$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd349be-9184-3b7c-9746-746b5e86626f.roa File: 2dd349be-9184-3b7c-9746-746b5e86626f.roa (raw, json) Hash identifier: dYUn1LWR+TUhsf8qUfiGw82adwkkftImgq/VbU+IPl4= Subject key identifier: 00:E0:36:DD:C9:1B:A6:C1:15:B0:8B:2A:D7:B8:2D:2C:59:25:D0:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15541DADB846A891A0E3800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd349be-9184-3b7c-9746-746b5e86626f.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 26284 IP address blocks: 207.170.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:41:da:db:84:6a:89:1a:0e:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=2b64893c-344c-46be-805f-59535f5ebec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:21:1d:98:98:4e:df:86:5e:59:76:3a:c5: a7:b4:23:ea:e7:fd:e2:1e:42:4b:c9:67:fb:31:22: 8c:38:e9:fc:51:e4:6c:f5:ec:c7:22:92:cc:1c:c9: b4:2f:7e:0d:b4:f2:48:a5:31:41:1e:fc:68:f6:b9: 6b:1a:03:7d:4a:23:a6:d3:d0:12:68:a0:85:71:73: 94:1c:50:e7:f5:bd:19:8f:54:8b:7e:14:86:db:5e: d0:59:c7:0e:68:87:28:71:c1:63:73:a1:92:d5:a0: 30:88:e9:f9:7d:35:45:3e:bf:0b:ba:a8:1f:1f:a7: c9:99:c8:bb:62:28:26:81:31:10:1a:8d:86:8c:07: 8d:2e:56:bf:2d:17:65:bc:cf:b3:0e:35:63:b9:5e: cc:e1:fc:3f:e4:1f:64:fc:e7:1e:b5:f2:6e:a9:84: f0:d9:93:85:b6:45:31:28:64:6a:b5:c5:a8:f0:06: 5b:a2:bb:b1:c0:0d:26:7e:ad:cd:42:60:38:da:89: f2:1c:e7:a6:de:71:c3:ba:d8:58:48:3b:6c:74:a8: 0b:17:9a:73:61:d2:0d:4a:e4:f8:e1:f5:ba:4a:0a: bd:9e:8d:08:5b:06:f7:c7:92:c8:be:39:1b:f9:e6: 4c:61:be:a3:b2:90:16:c2:e4:41:1f:cf:ca:c2:24: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E0:36:DD:C9:1B:A6:C1:15:B0:8B:2A:D7:B8:2D:2C:59:25:D0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dd349be-9184-3b7c-9746-746b5e86626f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.170.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3f:1c:f2:34:26:7f:03:3c:e3:56:63:aa:d6:cd:88:a6:1c: 5e:a4:7c:4c:d3:d3:b3:de:57:99:05:7c:af:72:c3:2d:78:eb: 8b:cf:b1:55:20:f8:98:9e:63:d6:42:26:91:98:44:6f:74:8e: 0f:eb:3d:7f:d0:f2:5b:da:63:4f:95:e9:6a:67:e6:05:10:74: bb:21:1e:f8:a6:a1:99:21:dd:7f:fd:cc:33:e2:28:06:17:f1: be:d1:48:0b:47:aa:be:fe:dc:71:23:19:a1:f1:78:d8:64:0e: 4e:a1:10:80:77:56:a6:cc:5e:7b:93:7e:53:57:00:3c:0d:58: b1:40:89:aa:97:e2:07:78:1f:6a:6b:87:13:03:fe:e0:84:0e: 0f:63:6d:a2:90:ae:bd:bf:ee:e3:e6:7c:7d:a3:33:60:3c:40: 61:4d:ba:eb:f3:97:12:6b:75:50:5a:57:6f:73:ae:a5:a1:e1: 3f:c2:08:9b:47:04:20:cd:f7:bf:46:d2:78:39:60:f6:a6:3b: 80:49:41:c7:e8:3e:bf:b9:9d:b8:2d:c6:b3:4a:f4:64:f4:f1: 3a:53:56:a5:8a:af:e1:2c:63:d4:64:28:89:66:29:26:91:9f: e4:83:4b:be:f7:6a:2d:5c:b3:32:f5:ad:7b:1a:15:a7:5c:49: 1e:ce:a1:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUHa24RqiRoOOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MmI2NDg5M2MtMzQ0Yy00NmJlLTgwNWYtNTk1MzVmNWViZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu8hHZiYTt+GXll2OsWntCPq5/3iHkJLyWf7 MSKMOOn8UeRs9ezHIpLMHMm0L34NtPJIpTFBHvxo9rlrGgN9SiOm09ASaKCFcXOU HFDn9b0Zj1SLfhSG217QWccOaIcoccFjc6GS1aAwiOn5fTVFPr8LuqgfH6fJmci7 YigmgTEQGo2GjAeNLla/LRdlvM+zDjVjuV7M4fw/5B9k/OcetfJuqYTw2ZOFtkUx KGRqtcWo8AZboruxwA0mfq3NQmA42onyHOem3nHDuthYSDtsdKgLF5pzYdINSuT4 4fW6Sgq9no0IWwb3x5LIvjkb+eZMYb6jspAWwuRBH8/KwiRy0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADgNt3JG6bBFbCLKte4LSxZJdAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRkMzQ5YmUtOTE4NC0z YjdjLTk3NDYtNzQ2YjVlODY2MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6olMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU/HPI0Jn8DPONWY6rWzYimHF6kfEzT07PeV5kFfK9ywy1464vPsVUg +JieY9ZCJpGYRG90jg/rPX/Q8lvaY0+V6Wpn5gUQdLshHvimoZkh3X/9zDPiKAYX 8b7RSAtHqr7+3HEjGaHxeNhkDk6hEIB3VqbMXnuTflNXADwNWLFAiaqX4gd4H2pr hxMD/uCEDg9jbaKQrr2/7uPmfH2jM2A8QGFNuuvzlxJrdVBaV29zrqWh4T/CCJtH BCDN979G0ng5YPamO4BJQcfoPr+5nbgtxrNK9GT08TpTVqWKr+EsY9RkKIlmKSaR n+SDS773ai1cszL1rXsaFadcSR7OofM= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:10 2024 by rpki-client on console-ams.rpki-client.org