$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa File: 0808f751-9032-36f2-a1b1-b52cebd3efed.roa (raw, json) Hash identifier: N6Pal+/u2uRdI47S4gChEsiisaa8+Eb5DdyCNwn5o+c= Subject key identifier: D9:CB:B4:96:84:E3:1F:AD:78:28:26:8E:B1:6D:E9:58:57:DE:31:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F59EA63866B8C47EEFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 40.138.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f5:9e:a6:38:66:b8:c4:7e:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=3ee01a20-ddb3-4c0b-9784-115e1933f71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:8d:9c:e2:d2:64:c3:96:51:7a:d4:df:6d: 1f:0c:bf:ec:dd:d1:47:79:7d:72:3d:d3:bb:09:ee: 4f:e8:aa:33:d6:4d:35:1f:d8:d5:bb:15:19:6f:7c: ed:98:15:52:5c:c1:f6:44:a5:76:66:ad:91:8b:12: 0b:72:3c:24:86:57:ff:4b:76:8c:37:f8:6b:48:3e: fb:2c:9e:66:5c:1b:9d:32:df:33:34:4d:fc:79:a3: 79:e4:81:fb:cd:99:ce:de:fb:04:56:f5:fb:27:59: 4e:fd:49:b0:bb:a6:27:fb:4b:16:08:0c:bf:6c:a3: 75:90:73:da:c7:64:c4:68:32:32:21:07:a8:22:09: 13:70:14:9c:4b:9d:59:c7:c3:d2:f9:b4:2a:45:13: f3:c6:42:d5:44:25:10:d2:1b:f3:15:9a:24:59:1e: 96:1c:a4:6e:b4:6f:2c:79:82:48:67:b4:56:1a:28: bb:69:07:11:f7:4c:32:2a:d6:e5:5e:72:f5:22:d9: 10:be:4c:66:a1:3a:04:86:9b:75:4b:03:a2:53:ee: f0:9c:48:88:17:9d:a3:bf:a8:03:c5:dc:87:5c:f9: dd:3f:3a:7e:f0:37:c8:4c:60:87:12:d6:1b:75:c2: b5:ba:31:24:22:9c:c0:c2:50:7a:59:82:32:56:6a: 92:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:B4:96:84:E3:1F:AD:78:28:26:8E:B1:6D:E9:58:57:DE:31:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6c:36:02:b8:98:fa:8a:b4:57:44:4b:b0:f8:9d:3b:d2:bf: 4e:49:fa:6f:58:84:b5:6d:8b:41:25:6d:75:26:b3:30:9f:4c: cb:85:96:e7:10:35:2d:f3:7c:e3:73:2e:42:e8:e8:5e:44:7e: d1:44:c7:1d:c1:c0:92:ce:71:dc:1c:ce:44:07:5b:2f:d3:98: 18:b5:19:2e:6f:fd:c3:8a:2d:fe:00:fc:dc:96:03:26:f4:98: e5:13:9e:be:75:63:da:06:b7:3b:60:e9:8f:fa:26:80:48:f7: 41:67:58:a9:63:e3:6e:2d:f9:3c:36:9d:6a:5c:89:f1:af:7f: 0c:b2:8e:15:86:54:ac:f9:ff:eb:94:e7:e3:25:97:c4:86:7c: 53:cd:66:59:2c:93:33:7d:e4:80:c4:8c:93:ad:87:f9:c1:fb: 9e:13:7e:91:b7:6e:93:46:b0:6d:0d:aa:1f:e0:59:b6:2b:1f: 27:63:f3:46:f0:bd:cd:60:10:30:6a:d2:02:a1:23:33:1c:c7: 0f:80:21:9b:09:69:4e:cd:77:87:f5:71:d0:bf:7f:e8:07:0d: 2e:59:e0:91:38:df:78:67:79:bd:dc:88:76:ad:b6:8d:8f:db: 15:d2:36:3a:cd:dd:f2:59:7f:85:46:d0:7c:fc:52:d1:26:12: 3a:bf:03:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPWepjhmuMR+78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk M2VlMDFhMjAtZGRiMy00YzBiLTk3ODQtMTE1ZTE5MzNmNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+CNnOLSZMOWUXrU320fDL/s3dFHeX1yPdO7 Ce5P6Koz1k01H9jVuxUZb3ztmBVSXMH2RKV2Zq2RixILcjwkhlf/S3aMN/hrSD77 LJ5mXBudMt8zNE38eaN55IH7zZnO3vsEVvX7J1lO/Umwu6Yn+0sWCAy/bKN1kHPa x2TEaDIyIQeoIgkTcBScS51Zx8PS+bQqRRPzxkLVRCUQ0hvzFZokWR6WHKRutG8s eYJIZ7RWGii7aQcR90wyKtblXnL1ItkQvkxmoToEhpt1SwOiU+7wnEiIF52jv6gD xdyHXPndPzp+8DfITGCHEtYbdcK1ujEkIpzAwlB6WYIyVmqSWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnLtJaE4x+teCgmjrFt6VhX3jExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgwOGY3NTEtOTAzMi0z NmYyLWExYjEtYjUyY2ViZDNlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtsNgK4mPqKtFdES7D4nTvSv05J+m9YhLVti0ElbXUmszCfTMuFlucQ NS3zfONzLkLo6F5EftFExx3BwJLOcdwczkQHWy/TmBi1GS5v/cOKLf4A/NyWAyb0 mOUTnr51Y9oGtztg6Y/6JoBI90FnWKlj424t+Tw2nWpcifGvfwyyjhWGVKz5/+uU 5+Mll8SGfFPNZlkskzN95IDEjJOth/nB+54TfpG3bpNGsG0Nqh/gWbYrHydj80bw vc1gEDBq0gKhIzMcxw+AIZsJaU7Nd4f1cdC/f+gHDS5Z4JE433hneb3ciHatto2P 2xXSNjrN3fJZf4VG0Hz8UtEmEjq/AwU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:25 2024 by rpki-client on console-ams.rpki-client.org