$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa File: 2ffa544c-8472-30a4-b0ec-8039acc81923.roa (raw, json) Hash identifier: N3Kahxy+i4QSgZObevao2TkwWzK1kaIUwy2f2j3gM5M= Subject key identifier: 21:C8:3D:D3:3C:60:AB:50:60:21:C9:B1:3C:14:65:B4:DA:AE:69:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F569011EE1FE5B428D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 40.138.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f5:69:01:1e:e1:fe:5b:42:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=cbc510c9-2884-4396-a733-79ca7da9c0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:53:af:95:17:26:98:05:32:48:b1:ca:2d: 85:53:13:c6:3f:2f:c3:cc:57:da:6b:0b:5c:1d:6c: 7a:e8:00:0e:3a:85:66:b2:8b:f3:f7:36:a4:8d:42: b3:5f:e3:6e:57:e1:5e:ea:b7:66:41:fc:d0:d9:e9: 9d:2b:91:6a:5c:db:ca:c4:93:ea:9e:49:3e:b8:d8: a5:c6:a0:1f:30:5e:2f:67:13:9d:61:ff:72:eb:ac: 2f:92:e6:e4:12:64:c7:8e:65:b9:4b:40:9d:2d:d5: 53:d7:2d:85:48:cc:c2:b1:bc:e2:9f:ab:13:2e:d6: ff:af:37:ed:94:48:5f:7f:ce:76:8f:01:ef:c9:c3: 3c:c5:30:b5:ce:be:d0:17:57:05:9e:de:81:62:48: de:39:98:fa:8c:17:4a:6c:06:a9:3a:ae:dc:0a:d3: e1:49:25:56:6a:5e:3d:27:7e:88:0b:76:31:1b:a5: c7:ef:8d:1c:32:4c:9b:f2:cc:3d:e1:63:15:ac:47: 35:18:66:34:27:5f:92:fe:5a:22:68:45:b7:f8:73: fa:75:60:3a:14:03:5f:96:4a:c2:06:9a:64:96:4f: 1b:d3:f3:06:56:19:2e:f2:27:0a:a6:90:5c:be:cf: 5b:eb:b4:18:0f:e6:2c:08:4e:bf:01:41:57:e4:64: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:3D:D3:3C:60:AB:50:60:21:C9:B1:3C:14:65:B4:DA:AE:69:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ffa544c-8472-30a4-b0ec-8039acc81923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:cc:3a:85:1d:07:1a:71:2c:54:27:cc:4c:03:5c:4b:fb:b5: c9:2d:3f:c0:a4:6b:71:dc:83:b0:ad:ce:e7:ae:a7:51:ff:9c: d3:2e:40:15:d5:d3:a9:01:64:53:d1:71:50:38:ba:fb:25:63: 84:f8:d7:3d:6d:ee:5d:f6:4d:27:0b:42:3d:87:b6:78:f1:90: 59:03:1f:99:be:b7:d0:57:26:15:b5:7e:81:52:52:a1:2c:03: 08:ea:b8:71:f6:95:16:4c:48:c3:28:33:cf:44:82:de:88:b2: d6:f0:97:fb:a0:82:74:4f:86:f4:22:3c:cc:bf:05:d0:87:af: 40:ea:17:b4:ac:c3:23:b3:e5:15:6b:6a:97:4f:ea:77:f5:67: a2:31:2d:db:ed:5c:41:41:0a:30:3a:c7:d3:6a:f0:37:3b:37: 8d:3f:8f:11:e4:10:3a:7e:b0:f4:6b:fc:0c:18:39:da:8f:94: b3:56:a3:fe:62:8d:6b:ed:79:21:7f:5b:e0:7e:1a:f9:b1:06: 4b:77:b1:df:33:50:0d:cd:5b:f1:91:75:2b:97:c6:51:79:9c: a0:b1:da:76:e5:36:04:f9:24:a6:c4:dd:d3:7b:69:ab:a1:cb: 90:ec:33:4e:31:ff:45:81:59:0a:4f:1e:3b:1d:13:21:df:2f: 38:10:17:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPVpAR7h/ltCjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk Y2JjNTEwYzktMjg4NC00Mzk2LWE3MzMtNzljYTdkYTljMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvlTr5UXJpgFMkixyi2FUxPGPy/DzFfaawtc HWx66AAOOoVmsovz9zakjUKzX+NuV+Fe6rdmQfzQ2emdK5FqXNvKxJPqnkk+uNil xqAfMF4vZxOdYf9y66wvkubkEmTHjmW5S0CdLdVT1y2FSMzCsbzin6sTLtb/rzft lEhff852jwHvycM8xTC1zr7QF1cFnt6BYkjeOZj6jBdKbAapOq7cCtPhSSVWal49 J36IC3YxG6XH740cMkyb8sw94WMVrEc1GGY0J1+S/loiaEW3+HP6dWA6FANflkrC Bppklk8b0/MGVhku8icKppBcvs9b67QYD+YsCE6/AUFX5GTWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHIPdM8YKtQYCHJsTwUZbTarmkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZmYTU0NGMtODQ3Mi0z MGE0LWIwZWMtODAzOWFjYzgxOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGKIqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzMOoUdBxpxLFQnzEwDXEv7tcktP8Cka3Hcg7Ctzueup1H/nNMuQBXV 06kBZFPRcVA4uvslY4T41z1t7l32TScLQj2HtnjxkFkDH5m+t9BXJhW1foFSUqEs AwjquHH2lRZMSMMoM89Egt6Istbwl/uggnRPhvQiPMy/BdCHr0DqF7SswyOz5RVr apdP6nf1Z6IxLdvtXEFBCjA6x9Nq8Dc7N40/jxHkEDp+sPRr/AwYOdqPlLNWo/5i jWvteSF/W+B+GvmxBkt3sd8zUA3NW/GRdSuXxlF5nKCx2nblNgT5JKbE3dN7aauh y5DsM04x/0WBWQpPHjsdEyHfLzgQFy4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:37 2024 by rpki-client on console-ams.rpki-client.org