$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa File: a3acc875-a509-3b7a-b1bf-996d362e2ead.roa (raw, json) Hash identifier: nSXI2xXRWvNdEnOAx0KDG2XdvVIFOXL7/GBC+618p7w= Subject key identifier: E8:87:85:B3:70:78:CF:C4:1E:AE:CF:F8:63:6D:69:66:5F:EB:6A:AB Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285847C344962BBE1E2D113ABE8300 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 399195 IP address blocks: 107.149.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:96:2b:be:1e:2d:11:3a:be:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=32108d3b-dc34-4d9f-a720-e6b59c5bacd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3f:ce:2a:23:80:33:11:0e:5e:f0:e3:03:39: 63:70:ad:ec:9b:8b:56:07:39:a5:2a:08:5a:d6:15: 74:d4:86:cb:0d:97:45:52:fc:d4:dc:ed:51:11:f3: e8:14:a5:64:7c:56:8b:eb:2a:9b:54:3f:48:bb:07: 09:59:88:b7:d1:c3:17:42:86:a5:31:63:0f:1a:8f: e0:cb:6f:49:c7:ad:64:6b:4d:fa:89:0f:fd:cb:40: 9f:7f:00:b5:49:32:de:94:92:24:a4:a8:57:19:1f: 7d:21:a7:69:87:a1:b1:13:a4:9c:dc:bd:1a:00:f2: 20:ef:68:75:c9:e5:6e:47:a5:67:48:5b:2c:98:01: 3e:48:f9:1c:ae:6d:82:d2:84:c8:5a:aa:e6:b1:71: 4c:e7:e2:1d:6d:6b:b8:9e:8a:20:1a:ec:46:27:9b: 10:72:08:62:fe:68:1a:43:a2:46:2d:5a:5e:fc:13: 85:7b:94:d6:2c:c1:a3:6e:b8:7d:92:0d:bd:f0:90: 50:e7:e1:60:ef:c6:52:b4:1b:fc:da:7c:65:a5:f8: 03:c4:dd:59:6a:4c:c4:b4:05:f2:6e:87:0c:c8:80: 3f:cf:53:f8:8d:0f:0c:a9:c2:3f:14:18:f6:33:b8: e7:dc:ba:4f:89:cf:a9:83:e5:de:dc:51:69:1a:e7: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:87:85:B3:70:78:CF:C4:1E:AE:CF:F8:63:6D:69:66:5F:EB:6A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c2:b3:b1:94:90:88:77:d9:9d:e9:e4:a7:f7:06:3b:c1:de: 45:7e:b3:80:ad:2e:df:d8:dd:14:01:fa:0a:b9:04:c8:03:4d: 37:b5:be:79:f7:d5:e6:6e:13:61:cb:d5:fb:ae:9d:9d:f4:15: 84:3d:a8:e8:0c:45:28:37:ca:07:63:42:91:57:ef:3a:6e:01: 3d:63:da:7f:c9:9d:ae:ca:13:1b:86:fe:f6:29:16:dc:8f:34: b2:1c:01:dd:cb:c7:55:b9:cc:9f:32:83:53:03:ca:b2:53:33: df:47:14:3d:5b:fb:d3:aa:5a:bc:7c:c4:8c:94:9e:44:b8:d5: c1:d6:08:7c:84:72:98:5b:85:d5:6b:0d:ba:6a:40:f2:85:a4: 3a:c9:0e:3b:09:85:83:9b:d6:5a:cc:7d:13:00:92:6c:9d:d4: 27:f3:00:e0:13:21:99:ea:c2:bc:1d:e8:92:c1:c4:5c:f0:34: 67:3d:f6:1e:58:e7:c2:34:b7:b4:30:d3:24:8e:f8:c8:71:6e: 69:29:25:2d:8c:93:41:33:58:9b:6d:a1:28:50:7b:59:59:c4: 02:f4:a1:e3:2b:2b:c1:90:85:42:9e:d2:57:8f:e7:35:b0:aa: 57:82:cb:64:e1:7e:54:b3:12:fb:d9:f6:14:8a:8f:ac:57:8c: 28:28:73:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRJYrvh4tETq+gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk MzIxMDhkM2ItZGMzNC00ZDlmLWE3MjAtZTZiNTljNWJhY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD/OKiOAMxEOXvDjAzljcK3sm4tWBzmlKgha 1hV01IbLDZdFUvzU3O1REfPoFKVkfFaL6yqbVD9IuwcJWYi30cMXQoalMWMPGo/g y29Jx61ka036iQ/9y0CffwC1STLelJIkpKhXGR99Iadph6GxE6Sc3L0aAPIg72h1 yeVuR6VnSFssmAE+SPkcrm2C0oTIWqrmsXFM5+IdbWu4noogGuxGJ5sQcghi/mga Q6JGLVpe/BOFe5TWLMGjbrh9kg298JBQ5+Fg78ZStBv82nxlpfgDxN1ZakzEtAXy bocMyIA/z1P4jQ8MqcI/FBj2M7jn3LpPic+pg+Xe3FFpGudgSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiHhbNweM/EHq7P+GNtaWZf62qrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTNhY2M4NzUtYTUwOS0z YjdhLWIxYmYtOTk2ZDM2MmUyZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3Cs7GUkIh32Z3p5Kf3BjvB3kV+s4CtLt/Y3RQB+gq5BMgDTTe1vnn3 1eZuE2HL1fuunZ30FYQ9qOgMRSg3ygdjQpFX7zpuAT1j2n/Jna7KExuG/vYpFtyP NLIcAd3Lx1W5zJ8yg1MDyrJTM99HFD1b+9OqWrx8xIyUnkS41cHWCHyEcphbhdVr DbpqQPKFpDrJDjsJhYOb1lrMfRMAkmyd1CfzAOATIZnqwrwd6JLBxFzwNGc99h5Y 58I0t7Qw0ySO+MhxbmkpJS2Mk0EzWJttoShQe1lZxAL0oeMrK8GQhUKe0leP5zWw qleCy2ThflSzEvvZ9hSKj6xXjCgoc6U= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:22 2024 by rpki-client on console-ams.rpki-client.org