$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa File: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (raw, json) Hash identifier: kDBcD+fTt0tkjoIX0orHZgvH99qNXFbe4eIqoaAxw9E= Subject key identifier: E8:17:64:2A:D1:64:0D:A6:53:72:BD:28:C3:87:9A:0B:8B:97:30:65 Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F43285847537B6014D88EE2F4B90C7380 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 14618 IP address blocks: 193.149.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:60:14:d8:8e:e2:f4:b9:0c:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=dde1fd2c-5f6b-4cab-8995-53a65b5a195b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:f7:34:87:3d:73:83:e9:05:b4:4f:a4:81: 8f:fc:40:cf:91:a9:9c:89:c2:fa:0e:d0:3b:ff:a0: 67:ea:4a:4d:4e:78:e9:10:3b:2e:8c:82:cb:d0:56: 68:10:81:09:00:77:d1:82:bf:bf:7f:9c:9d:74:49: 16:b1:56:98:ee:5c:67:1c:73:1d:43:3c:2a:7c:4a: 51:b1:11:73:1f:e3:53:bb:da:d6:8d:32:e4:66:dc: ef:06:f0:f4:50:cf:24:b7:4d:22:11:59:47:1c:70: 8b:44:cf:9e:21:96:58:0e:8a:ff:5c:31:d6:37:6f: 77:5c:9c:cf:7c:16:ba:fc:b9:1a:5d:e4:46:38:11: ad:3e:62:c4:bc:25:8b:f8:10:c2:53:88:76:ae:9a: df:5e:90:69:ba:6a:b4:12:2a:c7:06:43:50:3e:d5: 9b:c7:48:26:a5:30:87:23:7f:03:a0:31:3c:1e:7f: c0:6a:f9:a9:f9:d2:ba:c1:9b:45:ad:57:e3:09:30: 5a:38:84:54:37:ef:63:0e:f5:da:0c:5e:27:d6:46: 38:62:30:75:34:d7:47:2c:9f:1b:db:16:76:b2:16: 07:51:82:c1:9d:a0:a9:80:e2:3d:5f:49:32:f8:66: 54:e0:80:f2:f7:c3:df:ad:13:7c:9a:e0:01:57:a0: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:64:2A:D1:64:0D:A6:53:72:BD:28:C3:87:9A:0B:8B:97:30:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/44e6412a-ad9a-3379-a2fe-2eda7500f614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: 193.149.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:97:a4:38:4d:e2:b4:d8:6e:ce:30:4a:5a:44:7c:18:e6:5d: e5:73:fd:be:03:cb:f1:78:6f:c0:9c:25:94:4a:19:37:a7:dd: 78:57:3b:16:f5:a4:86:4b:60:e7:74:b3:1a:63:de:c1:db:d7: 1a:19:08:15:d7:f5:9b:43:c1:66:59:fc:2f:2f:79:79:6b:c3: 65:c9:81:74:9f:4d:11:76:af:fa:08:0d:bd:70:8a:fe:7c:39: ad:03:b6:0b:64:72:f8:c9:77:30:11:c4:f6:cd:40:b6:17:2a: d5:4d:12:bb:2c:de:18:64:11:19:9a:ad:21:18:1f:5e:0b:68: 56:e0:9d:38:ee:ba:bc:03:03:19:b0:6f:cb:c7:c2:6c:32:c2: fd:48:fa:b8:05:a8:04:93:4d:ef:cd:a5:1b:61:8a:4a:8c:a9: 1c:81:f3:2a:50:22:b2:81:d5:96:8c:37:64:fc:e2:76:95:7b: 51:aa:8a:12:03:1d:e1:26:65:db:ca:a8:75:dc:d9:8b:a5:0a: ff:d6:67:0d:e2:97:ad:9f:37:55:e5:82:aa:ec:f0:f6:97:7e: 64:4e:9e:4e:3f:12:01:01:b7:78:58:42:59:d4:94:ef:5e:36: f7:15:80:57:2e:32:92:e8:bc:ed:f2:51:c3:d2:4c:14:86:86: 5a:c7:b5:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdTe2AU2I7i9LkMc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZGRlMWZkMmMtNWY2Yi00Y2FiLTg5OTUtNTNhNjViNWExOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3n3NIc9c4PpBbRPpIGP/EDPkamcicL6DtA7 /6Bn6kpNTnjpEDsujILL0FZoEIEJAHfRgr+/f5yddEkWsVaY7lxnHHMdQzwqfEpR sRFzH+NTu9rWjTLkZtzvBvD0UM8kt00iEVlHHHCLRM+eIZZYDor/XDHWN293XJzP fBa6/LkaXeRGOBGtPmLEvCWL+BDCU4h2rprfXpBpumq0EirHBkNQPtWbx0gmpTCH I38DoDE8Hn/Aavmp+dK6wZtFrVfjCTBaOIRUN+9jDvXaDF4n1kY4YjB1NNdHLJ8b 2xZ2shYHUYLBnaCpgOI9X0ky+GZU4IDy98PfrRN8muABV6AyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgXZCrRZA2mU3K9KMOHmguLlzBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvNDRlNjQxMmEtYWQ5YS0z Mzc5LWEyZmUtMmVkYTc1MDBmNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiXpDhN4rTYbs4wSlpEfBjmXeVz/b4Dy/F4b8CcJZRKGTen3XhXOxb1 pIZLYOd0sxpj3sHb1xoZCBXX9ZtDwWZZ/C8veXlrw2XJgXSfTRF2r/oIDb1wiv58 Oa0DtgtkcvjJdzARxPbNQLYXKtVNErss3hhkERmarSEYH14LaFbgnTjuurwDAxmw b8vHwmwywv1I+rgFqASTTe/NpRthikqMqRyB8ypQIrKB1ZaMN2T84naVe1GqihID HeEmZdvKqHXc2YulCv/WZw3il62fN1Xlgqrs8PaXfmROnk4/EgEBt3hYQlnUlO9e NvcVgFcuMpLovO3yUcPSTBSGhlrHtbc= -----END CERTIFICATE-----Generated at Thu Nov 21 16:18:04 2024 by rpki-client on console-ams.rpki-client.org