$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa File: 3bfe9669-f1d3-319b-899b-0dc919583329.roa (raw, json) Hash identifier: np6xUGbJUNtDwe8IfK1Dpyai6HHeFdOEs2sQ3upYfBs= Subject key identifier: D5:44:9B:02:D8:11:5D:5D:B8:B0:C7:B9:42:92:E6:A1:79:FB:21:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155291B4D96ED35F13FB3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 40.142.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:29:1b:4d:96:ed:35:f1:3f:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=17807d87-92db-40bc-92bb-fe86a7e54942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:d1:0c:63:3a:a1:32:b9:1a:61:f6:53:7c: 26:60:f6:8e:c1:15:ac:1d:bf:74:36:b3:bc:bd:74: 71:47:83:3d:42:90:62:9b:e6:14:a2:b5:52:fa:ad: da:72:e4:e5:d1:ab:8d:e1:56:45:f1:31:32:96:6c: a0:78:d0:75:39:b6:e4:76:55:ae:77:d7:91:c0:e2: 57:7d:85:e0:27:de:44:d3:30:07:bb:af:46:7c:d5: 9f:69:30:99:20:88:f8:a3:3f:6e:dc:4c:ad:05:16: 39:62:d8:2a:89:ad:44:18:21:d6:0a:ff:a1:61:92: 20:f3:1a:8a:31:41:f7:b9:85:10:8d:78:fd:ff:47: b7:ab:c6:18:58:88:e2:7c:d5:ce:8c:9a:44:0c:02: 79:67:49:b5:31:b1:ce:0e:e8:89:ea:4e:5a:b2:81: 28:82:7a:61:7f:3c:8f:91:60:be:83:2e:b3:cb:bd: da:e5:21:0f:a9:98:d4:e8:c7:0e:16:b0:53:f6:ce: 59:53:9b:6e:3f:51:c1:34:ec:52:a6:d3:35:89:e1: 14:b7:2e:ef:bf:e3:93:f1:fb:49:8f:ce:13:85:36: 39:6b:66:07:09:26:61:2b:07:b6:5d:5c:89:fb:d2: 03:74:2b:99:15:71:92:50:18:7c:af:1e:b7:c2:b5: 79:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:44:9B:02:D8:11:5D:5D:B8:B0:C7:B9:42:92:E6:A1:79:FB:21:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cb:e3:75:77:30:16:61:fc:44:b8:fb:03:2c:19:21:38:3d: 11:0e:03:dd:20:07:e1:d5:da:0d:a6:fa:8e:a9:40:cf:55:92: a8:42:15:a6:b3:33:d3:9c:32:3d:ed:5e:3f:9a:4c:8a:f6:3e: 1c:f9:8d:1a:b1:ba:41:df:c1:23:4c:4c:4b:d3:18:18:b0:43: 08:ce:c7:16:a1:86:b9:01:19:38:6d:7a:f3:83:9d:11:8a:16: 8e:a5:75:f0:1a:fd:df:0d:67:b1:d7:9a:27:5f:13:49:6e:30: 02:1e:e6:37:21:2b:71:69:77:77:1e:af:7a:5a:74:ed:bc:64: b1:7c:90:5a:01:3a:60:ac:44:1a:50:fd:f8:cf:a9:9f:2b:da: 6d:31:2c:08:6d:73:29:fc:04:42:c6:80:e9:f1:fa:ea:e6:17: 37:a5:01:e7:a6:51:47:87:4c:f4:ef:58:dc:59:89:91:b6:40: 87:b5:43:3a:14:19:1e:66:26:56:67:f0:31:4a:21:96:3a:6a: 3e:c0:7f:b1:da:1f:8a:6a:7d:6c:b4:b1:62:3a:b6:74:0a:eb: 6f:8d:c5:00:6c:43:49:ac:58:91:64:d9:d4:72:eb:63:49:2d: 96:4f:22:35:20:4b:dc:69:a6:94:eb:4f:f8:45:d8:5c:e8:ba: 1d:63:17:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSkbTZbtNfE/s8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MTc4MDdkODctOTJkYi00MGJjLTkyYmItZmU4NmE3ZTU0OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sTRDGM6oTK5GmH2U3wmYPaOwRWsHb90NrO8 vXRxR4M9QpBim+YUorVS+q3acuTl0auN4VZF8TEylmygeNB1ObbkdlWud9eRwOJX fYXgJ95E0zAHu69GfNWfaTCZIIj4oz9u3EytBRY5Ytgqia1EGCHWCv+hYZIg8xqK MUH3uYUQjXj9/0e3q8YYWIjifNXOjJpEDAJ5Z0m1MbHODuiJ6k5asoEognphfzyP kWC+gy6zy73a5SEPqZjU6McOFrBT9s5ZU5tuP1HBNOxSptM1ieEUty7vv+OT8ftJ j84ThTY5a2YHCSZhKwe2XVyJ+9IDdCuZFXGSUBh8rx63wrV5TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVEmwLYEV1duLDHuUKS5qF5+yH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTk2NjktZjFkMy0z MTliLTg5OWItMGRjOTE5NTgzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbL43V3MBZh/ES4+wMsGSE4PREOA90gB+HV2g2m+o6pQM9VkqhCFaaz M9OcMj3tXj+aTIr2Phz5jRqxukHfwSNMTEvTGBiwQwjOxxahhrkBGThtevODnRGK Fo6ldfAa/d8NZ7HXmidfE0luMAIe5jchK3Fpd3cer3padO28ZLF8kFoBOmCsRBpQ /fjPqZ8r2m0xLAhtcyn8BELGgOnx+urmFzelAeemUUeHTPTvWNxZiZG2QIe1QzoU GR5mJlZn8DFKIZY6aj7Af7HaH4pqfWy0sWI6tnQK62+NxQBsQ0msWJFk2dRy62NJ LZZPIjUgS9xpppTrT/hF2Fzouh1jF5Y= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:39 2024 by rpki-client on console-ams.rpki-client.org