$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa File: 1c416a0e-c8a9-327d-8ca0-fc562292becf.roa (raw, json) Hash identifier: WbC8wfnZgtGKshjNXva9YAf6sWYXNipZCU6mkQhhH0I= Subject key identifier: 53:2C:E6:88:AA:90:19:BF:8B:F2:5A:9F:23:94:71:43:00:64:CF:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858471FD5DBA1004C5DC157FF3E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 40.129.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:db:a1:00:4c:5d:c1:57:ff:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=5c26d180-83d9-4907-a1bd-cc5132ae16f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:54:1d:db:9e:98:9e:e1:99:a7:70:52:bc: 7e:88:7d:18:29:bc:bc:6f:6d:ef:92:de:f1:f6:4f: 5e:3a:70:ff:69:74:72:e2:89:15:36:93:e7:1e:75: cd:ef:d6:c0:1b:20:3f:01:b4:f1:80:c2:ad:4c:72: 98:0d:f6:79:d6:46:06:83:6b:92:a8:89:20:63:5f: 01:77:89:f5:dd:73:d4:aa:61:21:b0:20:bc:f7:17: ee:b9:43:dc:06:84:4e:40:c8:97:56:08:04:ef:89: 80:b5:e1:b9:93:48:d5:49:8d:33:79:91:f1:29:ed: a1:1c:db:f9:12:1a:12:6c:57:14:6b:a6:85:fa:68: ef:d6:b1:8b:aa:73:49:f8:93:33:0c:c3:cc:59:2e: 09:d7:08:6a:66:1a:e1:8e:86:e5:62:76:ba:e3:ea: 5a:da:96:d6:e8:47:11:bd:93:c4:f4:a5:db:65:c0: 58:4e:b9:42:e7:b2:80:1b:a2:dd:b3:80:09:fa:27: 04:ef:14:bb:12:c5:eb:15:c5:37:0a:c6:07:ae:33: 73:ce:95:af:43:b2:91:26:2c:7a:b5:2b:c8:4e:19: 78:54:d1:99:5e:fd:9d:e3:a2:f1:56:60:a7:bb:63: 8c:f4:04:41:b1:5f:dd:3a:fc:71:66:d3:4c:6d:8e: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2C:E6:88:AA:90:19:BF:8B:F2:5A:9F:23:94:71:43:00:64:CF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:21:7f:0b:2b:f2:68:9a:ea:35:86:54:3f:7a:4b:30:67:b6: 5e:60:13:8d:d5:50:d1:25:12:f2:b1:d7:c2:c7:48:47:07:99: 32:13:18:ad:70:6e:40:13:ee:20:54:15:eb:e3:b9:99:7a:a2: 89:4c:89:19:5b:4d:0b:d1:29:e3:77:44:a9:00:50:a1:92:e3: 42:6e:92:40:4d:d9:b3:62:36:59:d2:09:a9:ed:02:35:be:e4: f3:4f:2a:5c:92:88:10:e1:51:20:0d:1b:43:f1:d1:f1:cc:8f: d9:5a:96:33:a4:64:bb:93:84:8f:64:d1:c0:bb:08:1f:78:5b: eb:ac:b6:19:2d:27:c8:8f:c8:f3:e3:c5:30:a9:b5:19:db:73: 1c:f5:b8:6d:bf:e4:73:8f:67:b2:f1:b5:7f:06:2f:d1:08:83: ad:ca:cf:ec:bc:50:fd:18:91:56:e4:e9:69:d0:07:78:6b:aa: 3c:a7:0e:f5:ee:58:a0:97:b0:88:69:b6:4c:bc:cb:cc:d8:3e: 7b:b2:09:de:66:9a:96:7e:19:bd:e6:d6:ed:34:b2:34:d2:91: 2e:53:9d:33:b1:ba:6f:48:7b:bc:82:40:49:07:47:a1:84:bb: 38:3a:93:9a:1d:6f:a8:70:27:d8:ef:8b:b2:5e:8b:57:22:44: af:04:13:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1duhAExdwVf/PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NWMyNmQxODAtODNkOS00OTA3LWExYmQtY2M1MTMyYWUxNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNBUHduemJ7hmadwUrx+iH0YKby8b23vkt7x 9k9eOnD/aXRy4okVNpPnHnXN79bAGyA/AbTxgMKtTHKYDfZ51kYGg2uSqIkgY18B d4n13XPUqmEhsCC89xfuuUPcBoROQMiXVggE74mAteG5k0jVSY0zeZHxKe2hHNv5 EhoSbFcUa6aF+mjv1rGLqnNJ+JMzDMPMWS4J1whqZhrhjoblYna64+pa2pbW6EcR vZPE9KXbZcBYTrlC57KAG6Lds4AJ+icE7xS7EsXrFcU3CsYHrjNzzpWvQ7KRJix6 tSvIThl4VNGZXv2d46LxVmCnu2OM9ARBsV/dOvxxZtNMbY5JhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMs5oiqkBm/i/JanyOUcUMAZM+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWM0MTZhMGUtYzhhOS0z MjdkLThjYTAtZmM1NjIyOTJiZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4hfwsr8mia6jWGVD96SzBntl5gE43VUNElEvKx18LHSEcHmTITGK1w bkAT7iBUFevjuZl6oolMiRlbTQvRKeN3RKkAUKGS40JukkBN2bNiNlnSCantAjW+ 5PNPKlySiBDhUSANG0Px0fHMj9laljOkZLuThI9k0cC7CB94W+usthktJ8iPyPPj xTCptRnbcxz1uG2/5HOPZ7LxtX8GL9EIg63Kz+y8UP0YkVbk6WnQB3hrqjynDvXu WKCXsIhptky8y8zYPnuyCd5mmpZ+Gb3m1u00sjTSkS5TnTOxum9Ie7yCQEkHR6GE uzg6k5odb6hwJ9jvi7Jei1ciRK8EE24= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:52 2024 by rpki-client on console-fra.rpki-client.org