$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa File: bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa (raw, json) Hash identifier: brRkPefdCW56oayL69hhCsFweD67xnxRdp9aDkTdir8= Subject key identifier: DE:11:C4:93:8F:E1:D4:FE:A3:99:17:40:D3:EB:5A:7F:72:52:7D:99 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858479AABE62F2E92D695C297C540 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 1239 IP address blocks: 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e6:2f:2e:92:d6:95:c2:97:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=7255513e-1a96-4fe4-99da-087c8dc81706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:02:29:ce:2f:bc:31:31:9e:f8:c4:e7:b2: 24:2a:a6:90:51:78:9c:64:3a:3b:f5:01:3d:61:2f: 11:df:6c:e4:a9:84:33:13:e9:fe:ed:7e:0e:32:5d: 84:0f:cc:02:26:1f:cb:bc:95:c1:e6:16:8e:46:07: d2:a5:99:b8:e6:5a:b6:77:4f:c0:bd:7a:19:81:10: 1e:05:0d:02:62:ea:b9:80:69:e0:29:16:34:c5:da: 16:c1:0c:f9:88:46:7c:53:97:d5:82:d4:d3:7b:97: fe:4b:0d:0d:3a:bc:66:18:a9:98:c1:02:a4:81:01: ca:af:78:e8:1a:71:17:49:cd:f5:52:16:7a:d6:c3: 4d:ff:e0:e7:34:6d:3a:ef:0e:be:9a:9d:4c:6f:73: 22:34:9b:2b:76:c4:2a:00:da:28:32:6f:42:d3:b0: 56:e7:de:60:b8:ea:a0:df:6f:88:5c:0d:1f:71:4f: 19:b6:9b:fd:5f:fd:48:ad:68:86:9a:c6:5e:78:94: 3f:d2:61:01:79:08:07:04:67:09:42:b0:08:1a:42: 52:02:88:09:2d:06:b4:65:44:af:ba:d6:b4:0d:5f: 5f:f8:f4:54:fb:d1:a9:00:7e:b7:a8:ed:72:09:3e: cd:18:96:50:24:ff:cc:0f:13:f5:49:3c:e4:a6:56: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:C4:93:8F:E1:D4:FE:A3:99:17:40:D3:EB:5A:7F:72:52:7D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c3:28:30:d3:b3:25:3b:79:bb:a4:39:9d:c0:9f:ac:ca:71: ec:c2:ff:4e:e6:fa:eb:45:d2:0a:24:b9:a9:94:84:ab:01:a8: 48:86:ed:b5:8e:8d:46:04:8d:ae:97:68:0d:4b:71:20:d2:0d: d0:58:5b:16:07:aa:d7:5a:77:11:1d:c4:68:17:90:35:b6:ce: 69:67:95:c5:44:cb:67:77:be:f1:3f:11:7e:a8:41:a0:b5:27: 83:3c:4c:89:36:23:67:4c:75:29:8f:23:87:48:5d:0e:63:52: bf:b5:ab:5d:5e:0a:de:89:29:cb:4b:f3:e1:fd:14:c4:d2:5b: 5f:97:dc:ab:82:ca:cf:ac:78:67:99:ed:56:76:59:ba:3f:90: 8c:eb:6a:e8:98:83:8a:63:54:98:43:19:c2:ff:cc:2e:1d:b4: 20:8f:d5:7e:ac:a9:5d:bf:e4:d1:d5:5b:0e:50:91:63:3d:00: 0c:73:46:e9:a5:8e:d7:87:1f:f2:36:0d:38:ec:d1:1f:28:7a: 95:cf:b9:00:08:3a:bc:80:27:b8:17:95:8f:5c:f7:a2:31:34: d8:1d:03:3b:ad:d2:e7:cf:a2:45:ad:ee:44:45:f8:36:9c:82: 41:c7:92:9c:2c:46:16:1b:35:57:67:2b:d3:e4:91:bd:74:ff: 23:c6:a8:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+YvLpLWlcKXxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk NzI1NTUxM2UtMWE5Ni00ZmU0LTk5ZGEtMDg3YzhkYzgxNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry0CKc4vvDExnvjE57IkKqaQUXicZDo79QE9 YS8R32zkqYQzE+n+7X4OMl2ED8wCJh/LvJXB5haORgfSpZm45lq2d0/AvXoZgRAe BQ0CYuq5gGngKRY0xdoWwQz5iEZ8U5fVgtTTe5f+Sw0NOrxmGKmYwQKkgQHKr3jo GnEXSc31UhZ61sNN/+DnNG067w6+mp1Mb3MiNJsrdsQqANooMm9C07BW595guOqg 32+IXA0fcU8Ztpv9X/1IrWiGmsZeeJQ/0mEBeQgHBGcJQrAIGkJSAogJLQa0ZUSv uta0DV9f+PRU+9GpAH63qO1yCT7NGJZQJP/MDxP1STzkplbWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4RxJOP4dT+o5kXQNPrWn9yUn2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmZhNmJhMjUtNjhmZC0z NDkzLThkNDUtNDU1ODNjOGI5N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfDKDDTsyU7ebukOZ3An6zKcezC/07m+utF0gokuamUhKsBqEiG7bWO jUYEja6XaA1LcSDSDdBYWxYHqtdadxEdxGgXkDW2zmlnlcVEy2d3vvE/EX6oQaC1 J4M8TIk2I2dMdSmPI4dIXQ5jUr+1q11eCt6JKctL8+H9FMTSW1+X3KuCys+seGeZ 7VZ2Wbo/kIzrauiYg4pjVJhDGcL/zC4dtCCP1X6sqV2/5NHVWw5QkWM9AAxzRuml jteHH/I2DTjs0R8oepXPuQAIOryAJ7gXlY9c96IxNNgdAzut0ufPokWt7kRF+Dac gkHHkpwsRhYbNVdnK9Pkkb10/yPGqLo= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org