$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0340bcb3-2830-3965-8810-fe5e1d7114bf.roa File: 0340bcb3-2830-3965-8810-fe5e1d7114bf.roa (raw, json) Hash identifier: +GqihCNjLTN+KFmU1N7oAnULB11sisOu9q8GFdd5MAE= Subject key identifier: 28:BC:95:32:E6:BB:89:05:70:35:72:74:3E:55:1F:41:E6:BE:5D:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15511B147296C4060758420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0340bcb3-2830-3965-8810-fe5e1d7114bf.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 11681 IP address blocks: 209.218.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:11:b1:47:29:6c:40:60:75:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=2ab4e5ea-bdaf-4665-a885-ff08988956ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:5a:84:ea:fa:45:c6:da:4b:88:6a:d6:09: f3:d2:b1:02:95:8a:75:00:6e:4b:28:b7:2e:4d:7c: 39:19:c9:60:dc:f1:ce:75:a9:ad:ed:fd:d4:6d:46: 7d:c1:4f:e5:33:43:24:04:b5:c9:b3:9e:b9:0b:bb: e3:a1:be:08:b0:3e:57:98:48:61:bf:42:b0:df:29: 60:bf:19:f5:67:d7:74:92:66:4d:b2:e6:6d:ac:1d: 09:3b:58:99:f5:d3:16:e3:c2:d9:e0:e9:08:68:fa: c8:90:fb:f7:ad:20:1f:c1:ae:55:a4:1e:a5:a5:7f: b2:70:3e:5a:33:1c:ad:21:73:e3:b7:a5:8a:61:4b: a5:a1:bb:a7:22:a1:04:63:af:ed:01:76:51:b6:5f: ed:f7:5b:38:28:2b:36:40:38:f2:1a:a8:a7:7a:e4: 6b:81:72:29:5a:60:6a:6b:72:55:1b:64:64:92:b9: 29:3e:04:55:4b:bd:a8:1d:9f:35:2d:11:70:5d:69: 11:a7:7a:e3:88:a2:b3:d6:5b:7b:00:c2:50:1c:5d: 56:3b:34:05:10:c4:2b:06:06:c1:76:c7:54:fe:4e: 31:2e:51:70:bb:9a:8f:68:f1:b9:9b:54:73:d2:f3: 3b:3a:62:26:42:d2:80:ad:77:8b:bc:e2:0c:1d:71: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BC:95:32:E6:BB:89:05:70:35:72:74:3E:55:1F:41:E6:BE:5D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0340bcb3-2830-3965-8810-fe5e1d7114bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.218.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d8:94:a1:11:de:3a:18:e7:1b:81:fc:61:f7:4f:e8:d5:c1: 13:00:32:b1:a9:71:5e:d0:8a:92:50:7f:5d:7c:95:d5:de:b2: ce:c8:68:56:4b:f4:c2:95:f4:a8:e8:ce:2f:f0:c9:d0:11:d4: e8:a6:da:6b:73:15:73:eb:df:14:e9:f8:b9:3c:1a:ed:44:e0: e1:ea:06:1e:2a:48:e0:d7:d3:31:5d:7f:a2:6f:58:70:58:05: 49:0c:c8:9a:02:b6:11:11:ca:e1:f8:75:43:83:1f:e5:6b:4d: bb:b6:ad:ea:a7:2a:71:5c:a7:66:58:d0:50:9b:0b:5a:cd:62: b0:4b:48:af:ea:1d:cf:36:54:6f:b6:8a:ef:5f:5d:3d:51:8f: 07:44:98:e3:61:dc:c9:8b:4b:c8:fa:ef:2e:07:ce:6a:53:21: 8e:12:76:b2:44:8c:ae:a8:9c:dc:d0:b8:19:e8:11:c1:c9:20: 25:2a:17:8b:07:b5:a7:ac:69:ce:22:95:b6:06:1a:f2:96:cc: 80:63:ab:c8:1d:e4:23:78:89:fe:50:35:27:25:92:30:5b:9d: 1e:9c:1f:17:4a:8e:4f:6d:39:46:b2:e9:fb:d4:8a:d5:a2:d5: 73:2a:fe:c0:96:8b:63:0d:33:96:11:71:6b:f7:68:ef:28:7e: c1:23:99:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRGxRylsQGB1hCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MmFiNGU1ZWEtYmRhZi00NjY1LWE4ODUtZmYwODk4ODk1NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhlahOr6RcbaS4hq1gnz0rEClYp1AG5LKLcu TXw5Gclg3PHOdamt7f3UbUZ9wU/lM0MkBLXJs565C7vjob4IsD5XmEhhv0Kw3ylg vxn1Z9d0kmZNsuZtrB0JO1iZ9dMW48LZ4OkIaPrIkPv3rSAfwa5VpB6lpX+ycD5a MxytIXPjt6WKYUulobunIqEEY6/tAXZRtl/t91s4KCs2QDjyGqineuRrgXIpWmBq a3JVG2RkkrkpPgRVS72oHZ81LRFwXWkRp3rjiKKz1lt7AMJQHF1WOzQFEMQrBgbB dsdU/k4xLlFwu5qPaPG5m1Rz0vM7OmImQtKArXeLvOIMHXF7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi8lTLmu4kFcDVydD5VH0Hmvl0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDM0MGJjYjMtMjgzMC0z OTY1LTg4MTAtZmU1ZTFkNzExNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXYlKER3joY5xuB/GH3T+jVwRMAMrGpcV7QipJQf118ldXess7IaFZL 9MKV9Kjozi/wydAR1Oim2mtzFXPr3xTp+Lk8Gu1E4OHqBh4qSODX0zFdf6JvWHBY BUkMyJoCthERyuH4dUODH+VrTbu2reqnKnFcp2ZY0FCbC1rNYrBLSK/qHc82VG+2 iu9fXT1RjwdEmONh3MmLS8j67y4HzmpTIY4SdrJEjK6onNzQuBnoEcHJICUqF4sH taesac4ilbYGGvKWzIBjq8gd5CN4if5QNSclkjBbnR6cHxdKjk9tOUay6fvUitWi 1XMq/sCWi2MNM5YRcWv3aO8ofsEjmWE= -----END CERTIFICATE-----Generated at Mon Nov 25 15:57:27 2024 by rpki-client on console-fra.rpki-client.org