$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa File: 55c10b42-1e3f-391a-803f-94a6efd0d529.roa (raw, json) Hash identifier: KXrCTBcGMEK3S6xst284ZX8B4pg5xvpCeQZ1JOcezaY= Subject key identifier: 08:FB:F5:83:FC:56:BE:87:49:64:79:0C:E0:07:D2:E5:BD:4B:F7:3A Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285847967BCB0F5844733EE713BC80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 21949 IP address blocks: 173.243.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:cb:0f:58:44:73:3e:e7:13:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=0a9c4a92-f4bf-4077-a63f-59224a86dcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:fc:da:22:d1:9f:10:e7:f0:ec:80:79:e3: 68:20:d9:0b:9e:13:c0:cf:be:78:e5:70:00:ac:e6: 18:88:14:55:90:ce:f7:78:ea:f1:34:f1:71:77:fa: 65:37:ec:16:29:ff:0a:c1:cd:78:95:ae:37:a2:3b: ec:c9:52:36:1e:c7:73:d9:dc:9a:da:b0:77:16:3a: 1b:8b:d1:74:11:1c:9d:ed:55:2d:b9:72:8c:d7:21: 21:8a:4c:fb:46:80:d5:0d:30:d7:b6:54:58:d4:58: 56:22:a0:60:7d:b6:5a:96:cc:af:ca:5a:df:9b:ef: 12:8c:71:4b:42:99:0a:06:ce:a1:f6:18:e6:1f:4d: 0f:21:25:06:2d:1b:56:f3:24:06:1f:af:52:e3:73: c4:24:28:3d:79:c9:8b:f8:99:26:aa:63:11:7a:7a: e8:5a:ac:9c:10:cb:47:48:82:6e:a3:fe:7c:85:79: 1b:d8:85:1f:67:58:be:74:54:92:32:cb:16:04:05: 20:47:b3:39:02:2c:50:12:0f:71:41:6a:dd:78:93: 69:6d:df:74:1c:b4:f3:b1:17:9a:c4:43:68:ac:e0: ea:d7:7a:e9:1a:89:88:79:14:a5:76:5c:12:e2:2c: f8:92:64:b3:87:d3:47:a7:4c:9a:18:fd:f6:64:6b: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FB:F5:83:FC:56:BE:87:49:64:79:0C:E0:07:D2:E5:BD:4B:F7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 173.243.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c3:1f:8b:7d:ef:d6:24:29:80:32:87:2a:da:91:21:2e:49: f6:af:15:08:7d:89:64:03:8e:d9:60:15:06:ee:67:7c:5b:d4: b5:2e:e8:ff:36:4c:8c:ce:1a:a0:53:13:cb:70:f3:42:c3:72: ce:92:65:9a:ac:18:5c:91:36:07:25:82:86:b5:ea:4b:22:a7: d5:e3:c1:9e:ac:c8:fc:bf:9a:6a:94:04:d2:1b:61:91:4a:83: be:36:62:52:cd:d5:ef:00:68:72:a6:8f:ea:dd:9a:9d:13:b6: 93:16:39:5f:1b:f2:4e:68:c0:2a:e3:50:4e:1d:50:0f:ed:d7: 49:9a:01:1a:d3:9d:d1:54:00:8a:0b:d0:b9:a7:37:74:6f:a7: b8:0e:0e:0b:2e:26:a0:81:b6:f1:11:46:bd:9b:ec:ef:15:d2: 08:63:14:8c:1c:89:03:6e:b3:37:f2:28:73:a7:8c:e0:d5:18: b8:1b:6f:6b:c0:4b:40:dc:6d:cf:97:6d:ae:39:e6:63:9a:24: ad:33:16:30:03:3b:68:1b:c5:75:c7:90:78:ee:b2:62:69:bc: 63:a6:03:bc:67:fb:1b:b2:9b:ce:e7:e3:34:ec:39:b7:6e:1f: e5:e5:7d:0b:d8:70:04:06:d8:c2:10:c1:50:c3:32:1c:38:66: 78:d5:ad:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8sPWERzPucTvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk MGE5YzRhOTItZjRiZi00MDc3LWE2M2YtNTkyMjRhODZkY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicr82iLRnxDn8OyAeeNoINkLnhPAz7545XAA rOYYiBRVkM73eOrxNPFxd/plN+wWKf8Kwc14la43ojvsyVI2Hsdz2dya2rB3Fjob i9F0ERyd7VUtuXKM1yEhikz7RoDVDTDXtlRY1FhWIqBgfbZalsyvylrfm+8SjHFL QpkKBs6h9hjmH00PISUGLRtW8yQGH69S43PEJCg9ecmL+JkmqmMRenroWqycEMtH SIJuo/58hXkb2IUfZ1i+dFSSMssWBAUgR7M5AixQEg9xQWrdeJNpbd90HLTzsRea xENorODq13rpGomIeRSldlwS4iz4kmSzh9NHp0yaGP32ZGv5iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAj79YP8Vr6HSWR5DOAH0uW9S/c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNTVjMTBiNDItMWUzZi0z OTFhLTgwM2YtOTRhNmVmZDBkNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrDH4t979YkKYAyhyrakSEuSfavFQh9iWQDjtlgFQbuZ3xb1LUu6P82 TIzOGqBTE8tw80LDcs6SZZqsGFyRNgclgoa16ksip9XjwZ6syPy/mmqUBNIbYZFK g742YlLN1e8AaHKmj+rdmp0TtpMWOV8b8k5owCrjUE4dUA/t10maARrTndFUAIoL 0LmnN3Rvp7gODgsuJqCBtvERRr2b7O8V0ghjFIwciQNuszfyKHOnjODVGLgbb2vA S0Dcbc+Xba455mOaJK0zFjADO2gbxXXHkHjusmJpvGOmA7xn+xuym87n4zTsObdu H+XlfQvYcAQG2MIQwVDDMhw4ZnjVrYE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org