$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa File: 891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json) Hash identifier: FSlsDSo4DmNHtUM6ISq9U54bAibgVCl2rWb9MJZ/upI= Subject key identifier: 95:7A:EA:66:4C:F3:EB:4A:EA:39:89:63:40:60:81:1D:80:7F:97:66 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285847D29F562FC523D3A6A341B080 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 21949 IP address blocks: 199.45.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:56:2f:c5:23:d3:a6:a3:41:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=7a39cbad-a7bc-4cf7-9899-94b12cace65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:85:50:c0:f7:47:88:f1:40:ab:22:37:95:5d: 26:a1:ec:2c:d8:17:1f:63:ef:13:3f:ef:f3:45:24: 3c:08:48:e5:cd:92:3d:ac:0b:cb:f4:1e:4e:36:35: c8:ff:c3:64:93:4c:82:f7:73:6f:83:52:92:51:92: e9:a3:0b:6d:84:49:7d:e5:ce:5c:67:77:2f:97:39: 3d:d6:84:24:b5:12:6d:83:7d:8d:2b:1c:30:a6:84: 2c:dc:5c:e3:c9:dd:ab:60:ea:ea:10:41:2a:2d:bc: 6f:06:5f:50:8d:e8:d9:09:9f:39:6a:95:e7:a2:90: 1c:23:c9:84:c2:dc:b8:14:8b:19:f9:d6:ba:f7:02: 74:72:8c:62:1f:93:21:8c:fe:cb:37:79:be:c7:6b: 3a:e9:15:74:34:82:92:bc:77:a8:5e:6b:b7:96:d7: a7:32:69:aa:bf:15:b0:80:c8:91:af:24:72:8b:cb: 98:f2:b5:07:56:4b:82:ee:36:81:91:26:e8:eb:3b: 8c:0d:d7:4d:df:96:0d:7e:58:54:f2:d1:76:15:54: 3e:ca:8d:3f:4d:f6:72:c1:f4:83:7b:87:a7:d6:57: 06:e6:6b:fd:bc:9d:bf:86:9a:2d:e8:4b:dc:47:93: 96:c0:84:3f:23:57:26:71:a0:ff:da:68:8b:a7:7a: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7A:EA:66:4C:F3:EB:4A:EA:39:89:63:40:60:81:1D:80:7F:97:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:38:3a:60:01:ad:ac:d8:e5:82:53:31:04:d6:24:2d:f9:17: 11:a5:7f:0a:3f:88:a1:34:59:3e:e8:9b:69:1c:9d:4c:59:14: 1b:fc:c7:79:32:41:6d:dd:8a:11:84:76:38:f5:7b:73:f5:46: 6d:8d:20:6c:51:6b:75:87:cc:f0:bb:80:68:c6:92:8c:01:35: d0:e7:fa:85:56:92:21:bb:44:90:5e:20:da:56:e2:36:6f:f5: 8e:b4:d7:15:72:75:81:8d:4e:37:1a:b7:e9:f3:5a:20:f1:3c: 4b:fd:ef:91:1a:15:87:41:a3:f2:43:5a:da:3c:31:6b:75:b3: d2:70:6d:93:8f:de:e0:d1:14:f1:2f:1c:f7:a3:5c:cf:2a:36: b4:ff:6f:72:87:0c:31:93:1b:c5:75:c1:e0:c4:49:af:36:ba: a4:6b:48:1a:b8:5a:1f:ff:f2:24:d1:b5:c3:b4:05:c5:93:d6: 35:03:9c:53:f1:bd:3a:81:3c:87:c5:c0:70:ed:1d:17:ea:fa: d0:c6:30:4e:7c:ff:bf:6e:04:fb:2c:14:ce:f6:7b:85:38:80: 83:8d:6c:a6:87:bf:4b:15:f6:eb:f1:d4:9d:1a:f5:af:0b:96: d7:07:f2:4c:ca:af:87:23:e2:00:b1:27:06:71:42:c2:13:cf: 25:6c:43:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn1YvxSPTpqNBsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk N2EzOWNiYWQtYTdiYy00Y2Y3LTk4OTktOTRiMTJjYWNlNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioVQwPdHiPFAqyI3lV0moews2BcfY+8TP+/z RSQ8CEjlzZI9rAvL9B5ONjXI/8Nkk0yC93Nvg1KSUZLpowtthEl95c5cZ3cvlzk9 1oQktRJtg32NKxwwpoQs3Fzjyd2rYOrqEEEqLbxvBl9QjejZCZ85apXnopAcI8mE wty4FIsZ+da69wJ0coxiH5MhjP7LN3m+x2s66RV0NIKSvHeoXmu3ltenMmmqvxWw gMiRryRyi8uY8rUHVkuC7jaBkSbo6zuMDddN35YNflhU8tF2FVQ+yo0/TfZywfSD e4en1lcG5mv9vJ2/hpot6EvcR5OWwIQ/I1cmcaD/2miLp3oKcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV66mZM8+tK6jmJY0BggR2Af5dmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvODkxNzAwYzEtYjNmNi0z MDk5LTlmNWYtNzhiYTBiMjdkMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw4OmABrazY5YJTMQTWJC35FxGlfwo/iKE0WT7om2kcnUxZFBv8x3ky QW3dihGEdjj1e3P1Rm2NIGxRa3WHzPC7gGjGkowBNdDn+oVWkiG7RJBeINpW4jZv 9Y601xVydYGNTjcat+nzWiDxPEv975EaFYdBo/JDWto8MWt1s9JwbZOP3uDRFPEv HPejXM8qNrT/b3KHDDGTG8V1weDESa82uqRrSBq4Wh//8iTRtcO0BcWT1jUDnFPx vTqBPIfFwHDtHRfq+tDGME58/79uBPssFM72e4U4gIONbKaHv0sV9uvx1J0a9a8L ltcH8kzKr4cj4gCxJwZxQsITzyVsQ2k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org