$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa File: de898606-3a0d-391e-a76b-47d81b014a7d.roa (raw, json) Hash identifier: m3Pi+NNAgEczZ6m8erq860slhpPBPqIQ46b2GBJacn4= Subject key identifier: 4D:EE:2C:01:40:0C:E2:E1:4B:5C:91:3E:B2:42:D7:91:E4:76:08:06 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285847A73BE90D6F19609ACEAE2D00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 396356 IP address blocks: 149.143.162.0/24 maxlen: 24 149.143.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:e9:0d:6f:19:60:9a:ce:ae:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=dc82a020-8926-47e1-8e63-76130aac6069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:ba:c8:d6:6b:a0:de:83:a9:01:9a:d1:58: d4:98:0f:9e:90:f8:82:68:16:05:30:8f:5d:da:92: a7:85:7c:06:85:4b:ad:3b:8a:3a:cd:f6:5a:f6:fa: 53:99:4e:26:7f:3d:51:22:67:f4:0f:96:1f:7e:2c: dd:27:d0:b5:5e:8c:39:8d:8f:68:40:70:4a:98:39: 3b:ce:51:b1:fe:ab:66:bb:0d:4f:37:79:60:00:ae: a7:39:fa:44:c0:47:55:7a:ea:af:c2:35:a8:bf:7a: 60:c5:a8:21:6f:cc:aa:75:d6:a9:d5:83:49:1e:cb: 6b:50:92:e1:d2:f9:bd:92:d2:7f:7d:9f:e4:06:98: ec:05:b5:b0:93:4f:c1:18:7d:01:ef:7f:dd:de:60: e5:78:dd:5b:53:8c:b2:00:5b:17:b3:d4:f0:ec:b2: 6e:a0:07:bd:97:a0:da:81:84:cc:22:fe:a2:be:ed: d9:f7:82:db:d1:75:c3:2a:a4:26:ba:ed:62:ca:70: 2a:c1:79:2a:70:23:29:e5:41:9e:79:9e:58:0b:ee: 19:31:35:d1:09:37:a8:25:a7:e8:3b:c3:a8:0a:4f: 0f:1d:08:1f:e5:77:ce:28:03:df:a3:a1:1b:5d:d6: c8:ff:fa:2b:ac:54:41:f9:47:3a:a8:7e:8d:eb:25: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EE:2C:01:40:0C:E2:E1:4B:5C:91:3E:B2:42:D7:91:E4:76:08:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.162.0/24 149.143.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:81:55:d8:20:fb:1f:33:96:f5:d6:cc:72:77:01:24:84:7f: 05:4b:e1:54:9c:b9:82:80:de:75:9b:38:76:39:4f:32:55:bf: e7:7f:f6:b9:7b:a0:a9:2b:be:fc:c6:9c:86:16:39:5f:2c:95: 41:92:8f:dd:ff:79:6b:e7:f6:02:5d:b3:43:58:23:f6:bc:9e: 4d:cc:14:32:fa:6f:41:72:c4:21:08:ee:0e:95:69:2a:a6:8f: a0:8b:59:15:63:e6:fe:e8:44:2d:d8:4c:38:d9:3e:74:c6:8d: 73:ab:ce:05:0e:95:a0:de:c2:a2:57:38:0a:cc:63:9d:af:b1: be:ea:f9:58:69:52:50:fd:b9:f9:29:49:40:68:e5:22:ae:42: a6:e4:36:fb:a3:9c:77:f4:f9:cf:85:a0:3c:2f:b7:22:6c:bb: ab:78:e6:1b:b0:1d:10:a4:08:1b:c9:28:ac:fe:4d:20:3a:4d: 99:4b:0c:d9:b4:5b:e5:23:67:b2:f1:7b:30:71:13:e1:96:81: 3a:2d:b7:6f:0b:c8:55:c7:1e:b2:76:02:b4:57:9b:45:6a:2a: d5:b4:f5:82:5f:d2:52:e9:e1:7a:c1:09:03:80:99:6f:fb:2a: 6d:ef:fc:90:6c:3c:f4:3c:c5:2e:28:63:6c:1e:23:90:31:2c: 7c:ce:96:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEenO+kNbxlgms6uLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGM4MmEwMjAtODkyNi00N2UxLThlNjMtNzYxMzBhYWM2MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniW6yNZroN6DqQGa0VjUmA+ekPiCaBYFMI9d 2pKnhXwGhUutO4o6zfZa9vpTmU4mfz1RImf0D5YffizdJ9C1Xow5jY9oQHBKmDk7 zlGx/qtmuw1PN3lgAK6nOfpEwEdVeuqvwjWov3pgxaghb8yqddap1YNJHstrUJLh 0vm9ktJ/fZ/kBpjsBbWwk0/BGH0B73/d3mDleN1bU4yyAFsXs9Tw7LJuoAe9l6Da gYTMIv6ivu3Z94Lb0XXDKqQmuu1iynAqwXkqcCMp5UGeeZ5YC+4ZMTXRCTeoJafo O8OoCk8PHQgf5XfOKAPfo6EbXdbI//orrFRB+Uc6qH6N6yUlNwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE3uLAFADOLhS1yRPrJC15HkdggGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZGU4OTg2MDYtM2EwZC0z OTFlLWE3NmItNDdkODFiMDE0YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlY+iAwQA lY+wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADCBVdgg+x8zlvXWzHJ3ASSEfwVL4VScuYKA3nWbOHY5TzJV v+d/9rl7oKkrvvzGnIYWOV8slUGSj93/eWvn9gJds0NYI/a8nk3MFDL6b0FyxCEI 7g6VaSqmj6CLWRVj5v7oRC3YTDjZPnTGjXOrzgUOlaDewqJXOArMY52vsb7q+Vhp UlD9ufkpSUBo5SKuQqbkNvujnHf0+c+FoDwvtyJsu6t45huwHRCkCBvJKKz+TSA6 TZlLDNm0W+UjZ7LxezBxE+GWgTott28LyFXHHrJ2ArRXm0VqKtW09YJf0lLp4XrB CQOAmW/7Km3v/JBsPPQ8xS4oY2weI5AxLHzOlgo= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org