$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa File: 1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa (raw, json) Hash identifier: te2Ht6vWq0UO570fI0KPvU74b4uzh6BQr0LBCUCSJko= Subject key identifier: 3A:A2:20:DB:96:4E:4C:06:D9:C9:49:58:F4:1F:96:4E:D2:2E:99:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155428628A51786DD34D280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 26914 IP address blocks: 66.32.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:42:86:28:a5:17:86:dd:34:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=80d64804-8f63-4f04-9148-09a053d89bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:65:ff:77:c1:df:a3:5f:b7:3a:f4:45:47: f3:90:8d:0d:e3:23:f8:26:17:6b:6b:0b:af:08:9c: dd:f0:da:85:8c:d4:99:07:ce:ec:d0:5f:71:96:82: 8f:85:8d:51:a7:50:79:ed:20:7a:b3:4f:6e:63:b4: fe:89:c5:50:7d:7b:b2:13:99:38:7e:41:74:a8:14: 06:20:d0:dd:eb:e7:d0:7b:cc:a8:1e:b9:b6:45:18: 2b:e0:1e:3c:43:b4:b8:85:5c:8e:78:ce:d2:73:3d: 53:00:21:f2:5e:68:86:34:93:1b:41:2c:30:11:ce: 0c:7e:ca:b6:b3:fc:02:fc:30:f7:c9:6c:7d:f7:e8: 81:67:a5:ae:3f:a3:e0:f6:4d:04:c0:52:b2:21:4a: d8:de:08:1f:3f:76:2e:92:31:1b:69:a2:3f:59:05: c2:52:9d:88:64:ff:9c:93:2a:b5:da:12:63:32:36: 31:d4:7e:08:22:61:c2:a5:f4:9f:d3:64:52:49:56: 13:11:5f:f3:db:e5:d5:3d:34:03:02:4c:97:ef:cc: bf:ae:69:da:93:4f:ac:e3:93:38:86:78:2f:03:a4: 4b:51:1a:00:16:6a:ac:59:e4:6f:f0:17:0b:d7:cf: 73:18:9a:49:05:62:cf:da:8b:62:be:33:c6:42:11: e3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A2:20:DB:96:4E:4C:06:D9:C9:49:58:F4:1F:96:4E:D2:2E:99:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ef:60:22:00:eb:60:a7:c6:cc:6c:a5:e1:9a:59:a1:64:6b: 84:0d:a7:7e:62:9e:a9:1b:27:fc:26:d6:63:48:d2:58:9a:66: e9:12:4e:5b:bb:9f:82:38:40:b0:ed:fe:c1:01:2a:a0:ec:41: 90:be:67:c1:4e:2e:0d:d8:de:6a:84:7a:b5:1b:29:ca:bf:30: e7:b6:23:2d:5c:24:3d:74:7e:1f:f0:21:19:51:5d:aa:79:41: 81:60:ec:ff:d5:d4:af:65:cb:57:14:bd:16:96:02:01:90:7b: 63:6a:ae:41:47:45:7d:bf:54:0b:f9:b9:54:93:fc:f0:54:16: 17:32:78:64:79:d5:8f:e2:34:64:74:f0:a6:ab:30:a4:e4:da: 1a:1e:02:f2:bd:8b:fa:e0:b5:37:cf:5f:74:3e:fe:bf:45:7f: 05:ac:9c:95:54:46:b9:65:b8:9a:be:cc:9e:d7:d9:80:83:e0: 06:27:cb:7e:26:31:47:80:61:48:71:2b:c5:56:e5:d4:ea:e7: 6b:fa:00:8b:4c:c2:fd:3c:95:26:da:e9:35:9c:cd:31:4c:34: 4b:d5:7b:13:ed:cf:a9:b5:ca:99:ae:33:ac:03:49:85:ff:8b: a1:73:69:bb:ec:d2:c4:fe:fa:81:62:ca:f9:87:41:c3:9f:e0: dd:cc:06:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUKGKKUXht000oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODBkNjQ4MDQtOGY2My00ZjA0LTkxNDgtMDlhMDUzZDg5YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUhl/3fB36Nftzr0RUfzkI0N4yP4Jhdrawuv CJzd8NqFjNSZB87s0F9xloKPhY1Rp1B57SB6s09uY7T+icVQfXuyE5k4fkF0qBQG INDd6+fQe8yoHrm2RRgr4B48Q7S4hVyOeM7Scz1TACHyXmiGNJMbQSwwEc4Mfsq2 s/wC/DD3yWx99+iBZ6WuP6Pg9k0EwFKyIUrY3ggfP3YukjEbaaI/WQXCUp2IZP+c kyq12hJjMjYx1H4IImHCpfSf02RSSVYTEV/z2+XVPTQDAkyX78y/rmnak0+s45M4 hngvA6RLURoAFmqsWeRv8BcL189zGJpJBWLP2otivjPGQhHjbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqiINuWTkwG2clJWPQflk7SLpmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZiYTIwM2ItYTBmMC0z YWI2LWE5MDQtNGFkYjQyNDNhYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXvYCIA62CnxsxspeGaWaFka4QNp35inqkbJ/wm1mNI0liaZukSTlu7 n4I4QLDt/sEBKqDsQZC+Z8FOLg3Y3mqEerUbKcq/MOe2Iy1cJD10fh/wIRlRXap5 QYFg7P/V1K9ly1cUvRaWAgGQe2NqrkFHRX2/VAv5uVST/PBUFhcyeGR51Y/iNGR0 8KarMKTk2hoeAvK9i/rgtTfPX3Q+/r9FfwWsnJVURrlluJq+zJ7X2YCD4AYny34m MUeAYUhxK8VW5dTq52v6AItMwv08lSba6TWczTFMNEvVexPtz6m1ypmuM6wDSYX/ i6Fzabvs0sT++oFiyvmHQcOf4N3MBnE= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:06 2024 by rpki-client on console-ams.rpki-client.org