$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa File: c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa (raw, json) Hash identifier: s0ZyBzbUD0BC2lhJ6Nu9KVgCSrbUCgM4yA++hw09+bI= Subject key identifier: B6:B7:2F:6F:12:BB:61:B1:62:15:62:AA:7C:9A:1A:1C:43:8B:E8:09 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F43285847A73BEBE940E7DE3215EAEE00 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 11377 IP address blocks: 149.72.2.0/23 maxlen: 23 149.72.96.0/23 maxlen: 23 149.72.98.0/23 maxlen: 23 167.89.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:eb:e9:40:e7:de:32:15:ea:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=2f1bfa12-327a-42d2-a9a4-2b745ba26f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:69:ac:72:40:74:07:1d:14:96:4b:42:de: a5:1c:b2:2b:37:ed:5e:73:31:e1:7c:f7:55:ea:a9: a9:d2:f1:53:4c:fa:e7:89:06:74:47:76:17:76:84: 72:2f:07:a7:5b:04:6a:08:dd:fc:ea:97:dc:28:5c: 31:32:66:a6:e4:55:66:5a:3b:9f:ee:78:df:a3:e8: 5d:56:77:3f:41:e6:a6:1d:e7:14:6d:97:97:d4:78: 0a:88:35:a9:31:42:bc:30:10:d0:3b:31:3f:bd:f3: 30:15:dd:a4:fd:b5:f3:77:e0:17:17:86:ed:99:2e: 55:37:eb:c2:92:e4:71:6d:ed:1e:bc:58:df:29:3e: 7f:3b:21:fa:71:6b:d4:0e:dd:c3:37:1a:15:88:af: 0a:ed:88:54:86:d4:fc:6d:1c:26:c2:64:ef:35:19: c7:12:bc:2e:78:45:98:80:d3:b1:38:d8:d3:3d:27: 05:b7:83:9c:37:83:28:3d:36:b1:e3:b2:79:5d:52: 02:13:98:0c:c9:8c:ff:06:73:d1:94:9e:f9:75:13: bf:ea:2a:56:19:a2:a7:1f:4f:05:f2:4c:fb:cc:cf: ad:e5:6c:e6:98:bc:53:d6:7f:49:59:0c:33:62:86: 61:99:94:db:d5:99:cb:16:bd:a0:17:a2:8c:15:f9: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B7:2F:6F:12:BB:61:B1:62:15:62:AA:7C:9A:1A:1C:43:8B:E8:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/c828f9e3-b04c-3451-ae15-b4dc112cf34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.2.0/23 149.72.96.0/22 167.89.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:23:71:ec:77:04:b9:01:db:1f:70:2a:33:5a:8f:b1:05:3e: 06:eb:62:e0:4e:96:41:e6:d1:48:8d:25:f4:70:65:9b:b9:ea: 58:ed:e8:2c:91:85:9c:89:80:fd:3d:b2:6d:ba:e7:13:cc:7e: 54:98:f3:7a:7c:dd:0f:02:b3:02:32:ef:f5:4c:0b:ac:6f:e9: 75:20:cf:76:11:65:2a:5e:60:9c:65:9d:82:c3:ea:78:c3:f8: 4c:09:46:72:e5:bf:76:57:33:e3:3b:92:1a:f1:12:c1:11:7a: 8d:80:78:5b:0e:8c:09:fb:f5:b7:a8:21:84:a5:0d:5b:51:d9: d2:5b:51:cd:cb:24:80:9a:e0:12:33:59:e3:c7:58:ed:10:71: 15:0e:cb:a5:40:24:c1:fc:a8:f8:c5:74:73:44:23:40:45:be: 8d:f6:fc:38:49:cb:04:40:ed:6c:84:42:af:3e:e3:58:69:72: b0:18:11:f2:b2:9b:df:6d:9a:ba:35:c3:b9:e6:f1:4f:a4:e1: 20:ac:74:63:f2:26:93:55:df:ab:87:1a:d6:76:99:92:4a:0e: d2:38:4e:d3:d1:c7:2c:7c:60:b7:8e:64:2d:68:88:b8:c6:6c: 6b:ae:30:7a:1d:48:c9:0a:7c:8d:59:79:59:1d:11:79:89:5a: ef:8e:f8:f4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEenO+vpQOfeMhXq7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MmYxYmZhMTItMzI3YS00MmQyLWE5YTQtMmI3NDViYTI2ZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC9prHJAdAcdFJZLQt6lHLIrN+1eczHhfPdV 6qmp0vFTTPrniQZ0R3YXdoRyLwenWwRqCN386pfcKFwxMmam5FVmWjuf7njfo+hd Vnc/QeamHecUbZeX1HgKiDWpMUK8MBDQOzE/vfMwFd2k/bXzd+AXF4btmS5VN+vC kuRxbe0evFjfKT5/OyH6cWvUDt3DNxoViK8K7YhUhtT8bRwmwmTvNRnHErwueEWY gNOxONjTPScFt4OcN4MoPTax47J5XVICE5gMyYz/BnPRlJ75dRO/6ipWGaKnH08F 8kz7zM+t5WzmmLxT1n9JWQwzYoZhmZTb1ZnLFr2gF6KMFfl3MwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLa3L28Su2GxYhViqnyaGhxDi+gJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvYzgyOGY5ZTMtYjA0Yy0z NDUxLWFlMTUtYjRkYzExMmNmMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBlUgCAwQC lUhgAwQAp1lxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHgjcex3BLkB2x9wKjNaj7EFPgbrYuBOlkHm0UiN JfRwZZu56ljt6CyRhZyJgP09sm265xPMflSY83p83Q8CswIy7/VMC6xv6XUgz3YR ZSpeYJxlnYLD6njD+EwJRnLlv3ZXM+M7khrxEsEReo2AeFsOjAn79beoIYSlDVtR 2dJbUc3LJICa4BIzWePHWO0QcRUOy6VAJMH8qPjFdHNEI0BFvo32/DhJywRA7WyE Qq8+41hpcrAYEfKym99tmro1w7nm8U+k4SCsdGPyJpNV36uHGtZ2mZJKDtI4TtPR xyx8YLeOZC1oiLjGbGuuMHodSMkKfI1ZeVkdEXmJWu+O+PQ= -----END CERTIFICATE-----Generated at Sun Nov 24 22:13:03 2024 by rpki-client on console-fra.rpki-client.org