$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa File: cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa (raw, json) Hash identifier: /D8dl8ZbgLRbpff4KGYvzILK7yqPgpQcow0M7BOJisk= Subject key identifier: 57:53:8E:0A:48:46:2E:D4:9C:F4:B7:BA:F2:34:29:B8:4A:BA:68:5C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285847ED24C2E4017FB810AEAEF5C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 64267 IP address blocks: 149.20.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:c2:e4:01:7f:b8:10:ae:ae:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=921a7463-b9ad-48d5-8b2e-4330c9710d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:df:c9:92:07:9d:9d:9b:7d:15:ee:f6:94: 26:12:e6:65:6b:ff:df:09:a4:01:55:d8:a9:72:c1: 46:28:ea:0d:47:e1:21:95:ae:4a:28:85:c4:82:52: 12:e9:a7:6f:e4:c3:e0:f9:2b:c5:b9:2c:d9:62:5d: dd:85:62:20:b4:72:8f:75:91:94:a8:7e:59:5d:db: 65:e2:d8:4a:96:3c:04:3b:03:39:d9:4e:80:86:40: f6:dc:24:1f:44:da:40:fb:c3:40:c6:df:9c:05:14: 43:4a:a2:c4:59:e3:4b:09:c6:c8:03:95:b8:91:40: 15:b9:58:d2:39:c7:97:67:bf:b6:46:4a:3a:24:21: 42:ba:aa:28:ae:a5:2f:2d:2d:0a:d9:08:a0:ec:8a: 19:29:38:06:0d:db:8f:98:cf:2c:57:a1:23:e1:ed: 38:7b:ed:db:a5:0e:c9:30:ed:11:47:ba:33:61:c4: 09:4b:c6:cb:71:03:bd:72:6d:1f:99:4c:ea:f1:b2: 86:8a:24:26:1d:06:a2:96:ed:50:8a:cd:22:ef:0f: e5:ec:c2:eb:4d:e2:a6:90:42:e8:1f:09:7f:bb:ab: bc:52:ff:af:d1:8b:80:9f:5a:cd:fa:37:32:5b:c3: 25:cb:3e:63:4e:47:cc:a0:6c:8d:5c:44:d5:c6:6f: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:53:8E:0A:48:46:2E:D4:9C:F4:B7:BA:F2:34:29:B8:4A:BA:68:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd9fadc9-a02c-372f-9e73-ef1b2bae5d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 149.20.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:03:4c:99:10:4a:9b:bf:ef:c9:39:b2:5a:21:a4:50:19:3a: f6:1e:1d:f9:1d:e9:f6:81:23:ab:68:f2:56:4b:47:f8:05:b1: 65:c5:fe:05:51:d0:68:2a:23:75:b4:62:7d:01:c6:93:93:63: 30:3c:c8:e4:e6:58:f4:5e:67:36:1c:2b:34:48:72:8b:b7:fe: 1c:9a:f5:c7:b5:6c:1f:33:f6:94:14:df:3c:ea:40:e5:9f:05: 09:05:b2:18:af:8e:0b:cf:64:c3:c0:81:7e:13:c2:dc:09:36: 84:aa:72:af:18:b3:a1:0f:15:e3:a0:ea:3c:dd:bf:65:ce:cb: 81:82:99:64:e2:8b:69:7f:9e:8c:b3:36:e1:c6:c2:1b:a8:f2: 03:66:da:fb:46:c4:23:5d:28:c8:6d:fb:74:13:f9:5a:36:f2: de:13:06:c4:3d:61:45:65:fb:98:8c:6d:11:77:02:55:91:57: 20:a7:5a:94:74:59:97:5c:32:e5:37:3d:f3:1c:9e:00:9b:22: 65:bb:25:34:89:3e:02:e2:dc:31:c2:a8:ae:91:33:d2:9b:ff: 00:a2:b8:1a:e1:1e:7f:ae:da:6d:22:28:f3:69:63:79:70:4f: c1:29:99:ce:9f:84:40:c3:21:ac:cc:9d:94:6c:9e:c4:26:27: 54:7a:fc:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMLkAX+4EK6u9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk OTIxYTc0NjMtYjlhZC00OGQ1LThiMmUtNDMzMGM5NzEwZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLPfyZIHnZ2bfRXu9pQmEuZla//fCaQBVdip csFGKOoNR+Ehla5KKIXEglIS6adv5MPg+SvFuSzZYl3dhWIgtHKPdZGUqH5ZXdtl 4thKljwEOwM52U6AhkD23CQfRNpA+8NAxt+cBRRDSqLEWeNLCcbIA5W4kUAVuVjS OceXZ7+2Rko6JCFCuqoorqUvLS0K2Qig7IoZKTgGDduPmM8sV6Ej4e04e+3bpQ7J MO0RR7ozYcQJS8bLcQO9cm0fmUzq8bKGiiQmHQailu1Qis0i7w/l7MLrTeKmkELo Hwl/u6u8Uv+v0YuAn1rN+jcyW8Mlyz5jTkfMoGyNXETVxm/FkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdTjgpIRi7UnPS3uvI0KbhKumhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2Q5ZmFkYzktYTAyYy0z NzJmLTllNzMtZWYxYjJiYWU1ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIDTJkQSpu/78k5slohpFAZOvYeHfkd6faBI6to8lZLR/gFsWXF/gVR 0GgqI3W0Yn0BxpOTYzA8yOTmWPReZzYcKzRIcou3/hya9ce1bB8z9pQU3zzqQOWf BQkFshivjgvPZMPAgX4TwtwJNoSqcq8Ys6EPFeOg6jzdv2XOy4GCmWTii2l/noyz NuHGwhuo8gNm2vtGxCNdKMht+3QT+Vo28t4TBsQ9YUVl+5iMbRF3AlWRVyCnWpR0 WZdcMuU3PfMcngCbImW7JTSJPgLi3DHCqK6RM9Kb/wCiuBrhHn+u2m0iKPNpY3lw T8Epmc6fhEDDIazMnZRsnsQmJ1R6/IU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org