$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/446b315d-478f-343b-85a5-7147100bae19.roa File: 446b315d-478f-343b-85a5-7147100bae19.roa (raw, json) Hash identifier: 0ky8S/G1c8+LzKjRf1I8OocrH+rOHD38gzykKofszdY= Subject key identifier: 5C:31:55:09:3B:EF:25:36:F4:9B:4C:C5:5D:56:D7:53:1E:6E:4E:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15544396EE118A86FC8E9A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/446b315d-478f-343b-85a5-7147100bae19.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 30363 IP address blocks: 209.156.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:44:39:6e:e1:18:a8:6f:c8:e9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=7e34bf03-3301-4e63-9280-383e6ffeb426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f6:b9:e5:95:16:96:07:ca:d1:97:ab:4b:9e: 7c:c7:88:7f:fa:df:b8:34:d5:ae:78:ff:bb:1d:b9: d0:38:44:2b:5f:b0:52:28:ae:59:60:c0:28:b0:9d: e6:b7:3e:41:64:ab:71:49:b9:1b:a5:16:28:92:f5: c9:17:09:4b:31:1b:fa:10:e2:ca:50:aa:c1:10:2d: cb:c8:69:7b:f6:9b:8a:a3:09:20:da:95:ab:24:ee: 28:4a:a6:36:99:55:16:19:9f:a3:21:f0:59:ab:88: 2c:07:10:a6:b2:cb:f6:bd:52:b8:56:78:6c:4e:e6: 13:4a:3e:a0:a2:0b:2f:13:79:63:1c:fa:d1:1b:3f: 2c:55:43:b8:4a:65:79:9e:ba:e0:d0:55:04:88:20: d5:8e:39:1a:cd:00:98:4c:e5:e0:63:ee:d0:05:f0: e2:45:80:1c:a8:b8:6d:03:fb:61:60:e9:d0:e4:de: 1b:50:15:44:0f:b6:c8:cc:7e:49:3c:48:4c:ec:d5: db:8b:06:9f:6a:ae:96:c2:24:63:a7:43:0d:6d:26: 32:d0:7f:82:cc:d7:f4:d0:78:ac:0f:ad:45:32:d6: 1d:44:4f:8d:92:8e:3c:81:5a:b6:d3:23:15:6f:6e: f3:f6:48:24:12:eb:4d:32:0c:71:00:01:92:56:b6: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:55:09:3B:EF:25:36:F4:9B:4C:C5:5D:56:D7:53:1E:6E:4E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/446b315d-478f-343b-85a5-7147100bae19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:07:8c:80:20:f8:ab:26:4c:e8:b2:59:ea:f1:13:70:f3:b3: 61:32:0e:7e:56:bc:ce:6e:a7:b3:46:8d:ac:c4:c9:cd:06:3e: df:87:b7:10:f0:c6:29:ae:e9:46:4d:ca:fb:51:5f:5b:d6:e8: 07:4d:b2:01:f2:6e:06:06:08:7d:42:f4:bb:ed:bd:48:a9:f0: 03:3c:2f:ab:5a:ae:cb:e2:71:1a:ee:12:e6:be:eb:b9:ee:05: ae:b9:6e:9a:54:ed:35:67:ae:40:d7:74:29:5c:8a:50:9f:7b: 02:ec:05:ce:a8:d7:34:fb:64:ea:b6:31:41:5e:6f:eb:ff:99: 21:8b:3f:50:f6:72:e3:e1:a2:81:88:1b:7c:6c:7f:fd:89:79: 5a:54:ed:fc:4b:6a:a6:80:0d:24:56:d0:a2:fd:83:9a:79:d2: 61:44:73:01:05:2d:82:a6:8b:ad:0d:c1:19:fe:ee:26:a7:05: 48:b8:2a:8c:b0:a8:0b:e5:a0:93:d3:c4:01:09:c8:d8:87:01: 19:b2:d5:de:6e:0b:60:01:0c:ba:68:5c:35:25:b9:ac:63:37: b2:cf:94:9f:38:05:f4:7c:22:18:bb:f1:3a:3f:57:74:a1:6a: 4f:b1:f4:62:c5:2b:36:7a:0b:43:cb:f2:ce:74:94:dd:b5:39: a9:da:fa:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUQ5buEYqG/I6aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk N2UzNGJmMDMtMzMwMS00ZTYzLTkyODAtMzgzZTZmZmViNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifa55ZUWlgfK0ZerS558x4h/+t+4NNWueP+7 HbnQOEQrX7BSKK5ZYMAosJ3mtz5BZKtxSbkbpRYokvXJFwlLMRv6EOLKUKrBEC3L yGl79puKowkg2pWrJO4oSqY2mVUWGZ+jIfBZq4gsBxCmssv2vVK4VnhsTuYTSj6g ogsvE3ljHPrRGz8sVUO4SmV5nrrg0FUEiCDVjjkazQCYTOXgY+7QBfDiRYAcqLht A/thYOnQ5N4bUBVED7bIzH5JPEhM7NXbiwafaq6WwiRjp0MNbSYy0H+CzNf00His D61FMtYdRE+Nko48gVq20yMVb27z9kgkEutNMgxxAAGSVrZxLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwxVQk77yU29JtMxV1W11Mebk4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDQ2YjMxNWQtNDc4Zi0z NDNiLTg1YTUtNzE0NzEwMGJhZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZzaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQHjIAg+KsmTOiyWerxE3Dzs2EyDn5WvM5up7NGjazEyc0GPt+HtxDw ximu6UZNyvtRX1vW6AdNsgHybgYGCH1C9LvtvUip8AM8L6tarsvicRruEua+67nu Ba65bppU7TVnrkDXdClcilCfewLsBc6o1zT7ZOq2MUFeb+v/mSGLP1D2cuPhooGI G3xsf/2JeVpU7fxLaqaADSRW0KL9g5p50mFEcwEFLYKmi60NwRn+7ianBUi4Koyw qAvloJPTxAEJyNiHARmy1d5uC2ABDLpoXDUluaxjN7LPlJ84BfR8Ihi78To/V3Sh ak+x9GLFKzZ6C0PL8s50lN21Oana+mk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:21:20 2024 by rpki-client on console-fra.rpki-client.org