$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa File: 3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa (raw, json) Hash identifier: Awe8iFE0brINRYuLr73U2sAODTulT6V42iTPG3QbYls= Subject key identifier: 6C:3A:CD:8A:49:7F:7D:36:49:0A:8B:5B:1F:4E:F4:AE:A1:D8:B6:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15502404A7A24B73D03DAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 139.55.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:02:40:4a:7a:24:b7:3d:03:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=67460184-8b9a-4e52-b5f8-1d03d53089da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:40:fb:2b:db:fd:03:af:bd:af:6e:31:11: 6a:43:e2:7d:32:be:e2:d9:c4:ce:1a:bc:db:5a:a8: 81:ed:9b:d4:7e:bb:07:5b:65:e6:a0:78:37:a7:92: d6:72:52:59:47:c4:a4:58:34:6d:79:1e:91:a3:f0: 4e:5e:9c:6b:31:3b:e7:1f:40:71:bb:1e:0c:00:49: dc:c4:25:02:9b:aa:81:fd:dd:9d:5d:a3:ed:57:bb: ff:30:e6:03:fd:65:ec:5d:b1:57:14:a2:05:85:b5: 09:40:ba:09:fd:7f:08:41:d8:6c:70:fa:78:32:1a: a2:43:e8:6a:37:19:55:5c:55:e6:4b:9c:14:7f:93: 59:2b:de:06:37:0b:93:91:99:aa:a1:ff:1f:10:32: 5e:1a:f5:98:96:90:01:b6:f8:a4:f6:0c:42:9f:08: 49:08:ef:a0:c2:02:c5:04:f6:98:8b:24:8e:00:14: 09:40:1f:10:3b:4e:20:ba:f4:43:21:00:93:8d:1c: 2e:ee:ce:78:00:00:d0:cc:f3:81:2f:24:c5:bb:7e: 6d:ef:ef:05:7b:ae:30:6a:26:46:22:fb:79:d6:9a: a7:e9:59:61:18:b5:b4:b4:13:ec:bb:de:ec:a4:bd: e4:66:a1:39:0b:80:d0:b1:8f:a0:65:4b:8b:af:a3: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3A:CD:8A:49:7F:7D:36:49:0A:8B:5B:1F:4E:F4:AE:A1:D8:B6:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:93:b3:9a:fd:fc:d6:c0:e3:ec:8f:05:52:04:e5:50:0e:41: db:c6:86:db:28:a7:d4:0c:41:10:25:9d:57:b0:25:c8:37:f8: fc:e3:cb:4f:0e:5e:ac:11:5c:f9:b2:75:13:5c:43:ef:e8:a7: 8b:a3:20:53:de:8c:54:27:81:b1:ef:54:40:64:d4:25:67:cc: 82:8d:5a:9a:e7:68:05:00:59:da:df:20:6d:e5:e1:1f:7b:39: e0:f6:93:f9:c7:3c:90:cb:51:cd:27:7a:c8:51:cf:80:4f:79: ae:65:88:30:68:23:62:81:55:4e:bb:83:78:9a:d3:92:b0:83: 0e:23:a1:90:19:dd:fa:f2:4a:41:ec:6b:c5:28:09:b3:1b:93: 76:d9:52:e7:1c:74:8a:de:32:e5:af:e5:04:f5:f3:0e:48:95: 0c:2c:e0:cc:b0:99:b1:ea:fc:84:0b:69:c7:ee:6d:1d:e1:0a: 9b:2f:8d:a4:b2:5b:42:8c:c4:7f:1e:7a:57:e9:7d:44:d2:85: ad:c1:c8:0a:97:28:3b:cc:83:bb:a8:3a:f5:05:4a:96:19:cd: f4:56:ec:85:49:cc:9c:d6:9c:98:7d:00:b4:50:20:57:43:0f: 1b:de:f3:5f:78:dc:6f:5a:2a:d8:83:7e:74:9b:c5:ce:77:bf: 45:5e:8c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQJASnoktz0D2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk Njc0NjAxODQtOGI5YS00ZTUyLWI1ZjgtMWQwM2Q1MzA4OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3hA+yvb/QOvva9uMRFqQ+J9Mr7i2cTOGrzb WqiB7ZvUfrsHW2XmoHg3p5LWclJZR8SkWDRteR6Ro/BOXpxrMTvnH0Bxux4MAEnc xCUCm6qB/d2dXaPtV7v/MOYD/WXsXbFXFKIFhbUJQLoJ/X8IQdhscPp4MhqiQ+hq NxlVXFXmS5wUf5NZK94GNwuTkZmqof8fEDJeGvWYlpABtvik9gxCnwhJCO+gwgLF BPaYiySOABQJQB8QO04guvRDIQCTjRwu7s54AADQzPOBLyTFu35t7+8Fe64waiZG Ivt51pqn6VlhGLW0tBPsu97spL3kZqE5C4DQsY+gZUuLr6M/4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw6zYpJf302SQqLWx9O9K6h2La8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTgzZjItYzg4NS0z NWYxLWI3ZTItZjkwY2Y3N2ZhZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKTs5r9/NbA4+yPBVIE5VAOQdvGhtsop9QMQRAlnVewJcg3+Pzjy08O XqwRXPmydRNcQ+/op4ujIFPejFQngbHvVEBk1CVnzIKNWprnaAUAWdrfIG3l4R97 OeD2k/nHPJDLUc0neshRz4BPea5liDBoI2KBVU67g3ia05Kwgw4joZAZ3frySkHs a8UoCbMbk3bZUuccdIreMuWv5QT18w5IlQws4MywmbHq/IQLacfubR3hCpsvjaSy W0KMxH8eelfpfUTSha3ByAqXKDvMg7uoOvUFSpYZzfRW7IVJzJzWnJh9ALRQIFdD Dxve81943G9aKtiDfnSbxc53v0VejK0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:58 2024 by rpki-client on console-fra.rpki-client.org