$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa File: 17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa (raw, json) Hash identifier: KVnQ6NA7bBVQr3y6G6V9vgq2B9GYKBHmM5Y1ZWv//t4= Subject key identifier: CF:06:46:CE:18:44:41:5B:6F:E6:63:26:62:9B:9F:00:C1:D9:43:99 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285845410D50AE6A107B0F75A8BC80 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa Signing time: Tue 19 Mar 2024 01:00:24 +0000 ROA not before: Tue 19 Mar 2024 01:00:24 +0000 ROA not after: Mon 17 Jun 2024 01:00:24 +0000 asID: 203963 IP address blocks: 149.19.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:41:0d:50:ae:6a:10:7b:0f:75:a8:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 19 01:00:24 2024 GMT Not After : Jun 17 01:00:24 2024 GMT Subject: CN=9079f75c-7d55-4b7b-a25b-cff913530e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ae:76:4b:af:6d:93:cc:cc:41:51:5f:7d:a8: c1:49:0d:fd:3b:65:5b:fe:b1:6c:39:ff:bd:69:b9: 1e:20:e7:e4:70:79:7e:9d:ad:b1:02:49:aa:d7:3c: 6c:e3:07:81:af:21:22:33:84:34:20:d2:72:13:27: 98:b8:8c:bb:f1:44:e0:d2:01:31:54:d7:0d:df:55: 1d:5b:ad:20:a9:68:0e:78:c7:53:f4:64:54:cc:5b: b8:7b:bd:6a:6a:51:e3:16:fb:d3:19:42:dd:0e:0c: c2:4a:52:4b:07:05:10:b4:88:e1:07:32:10:7b:a2: 77:89:7c:d4:7c:f0:c0:70:cf:a0:75:b4:52:47:0d: 24:3b:32:67:9f:0d:15:0e:e6:ab:78:ac:bd:51:b1: c3:26:28:10:12:31:5c:db:d1:7c:bb:2a:46:e5:a8: ca:43:3b:e4:89:7c:75:37:9d:3d:81:5a:b2:28:6b: 35:cf:d1:18:ec:31:a5:bf:78:94:06:5b:53:40:25: 3a:11:41:e1:ef:84:c6:20:4b:72:be:2a:8d:d7:35: e1:27:43:2d:b0:fb:22:92:df:19:c6:1f:a0:ad:d8: 21:b0:52:d7:32:c3:c2:29:ce:f1:a4:ad:4d:ff:db: 63:13:00:0d:fb:62:8a:2a:d2:a5:9b:fb:7e:6f:5b: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:46:CE:18:44:41:5B:6F:E6:63:26:62:9B:9F:00:C1:D9:43:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/17d4d9a1-4df6-3211-b93d-20b5b94f768d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 149.19.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3e:85:53:a0:a9:41:b9:a0:97:76:d6:c3:59:6f:fd:86:82: dd:1f:dc:73:9f:5c:25:5b:e3:b8:38:2b:f9:ff:64:69:b1:28: 52:d9:9a:1b:7d:9d:3e:45:f5:82:cf:7f:b1:0d:b6:c4:24:c3: 8b:9c:6d:69:c0:1a:b1:12:e1:04:bc:a1:91:8a:69:36:b9:b2: 1a:6f:db:f8:f3:e6:8a:b6:d9:52:3e:5b:8a:d5:6e:e3:69:8d: 2f:5b:3a:c8:83:01:80:61:59:a8:70:7a:2c:71:2f:6a:6d:aa: 02:39:26:e0:21:c0:c9:5a:e1:b9:7f:47:b8:c7:10:01:da:01: 3e:ae:21:ce:37:fc:e9:1e:e9:22:92:46:4d:56:3b:0d:23:57: fa:d4:ce:b8:18:c5:0a:bb:a4:9c:5b:86:90:33:35:9a:70:cd: da:d0:ee:f0:d9:7e:85:b4:dd:b1:40:9a:83:fe:aa:21:65:cd: 88:15:60:36:d1:61:f3:31:4e:c6:ed:1c:63:c3:7e:22:21:7f: 5c:04:d1:d7:ec:ce:20:f9:f8:39:d2:ab:47:2e:a2:38:eb:4f: d3:3f:97:ad:6c:fc:d7:69:2d:ad:2d:cf:39:98:22:d6:62:5b: 1e:17:12:8e:4b:fe:48:80:e7:52:d0:ba:95:1d:27:1a:97:e9: 51:32:f7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVBDVCuahB7D3WovIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI0MDMxOTAxMDAyNFoXDTI0MDYxNzAxMDAyNFowLzEtMCsGA1UEAxMk OTA3OWY3NWMtN2Q1NS00YjdiLWEyNWItY2ZmOTEzNTMwZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK52S69tk8zMQVFffajBSQ39O2Vb/rFsOf+9 abkeIOfkcHl+na2xAkmq1zxs4weBryEiM4Q0INJyEyeYuIy78UTg0gExVNcN31Ud W60gqWgOeMdT9GRUzFu4e71qalHjFvvTGULdDgzCSlJLBwUQtIjhBzIQe6J3iXzU fPDAcM+gdbRSRw0kOzJnnw0VDuareKy9UbHDJigQEjFc29F8uypG5ajKQzvkiXx1 N509gVqyKGs1z9EY7DGlv3iUBltTQCU6EUHh74TGIEtyviqN1zXhJ0MtsPsikt8Z xh+grdghsFLXMsPCKc7xpK1N/9tjEwAN+2KKKtKlm/t+b1szZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8GRs4YREFbb+ZjJmKbnwDB2UOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMTdkNGQ5YTEtNGRmNi0z MjExLWI5M2QtMjBiNWI5NGY3NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc+hVOgqUG5oJd21sNZb/2Ggt0f3HOfXCVb47g4K/n/ZGmxKFLZmht9 nT5F9YLPf7ENtsQkw4ucbWnAGrES4QS8oZGKaTa5shpv2/jz5oq22VI+W4rVbuNp jS9bOsiDAYBhWahweixxL2ptqgI5JuAhwMla4bl/R7jHEAHaAT6uIc43/Oke6SKS Rk1WOw0jV/rUzrgYxQq7pJxbhpAzNZpwzdrQ7vDZfoW03bFAmoP+qiFlzYgVYDbR YfMxTsbtHGPDfiIhf1wE0dfsziD5+DnSq0cuojjrT9M/l61s/NdpLa0tzzmYItZi Wx4XEo5L/kiA51LQupUdJxqX6VEy99A= -----END CERTIFICATE-----Generated at Sat May 4 15:05:15 2024 by rpki-client on console-ams.rpki-client.org