$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/c230b9e0-501e-3838-805b-245427356d20.roa File: c230b9e0-501e-3838-805b-245427356d20.roa (raw, json) Hash identifier: XX2p8m8tnNPTPS5ay4dyO5qUPqszGMPl1t2CmmFSRGQ= Subject key identifier: 82:AD:CA:51:58:5F:8D:A1:CC:71:A2:6E:98:D0:9D:FB:F2:E4:D9:39 Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09 Certificate serial: 010D0C9F43285847E06819C4AC2318DE845E49C0 Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/c230b9e0-501e-3838-805b-245427356d20.roa Signing time: Thu 14 Nov 2024 12:30:46 +0000 ROA not before: Thu 14 Nov 2024 12:30:46 +0000 ROA not after: Wed 12 Feb 2025 12:30:46 +0000 asID: 19331 IP address blocks: 149.64.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:68:19:c4:ac:23:18:de:84:5e:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09 Validity Not Before: Nov 14 12:30:46 2024 GMT Not After : Feb 12 12:30:46 2025 GMT Subject: CN=af0af532-77f5-4f6f-be41-84342fbfdbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:31:ce:c9:77:b3:b2:a2:63:b0:e3:ae:38:d8: 1b:44:ca:37:2f:c3:cc:75:d3:18:29:45:7d:c8:e6: a5:e3:24:4f:23:11:ed:17:c8:80:7c:0a:35:aa:f1: fe:ed:44:fd:91:4a:f3:cb:33:4f:7a:13:74:83:fd: 7b:fa:0b:ec:8b:a0:bb:52:db:e1:98:04:c8:c1:e8: fb:1e:4e:f8:64:ab:da:bc:b3:23:e7:19:2b:95:cc: 1e:af:83:7b:4b:8b:8f:8d:de:a0:41:2f:4b:11:ab: 8e:63:ab:8e:35:be:8d:bd:7c:23:9d:ce:21:28:b3: d7:34:f8:0a:bd:22:be:73:50:37:44:fb:44:c9:4f: 96:89:ad:ff:40:f0:e7:8f:0b:ba:ad:4d:d7:2e:9c: 41:90:b5:22:36:b7:f7:eb:95:b8:e7:d4:da:5f:9e: 75:ac:f4:4b:0f:36:69:68:b4:08:5b:d0:ca:de:15: 7a:5b:fa:b1:69:ae:09:5f:a1:6b:46:68:a9:e8:fe: 6e:27:99:a5:9e:06:b2:da:19:30:2f:9c:43:a6:e6: 62:90:b6:f8:3f:cb:61:1f:d2:46:f5:1d:3d:af:8a: 48:5e:18:16:eb:66:ce:35:39:4b:ef:d5:1a:5d:1a: 8b:e5:0e:00:7c:19:37:93:9b:2f:04:42:d2:f9:3d: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AD:CA:51:58:5F:8D:A1:CC:71:A2:6E:98:D0:9D:FB:F2:E4:D9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/c230b9e0-501e-3838-805b-245427356d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl X509v3 Authority Key Identifier: keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer sbgp-ipAddrBlock: critical IPv4: 149.64.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cd:52:d7:5d:09:d3:bb:45:46:28:40:e8:00:9f:9e:9d:db: 25:85:44:65:3d:ad:71:7a:61:fd:33:6a:63:2e:cd:65:e2:f2: 01:5f:6a:c4:9e:74:00:d3:f8:9d:3f:fc:cd:94:b8:cd:91:db: de:87:64:62:18:9e:43:7b:79:07:a0:35:9d:2e:b0:bd:4f:84: 3e:b5:bb:d5:7a:3c:00:59:d5:c8:89:99:f5:b4:47:fe:a0:04: da:f3:1a:3a:6a:d5:5e:7b:31:b2:e5:5c:b9:d8:57:92:56:8d: db:5a:46:fc:95:98:e1:3b:d2:e3:e5:dc:90:e9:0d:30:46:c6: 1e:cc:35:3b:2e:04:79:92:69:5e:14:61:49:64:f6:45:78:18: 81:f6:2e:e7:16:37:12:f4:f8:a5:f0:33:53:75:13:0d:34:38: 52:e9:e8:f0:f6:35:53:b3:cb:d2:7d:69:1c:4f:3f:cf:aa:4b: cd:6b:73:f5:b1:9f:10:8c:f0:d6:88:d5:ec:13:28:4c:96:7b: 3f:c0:99:ab:8a:99:cf:fc:11:b2:be:ad:44:8b:33:f9:f7:e6: 87:bd:dd:39:7f:79:e5:e5:a0:83:34:e4:da:95:b3:91:6a:8a: cc:5c:73:37:35:6c:a9:09:d5:aa:35:61:e9:1c:b3:a0:d1:c4: ad:ea:23:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfgaBnErCMY3oReScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh YTA5MB4XDTI0MTExNDEyMzA0NloXDTI1MDIxMjEyMzA0NlowLzEtMCsGA1UEAxMk YWYwYWY1MzItNzdmNS00ZjZmLWJlNDEtODQzNDJmYmZkYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6THOyXezsqJjsOOuONgbRMo3L8PMddMYKUV9 yOal4yRPIxHtF8iAfAo1qvH+7UT9kUrzyzNPehN0g/17+gvsi6C7UtvhmATIwej7 Hk74ZKvavLMj5xkrlcwer4N7S4uPjd6gQS9LEauOY6uONb6NvXwjnc4hKLPXNPgK vSK+c1A3RPtEyU+Wia3/QPDnjwu6rU3XLpxBkLUiNrf365W459TaX551rPRLDzZp aLQIW9DK3hV6W/qxaa4JX6FrRmip6P5uJ5mlngay2hkwL5xDpuZikLb4P8thH9JG 9R09r4pIXhgW62bONTlL79UaXRqL5Q4AfBk3k5svBELS+T3kfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKtylFYX42hzHGibpjQnfvy5Nk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2 NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvYzIzMGI5ZTAtNTAxZS0z ODM4LTgwNWItMjQ1NDI3MzU2ZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5 OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0 MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUDhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXNUtddCdO7RUYoQOgAn56d2yWFRGU9rXF6Yf0zamMuzWXi8gFfasSe dADT+J0//M2UuM2R296HZGIYnkN7eQegNZ0usL1PhD61u9V6PABZ1ciJmfW0R/6g BNrzGjpq1V57MbLlXLnYV5JWjdtaRvyVmOE70uPl3JDpDTBGxh7MNTsuBHmSaV4U YUlk9kV4GIH2LucWNxL0+KXwM1N1Ew00OFLp6PD2NVOzy9J9aRxPP8+qS81rc/Wx nxCM8NaI1ewTKEyWez/AmauKmc/8EbK+rUSLM/n35oe93Tl/eeXloIM05NqVs5Fq isxcczc1bKkJ1ao1Yekcs6DRxK3qI8U= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:23 2024 by rpki-client on console-ams.rpki-client.org