:d7:28:29:13:be:fe: 30:1a:23:1c:dc:12:e7:d4:19:a0:36:09:92:4d:90:4f:7d:54: 69:01:6f:e7:a5:14:18:bf:87:8c:2a:79:60:ec:c4:f9:ad:fb: 36:ab:aa:9e:5d:a2:81:58:45:3e:67:3b:d3:40:e2:3c:5b:fb: 81:0d:d5:b2:a1:a6:a3:e4:06:39:eb:6d:f9:fc:e6:77:fc:8e: 91:45:99:47:7d:49:d2:69:66:17:50:c5:8e:38:79:c3:e6:17: 65:eb:20:d7:b5:6a:fa:37:73:06:5a:df:06:36:cc:fe:b4:04: 15:b6:63:88:ef:f1:b8:82:6a:cb:a9:33:08:f7:70:1e:74:94: 62:13:62:6d:d2:6b:f2:93:d5:4e:d0:87:bc:f7:ec:d9:1f:bb: 6c:d8:67:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qTUaZvMZFPlIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NmEyY2E1ZWItM2I3ZC00MjkzLTg5MmUtN2JmMDdjZTliNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTXT/06FK3wRkTbbG13gOWOPQzQTFrgKOQUS pUZhU/+UG+tOj1bLcOGT2sJt+/B5oH+rKQK763KZJUnjlp9FZHRmn6RdZBEqvmpP MvWOlox7OdNoIhhhgCGvY5FZ94vaLdSwjt0SpKRjJDERMG3KgxRy3N0OQYJoRfCb OmV7HdgRlYaq4LfPs9Lwyr5ugGtXi23SPHMRtZ6juWi80YRN7tGh/5cl21u+MPHo 3PT9ZsxH7lcXZtHasOcorYUb5UKwlIzViSphPYcG+oCrDtqKV/WktumhX4HbLP/m BNnFRzErO0gwW7my6b3DfJh4iBNyiur0kHtYXRZis+ak50AOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEOjfb0HGIM/V+GFcwjDg8wrx64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzNhMmM4ZGEtN2MyYi0z ZmEwLThjNDQtMzE0NmI2YjlkODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNibuXdlec3JspPg9YMxZ+hdARMvJBk4LJPdsaJ8hQSsW9LGWrSleI7 +2Qdn2LRmmqr84zVnmBbFRUaMvxoUGi2Xv2fD1mHEv6330iEAIgT95YAmOvqUS9x S6rjjxkkgLJwKjzUidcoKRO+/jAaIxzcEufUGaA2CZJNkE99VGkBb+elFBi/h4wq eWDsxPmt+zarqp5dooFYRT5nO9NA4jxb+4EN1bKhpqPkBjnrbfn85nf8jpFFmUd9 SdJpZhdQxY44ecPmF2XrINe1avo3cwZa3wY2zP60BBW2Y4jv8biCasupMwj3cB50 lGITYm3Sa/KT1U7Qh7z37Nkfu2zYZ+E= -----END CERTIFICATE-----Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org