$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36d6678b-ec38-3968-82da-f9325bbe2f0f.roa File: 36d6678b-ec38-3968-82da-f9325bbe2f0f.roa (raw, json) Hash identifier: dpSnXcGtp6rMoxcvNHNiUWVw04RgbPgbReQd8osqVgw= Subject key identifier: DE:AE:27:CD:CE:15:22:C0:B3:E7:ED:1B:0D:2E:8A:8E:C6:6F:1B:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551148ACF9FC447F6E8B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36d6678b-ec38-3968-82da-f9325bbe2f0f.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7252 IP address blocks: 199.195.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:11:48:ac:f9:fc:44:7f:6e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=18a2b60b-9686-4ddd-8202-f677dc8f81dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4c:a9:53:93:6d:cf:72:eb:d0:39:7c:a0:b1: d5:4b:35:e8:4f:8a:44:06:eb:42:f8:eb:94:e5:0f: b0:51:68:86:0b:09:e3:e2:61:61:a4:df:9d:16:69: f6:50:4a:95:d6:f7:21:1f:44:a3:04:b8:6d:cb:e6: 69:4d:2a:6b:88:97:0f:2a:5e:b5:fc:cd:a3:19:5a: f0:83:bd:02:d4:3b:f9:16:53:5a:77:44:59:4a:ea: 14:6d:5f:06:bf:8b:88:b8:ec:4f:e7:90:4c:71:95: 54:14:41:78:6c:db:11:af:a1:cb:13:aa:b8:30:44: ca:1a:1f:5d:93:62:51:bc:0b:60:0c:eb:d6:83:4e: 92:4b:cb:f8:bb:46:87:3f:db:33:e1:21:80:d8:66: 58:3a:8b:36:6b:94:30:ae:fe:fe:11:a3:41:70:35: d2:77:0f:53:12:8d:cf:09:53:fa:85:45:57:f5:6e: ff:a2:3d:f7:13:f3:88:13:94:4a:bd:a3:f1:3a:95: 9d:1f:b5:59:9c:22:5a:52:0d:ff:04:0d:a4:f2:73: 0b:82:c1:df:b0:5a:d8:12:32:80:40:e0:a6:e3:53: 1d:22:b2:b4:87:ac:3c:ac:4f:1d:6d:ae:54:a3:e6: 5d:43:c8:10:23:59:16:01:5f:8e:0f:2c:74:1e:6e: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AE:27:CD:CE:15:22:C0:B3:E7:ED:1B:0D:2E:8A:8E:C6:6F:1B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36d6678b-ec38-3968-82da-f9325bbe2f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2f:f5:dc:08:8d:33:5e:14:f2:96:3e:f8:5a:b7:78:26:73: b0:95:8c:f3:ad:b7:a0:2e:0d:d9:3f:af:69:39:e8:38:3d:ad: 4d:5c:41:19:a2:85:08:62:66:4d:92:90:98:5f:04:45:b8:5a: 25:0b:c4:17:21:ab:c2:e6:48:00:1b:16:3e:1e:cf:01:37:32: 9e:61:b4:19:87:b2:f0:a3:a8:62:6a:04:c5:0a:f3:63:a5:76: 84:57:45:cd:0f:9b:be:67:c3:42:76:02:7f:19:5b:8c:c1:97: fe:7f:03:2e:c5:e5:7f:d4:c3:7e:3e:56:c8:89:a3:70:7a:0b: 46:f5:9f:98:8c:d1:15:85:08:29:d6:e9:84:df:bd:93:f8:a4: 6f:0c:b2:b3:21:d7:24:a2:b7:f4:60:1a:cb:d8:c5:a6:47:ad: 88:26:44:57:2c:40:f3:88:45:fc:01:11:9a:b9:af:49:3c:58: 10:31:8c:15:a0:9d:a9:ae:9c:9a:13:02:f6:10:7d:bf:08:2d: 0e:9b:f4:fa:5e:f4:ea:61:30:9d:ed:f1:5c:c3:9b:90:87:a6: 72:d4:5f:a3:35:e0:7a:56:61:36:51:2f:bd:f2:e4:22:46:16: cd:cf:fb:36:89:58:e2:98:de:f9:fc:91:e0:35:65:1c:57:56: ec:8a:26:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRFIrPn8RH9ui4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MThhMmI2MGItOTY4Ni00ZGRkLTgyMDItZjY3N2RjOGY4MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUypU5Ntz3Lr0Dl8oLHVSzXoT4pEButC+OuU 5Q+wUWiGCwnj4mFhpN+dFmn2UEqV1vchH0SjBLhty+ZpTSpriJcPKl61/M2jGVrw g70C1Dv5FlNad0RZSuoUbV8Gv4uIuOxP55BMcZVUFEF4bNsRr6HLE6q4METKGh9d k2JRvAtgDOvWg06SS8v4u0aHP9sz4SGA2GZYOos2a5Qwrv7+EaNBcDXSdw9TEo3P CVP6hUVX9W7/oj33E/OIE5RKvaPxOpWdH7VZnCJaUg3/BA2k8nMLgsHfsFrYEjKA QOCm41MdIrK0h6w8rE8dba5Uo+ZdQ8gQI1kWAV+ODyx0Hm4O1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6uJ83OFSLAs+ftGw0uio7GbxvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzZkNjY3OGItZWMzOC0z OTY4LTgyZGEtZjkzMjViYmUyZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8PzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcv9dwIjTNeFPKWPvhat3gmc7CVjPOtt6AuDdk/r2k56Dg9rU1cQRmi hQhiZk2SkJhfBEW4WiULxBchq8LmSAAbFj4ezwE3Mp5htBmHsvCjqGJqBMUK82Ol doRXRc0Pm75nw0J2An8ZW4zBl/5/Ay7F5X/Uw34+VsiJo3B6C0b1n5iM0RWFCCnW 6YTfvZP4pG8MsrMh1ySit/RgGsvYxaZHrYgmRFcsQPOIRfwBEZq5r0k8WBAxjBWg namunJoTAvYQfb8ILQ6b9Ppe9OphMJ3t8VzDm5CHpnLUX6M14HpWYTZRL73y5CJG Fs3P+zaJWOKY3vn8keA1ZRxXVuyKJl8= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:13 2024 by rpki-client on console-ams.rpki-client.org