$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa File: 41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa (raw, json) Hash identifier: jivsqbZutNUAHF+IfdbSRw2oAzge1hVyLG2U3ZdafGM= Subject key identifier: C0:D4:C2:99:81:98:DF:8D:A2:F8:76:77:53:00:A4:E7:6D:EB:ED:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551626F69B5A2DE3D82980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 32019 IP address blocks: 205.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:16:26:f6:9b:5a:2d:e3:d8:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=2548a888-f22c-4b28-abd7-11ab47e6105d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:5e:96:f2:12:a3:72:60:6c:a2:9b:bf:f4: 23:e2:3a:46:62:93:22:8b:d5:69:37:7a:13:a9:0c: 2e:68:3f:30:39:07:51:70:75:9f:99:8a:d4:af:fe: d1:76:46:05:21:fb:23:28:5e:65:85:ff:c9:b2:e1: 08:38:c8:ca:62:be:ab:aa:27:37:63:70:d4:db:4e: b7:51:1f:c7:11:69:d1:c2:0c:c8:d6:f2:1d:91:54: 1c:25:db:af:cd:e7:38:3b:9f:de:d7:61:f2:f2:58: 95:17:06:2b:41:62:a9:79:32:de:19:a0:f0:e9:9a: 7d:3d:6d:43:09:7f:cf:86:17:35:76:df:f4:39:f0: 5f:0f:c6:20:72:e2:be:1f:93:96:d3:d5:a2:0d:4e: bf:30:30:cc:77:c8:c5:64:38:f9:5a:5c:f4:b0:75: 26:81:a2:00:37:8b:72:20:8f:6d:5a:c1:bf:b1:f7: 8b:c1:c0:0d:42:bf:1d:fb:d0:85:01:2e:51:12:75: 86:e0:2d:ae:4c:b1:92:6d:23:e6:f3:66:6a:3a:57: b3:e1:f2:c9:1f:47:e3:79:b7:55:64:c9:ad:bb:f0: e6:b7:1a:00:c2:c8:08:40:35:b4:ce:10:be:1d:5e: 21:d0:d6:2d:79:2f:83:4c:ab:c7:4b:c4:f3:12:0a: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D4:C2:99:81:98:DF:8D:A2:F8:76:77:53:00:A4:E7:6D:EB:ED:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bc:e2:f9:25:b6:9e:35:73:26:dc:17:df:93:7f:7d:2a:1d: 74:2d:14:79:d5:b6:9f:c9:8f:a2:a9:4e:46:82:8a:df:31:6a: a9:f9:85:66:83:14:4e:73:7b:c0:26:96:ae:21:29:17:80:b9: 93:bb:79:33:5a:09:4d:6b:76:8e:29:06:87:d6:c5:a7:c7:07: a2:43:53:26:01:40:95:24:7c:8a:95:c3:ae:ca:6e:ed:bf:a6: f7:82:1f:7a:03:dc:16:27:91:cf:16:31:72:1f:3d:ad:ca:81: 80:3f:a7:af:37:b2:c5:67:9d:d5:bb:e3:45:59:98:23:03:91: 71:b2:43:6d:89:eb:6a:d9:1c:f4:a3:93:c7:e1:35:ff:77:3f: 89:59:39:8d:d8:4a:ae:bb:70:6c:92:70:9f:f1:2d:64:2b:3b: c4:22:c4:98:d7:a9:da:92:26:1e:fd:8b:67:44:e5:5c:7e:56: d3:d8:bf:c7:aa:b3:8f:9b:4b:68:65:fc:9b:24:51:10:39:04: 20:d9:96:b9:d0:50:9d:1b:51:c6:0e:9a:02:c4:50:11:f7:32: 22:ad:5f:51:4c:9e:4a:45:8a:cc:f3:1a:95:55:20:83:a0:81: 4d:01:d5:1d:51:e4:35:2e:7b:51:58:8f:08:0d:3d:95:9f:bc: e8:04:57:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRYm9ptaLePYKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MjU0OGE4ODgtZjIyYy00YjI4LWFiZDctMTFhYjQ3ZTYxMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIZelvISo3JgbKKbv/Qj4jpGYpMii9VpN3oT qQwuaD8wOQdRcHWfmYrUr/7RdkYFIfsjKF5lhf/JsuEIOMjKYr6rqic3Y3DU2063 UR/HEWnRwgzI1vIdkVQcJduvzec4O5/e12Hy8liVFwYrQWKpeTLeGaDw6Zp9PW1D CX/Phhc1dt/0OfBfD8YgcuK+H5OW09WiDU6/MDDMd8jFZDj5Wlz0sHUmgaIAN4ty II9tWsG/sfeLwcANQr8d+9CFAS5REnWG4C2uTLGSbSPm82ZqOlez4fLJH0fjebdV ZMmtu/DmtxoAwsgIQDW0zhC+HV4h0NYteS+DTKvHS8TzEgoDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDUwpmBmN+Novh2d1MApOdt6+2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFlOTg4MGEtMmFlOS0z YTRiLWE3YjUtZTU2YWZjOTljMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzegmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy84vkltp41cybcF9+Tf30qHXQtFHnVtp/Jj6KpTkaCit8xaqn5hWaD FE5ze8Amlq4hKReAuZO7eTNaCU1rdo4pBofWxafHB6JDUyYBQJUkfIqVw67Kbu2/ pveCH3oD3BYnkc8WMXIfPa3KgYA/p683ssVnndW740VZmCMDkXGyQ22J62rZHPSj k8fhNf93P4lZOY3YSq67cGyScJ/xLWQrO8QixJjXqdqSJh79i2dE5Vx+VtPYv8eq s4+bS2hl/JskURA5BCDZlrnQUJ0bUcYOmgLEUBH3MiKtX1FMnkpFiszzGpVVIIOg gU0B1R1R5DUue1FYjwgNPZWfvOgEV04= -----END CERTIFICATE-----Generated at Mon Nov 25 15:57:48 2024 by rpki-client on console-fra.rpki-client.org