$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa File: 0c61d555-9b3a-3829-8295-220018b2d077.roa (raw, json) Hash identifier: 7x/OdFKr4Z+lJW/QhBPJ5ab963JxhnXa5k7WLtGmKik= Subject key identifier: 31:D1:A8:60:43:87:E6:95:32:A3:8E:5F:3F:35:DF:87:AA:58:A1:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584734C73AB225407DF1500B3F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 7029 IP address blocks: 40.138.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c7:3a:b2:25:40:7d:f1:50:0b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=0573f21a-c615-49dc-80b7-c5c877bf2b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:08:08:ad:da:5a:0f:3f:13:17:a9:00:f5: ed:53:27:09:d8:06:32:7b:e7:d4:e4:28:9b:88:1f: a7:c4:35:aa:18:67:c6:f6:a3:a2:d6:79:ce:4a:22: 1a:a5:c8:5b:f0:b0:3f:64:de:16:e6:43:02:60:14: 8b:1b:af:7e:a0:fb:60:5f:26:fa:4b:67:6f:e8:76: 0b:5e:bb:ea:32:d5:2f:7e:ab:95:3e:12:66:4f:20: 95:02:00:e4:f7:20:3b:09:2b:a1:4a:9b:f6:c5:8c: 80:58:48:88:a7:7f:04:5d:5d:b4:f8:07:82:1d:33: e8:42:e1:89:de:ab:ce:cd:48:33:2f:bc:53:69:9d: dd:02:29:13:52:0a:78:a2:dd:fb:3d:7a:43:c5:99: ce:d6:85:94:dc:ec:aa:9d:9c:76:7f:db:9c:b2:65: c3:04:8a:e0:2d:61:9e:d0:08:9e:c0:9b:57:6a:6c: 63:c1:92:65:d9:f3:71:30:aa:b7:b7:e9:07:95:42: 9d:ef:9b:09:26:23:c0:cf:9e:a3:9b:f8:96:c6:aa: 32:fd:82:f2:1b:88:c2:62:eb:f9:dc:06:39:8b:51: 00:27:43:f7:ac:0a:da:fe:5e:72:83:d8:0b:17:03: 54:7e:08:a4:ce:c4:cb:ae:e2:43:5f:ae:b6:59:27: 44:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D1:A8:60:43:87:E6:95:32:A3:8E:5F:3F:35:DF:87:AA:58:A1:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b8:5e:b6:e1:e5:f3:71:86:8d:21:e4:7c:09:7c:90:75:5f: e4:26:51:99:11:c2:41:bd:b2:f6:b9:ba:72:bc:c8:0f:d2:96: e0:02:ff:e3:76:76:bb:ec:a3:78:da:c7:e5:07:6c:e3:83:99: 65:d0:ce:71:e2:04:12:bb:85:99:a9:8d:dd:12:87:f8:f0:85: a3:4d:98:f6:59:77:ae:42:4b:f8:59:c4:6e:77:da:ad:c6:99: fa:ba:95:df:0a:4b:2d:d6:89:a6:e7:d6:de:88:4f:94:8b:68: 1e:cc:13:ae:dd:95:d0:00:ce:89:0e:a6:28:51:f3:95:8b:b6: 31:e3:ec:96:fa:fc:22:99:1e:0a:c4:a3:49:31:51:22:16:83: d1:7e:bc:39:04:94:6d:a9:98:f0:29:9b:8a:79:72:c2:18:61: 34:de:79:60:b1:b8:8e:6a:18:f5:9c:d9:b6:99:49:d5:a7:6b: 66:fd:a4:6a:67:a0:52:a7:41:f8:fa:ef:11:bd:9c:9e:ae:0e: 11:79:83:30:c6:ca:c8:53:32:b3:ba:0c:73:92:49:89:71:40: d5:91:5b:e3:b6:94:21:99:db:e9:a2:16:41:db:82:27:fe:87: c4:3d:e5:16:1f:1b:34:26:2b:af:d2:81:ce:ca:25:fe:32:08: 2e:5b:c9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xzqyJUB98VALP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MDU3M2YyMWEtYzYxNS00OWRjLTgwYjctYzVjODc3YmYyYjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonoICK3aWg8/ExepAPXtUycJ2AYye+fU5Cib iB+nxDWqGGfG9qOi1nnOSiIapchb8LA/ZN4W5kMCYBSLG69+oPtgXyb6S2dv6HYL XrvqMtUvfquVPhJmTyCVAgDk9yA7CSuhSpv2xYyAWEiIp38EXV20+AeCHTPoQuGJ 3qvOzUgzL7xTaZ3dAikTUgp4ot37PXpDxZnO1oWU3OyqnZx2f9ucsmXDBIrgLWGe 0AiewJtXamxjwZJl2fNxMKq3t+kHlUKd75sJJiPAz56jm/iWxqoy/YLyG4jCYuv5 3AY5i1EAJ0P3rAra/l5yg9gLFwNUfgikzsTLruJDX662WSdExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHRqGBDh+aVMqOOXz8134eqWKF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM2MWQ1NTUtOWIzYS0z ODI5LTgyOTUtMjIwMDE4YjJkMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIo7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK4Xrbh5fNxho0h5HwJfJB1X+QmUZkRwkG9sva5unK8yA/SluAC/+N2 drvso3jax+UHbOODmWXQznHiBBK7hZmpjd0Sh/jwhaNNmPZZd65CS/hZxG532q3G mfq6ld8KSy3Wiabn1t6IT5SLaB7ME67dldAAzokOpihR85WLtjHj7Jb6/CKZHgrE o0kxUSIWg9F+vDkElG2pmPApm4p5csIYYTTeeWCxuI5qGPWc2baZSdWna2b9pGpn oFKnQfj67xG9nJ6uDhF5gzDGyshTMrO6DHOSSYlxQNWRW+O2lCGZ2+miFkHbgif+ h8Q95RYfGzQmK6/Sgc7KJf4yCC5byVA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:25 2024 by rpki-client on console-ams.rpki-client.org