$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa File: c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa (raw, json) Hash identifier: +jrffklww+Nw+rwxKop/VyIzI5vOOGoP7j2d39DbAqU= Subject key identifier: 55:6B:81:8C:39:CB:D9:0C:8F:67:8F:2C:9D:3A:C4:90:96:6E:4A:5D Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d Certificate serial: 010D0C9F43285847F3B2D4817C4A51ECC7AACF00 Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa Signing time: Thu 21 Nov 2024 10:21:42 +0000 ROA not before: Thu 21 Nov 2024 10:21:42 +0000 ROA not after: Wed 19 Feb 2025 10:21:42 +0000 asID: 153371 IP address blocks: 149.112.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:b2:d4:81:7c:4a:51:ec:c7:aa:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d Validity Not Before: Nov 21 10:21:42 2024 GMT Not After : Feb 19 10:21:42 2025 GMT Subject: CN=2a5bcf4b-6bbc-49ea-8723-23bf80234088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:3c:0b:87:21:92:47:a1:8e:a1:47:8f:81: 01:c1:7e:4b:e0:a7:ec:a1:1c:db:6f:08:f3:40:36: 9d:4a:e8:f2:9c:0f:be:db:3e:a9:88:ca:a3:91:ac: 96:d7:60:bb:0a:a5:a7:4b:91:4a:07:d9:47:82:a1: b2:8c:70:50:a3:b4:6a:04:52:8a:1b:1e:9b:79:71: a4:b2:70:95:8d:09:d9:82:b4:25:07:3f:ec:b5:ca: 58:30:58:41:78:aa:9e:61:36:3e:ce:d1:bd:ed:c4: 91:4d:56:a9:88:ec:05:76:1b:a9:5b:fc:a7:b9:cc: de:c0:2f:d7:db:5f:75:05:7f:82:bc:dd:af:86:f5: 88:f6:08:43:9c:a2:2e:54:4b:26:ee:8b:47:ba:de: ef:6c:d6:d3:b1:d6:fd:9d:e2:bd:44:2d:2e:49:34: 72:89:90:77:d8:d6:a5:f0:d9:fe:5c:e1:3a:43:ce: 0e:7e:52:51:07:1f:4b:7d:d0:ba:ea:ec:2c:d7:1d: bb:cf:da:27:28:92:69:0e:d1:c3:f4:96:dd:79:41: d6:b3:c9:fe:20:2b:9a:71:02:ff:ac:09:2d:01:48: 9f:bf:92:ca:d5:58:2a:d4:ce:ca:85:1a:0f:88:21: 34:2c:b7:5b:57:1d:91:db:66:79:a5:ba:19:8d:bd: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6B:81:8C:39:CB:D9:0C:8F:67:8F:2C:9D:3A:C4:90:96:6E:4A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c10d4b9b-c78f-36e1-a200-e30e3ab77061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl X509v3 Authority Key Identifier: keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer sbgp-ipAddrBlock: critical IPv4: 149.112.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:54:05:0f:e4:0e:88:29:7a:6e:09:ce:cb:51:34:50:02:3e: fe:9c:9e:35:78:c9:25:f8:d0:69:24:b8:5f:6e:c3:1a:f8:a5: 3d:1e:67:1d:81:58:bc:8f:87:0f:9f:e0:ec:99:38:a0:99:05: ed:b4:16:3d:53:df:d2:85:d3:b1:a3:a8:65:03:81:a9:4e:ed: 05:af:b4:98:84:99:fe:31:ff:fb:19:a9:ce:74:5a:93:3c:70: ac:1b:a8:48:4d:86:51:38:08:fd:75:92:d3:58:14:e0:5d:c4: 0d:0c:a8:6a:a1:99:2c:2f:77:b4:49:77:ad:e0:0e:93:8b:48: bb:2e:12:57:07:e2:0b:af:ca:14:3b:bd:37:af:6b:0a:cb:c7: c0:bd:47:a2:09:79:47:5c:1c:36:5d:74:94:5f:74:09:8a:02: f1:52:58:5c:ab:60:7c:e1:2c:6e:98:e3:77:e2:46:65:9a:b7: f7:54:36:f9:e1:f3:3f:b3:54:44:2d:1a:f3:be:af:0c:37:65: 7c:18:32:fb:69:5e:d8:52:d4:09:06:32:c0:d5:b7:0d:9a:57: f4:4b:53:a5:f9:9a:31:c2:a0:10:fe:d5:8b:e7:50:fb:e7:80: 63:9d:74:ce:a6:84:30:86:ca:3c:73:e5:d2:dc:73:01:bc:10: 3f:89:80:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfzstSBfEpR7MeqzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3 MTFkMB4XDTI0MTEyMTEwMjE0MloXDTI1MDIxOTEwMjE0MlowLzEtMCsGA1UEAxMk MmE1YmNmNGItNmJiYy00OWVhLTg3MjMtMjNiZjgwMjM0MDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4k8C4chkkehjqFHj4EBwX5L4KfsoRzbbwjz QDadSujynA++2z6piMqjkayW12C7CqWnS5FKB9lHgqGyjHBQo7RqBFKKGx6beXGk snCVjQnZgrQlBz/stcpYMFhBeKqeYTY+ztG97cSRTVapiOwFdhupW/ynuczewC/X 2191BX+CvN2vhvWI9ghDnKIuVEsm7otHut7vbNbTsdb9neK9RC0uSTRyiZB32Nal 8Nn+XOE6Q84OflJRBx9LfdC66uws1x27z9onKJJpDtHD9JbdeUHWs8n+ICuacQL/ rAktAUifv5LK1Vgq1M7KhRoPiCE0LLdbVx2R22Z5pboZjb2sPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVrgYw5y9kMj2ePLJ06xJCWbkpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvYzEwZDRiOWItYzc4Zi0z NmUxLWEyMDAtZTMwZTNhYjc3MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0 NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm MmM5NDcxMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtUBQ/kDogpem4JzstRNFACPv6cnjV4ySX40GkkuF9uwxr4pT0eZx2B WLyPhw+f4OyZOKCZBe20Fj1T39KF07GjqGUDgalO7QWvtJiEmf4x//sZqc50WpM8 cKwbqEhNhlE4CP11ktNYFOBdxA0MqGqhmSwvd7RJd63gDpOLSLsuElcH4guvyhQ7 vTevawrLx8C9R6IJeUdcHDZddJRfdAmKAvFSWFyrYHzhLG6Y43fiRmWat/dUNvnh 8z+zVEQtGvO+rww3ZXwYMvtpXthS1AkGMsDVtw2aV/RLU6X5mjHCoBD+1YvnUPvn gGOddM6mhDCGyjxz5dLccwG8ED+JgCk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org