$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa File: 4c27ae8a-1fd5-388e-a051-f697661a310c.roa (raw, json) Hash identifier: 4pvbcx3aAU2/lhanGzcNSTAlcWCygP6VQbN0LKWmZA4= Subject key identifier: 24:F9:8E:56:4D:9C:D4:2C:45:77:21:E4:59:E3:54:79:5A:50:8C:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15537E3B8891D3B5E28FE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 174.131.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:37:e3:b8:89:1d:3b:5e:28:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=8d8fa48f-12b4-43f9-8332-031f14da2c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:7d:a5:ec:1f:b2:a2:78:e6:11:ad:bf:78: 38:e0:ef:1e:ca:b2:2b:38:59:79:3a:a9:d6:51:79: cd:d1:f4:07:f2:50:37:84:80:34:1b:7c:0b:3d:6c: 3a:a7:f6:cb:08:93:53:70:eb:43:f2:cf:5c:e8:69: fa:7a:e6:ec:a4:65:c3:8c:19:57:a4:5b:61:11:74: e3:c4:27:89:bd:af:0c:9e:9b:f8:95:fe:63:77:f4: 1c:08:60:0d:9b:d0:1f:c7:23:26:05:86:f3:8a:a0: af:6a:58:cc:04:76:b1:20:9c:b9:1f:18:93:6e:25: ec:36:4f:4d:84:46:77:36:3d:5c:45:83:b7:80:91: 58:39:18:bf:5f:28:e3:f2:eb:20:e0:7c:b5:33:cc: fb:79:bc:d6:65:46:f5:0d:62:5d:9d:d4:ec:5b:2a: 58:5c:12:da:7c:90:69:24:f8:d4:20:68:4f:63:8e: 80:55:1b:46:8c:31:b7:bd:d1:5f:5d:b9:70:a6:80: e8:aa:77:64:4c:4b:3b:2b:79:c4:8c:82:8c:bf:4e: 08:a8:55:9e:98:74:8e:2f:d1:91:f9:4d:1c:32:8b: c6:83:ed:8a:79:a3:9c:64:74:91:02:47:19:84:99: ff:4f:fb:f9:c4:a1:4d:81:ca:9b:f9:1b:5e:f6:7e: e2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F9:8E:56:4D:9C:D4:2C:45:77:21:E4:59:E3:54:79:5A:50:8C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c27ae8a-1fd5-388e-a051-f697661a310c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:40:58:cc:e2:4d:f9:e9:7e:ed:f0:03:3e:2b:5b:35:d5:05: 9a:e7:60:73:de:fe:54:df:fe:9d:67:f1:e9:4f:38:86:ce:35: e7:bf:d7:2c:ee:b9:d4:16:aa:9e:01:8b:e5:d2:b4:11:8d:2f: 6f:ff:5c:34:d2:79:08:ce:00:3b:a6:84:e0:3f:0c:4b:58:69: e6:46:de:be:8d:8e:34:18:23:7b:a6:9c:bd:0a:ba:86:38:20: 11:f9:19:66:80:4a:f8:6c:60:ed:00:8c:40:a9:a1:6c:91:d9: 01:4a:08:12:eb:8f:78:b4:97:7b:c0:57:a1:22:ff:57:6e:45: 29:20:24:6d:16:77:c6:ee:64:4d:74:8a:d7:43:32:fb:24:b2: a7:db:2e:88:c4:be:d1:e2:b2:be:dd:b9:1e:d3:b3:4c:22:a2: 2d:83:92:e3:3c:7a:08:4b:0c:8d:be:e5:67:2f:dc:93:fb:80: 7c:67:85:95:3d:2f:73:7b:ef:7d:08:73:85:47:4e:2f:2c:f4: 21:3a:44:7b:ef:a5:ac:d8:7c:54:6f:6e:07:e2:3f:2f:af:64: 54:6e:75:eb:ac:19:81:18:c8:bf:58:87:9a:fa:e8:39:f6:4a: e1:37:1b:e9:3c:d5:e8:6d:9a:4e:24:10:91:d4:e3:63:45:93: f2:d4:3f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTfjuIkdO14o/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OGQ4ZmE0OGYtMTJiNC00M2Y5LTgzMzItMDMxZjE0ZGEyYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ59pewfsqJ45hGtv3g44O8eyrIrOFl5OqnW UXnN0fQH8lA3hIA0G3wLPWw6p/bLCJNTcOtD8s9c6Gn6eubspGXDjBlXpFthEXTj xCeJva8Mnpv4lf5jd/QcCGANm9AfxyMmBYbziqCvaljMBHaxIJy5HxiTbiXsNk9N hEZ3Nj1cRYO3gJFYORi/Xyjj8usg4Hy1M8z7ebzWZUb1DWJdndTsWypYXBLafJBp JPjUIGhPY46AVRtGjDG3vdFfXblwpoDoqndkTEs7K3nEjIKMv04IqFWemHSOL9GR +U0cMovGg+2KeaOcZHSRAkcZhJn/T/v5xKFNgcqb+Rte9n7i0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT5jlZNnNQsRXch5FnjVHlaUIwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMyN2FlOGEtMWZkNS0z ODhlLWEwNTEtZjY5NzY2MWEzMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5AWMziTfnpfu3wAz4rWzXVBZrnYHPe/lTf/p1n8elPOIbONee/1yzu udQWqp4Bi+XStBGNL2//XDTSeQjOADumhOA/DEtYaeZG3r6NjjQYI3umnL0KuoY4 IBH5GWaASvhsYO0AjECpoWyR2QFKCBLrj3i0l3vAV6Ei/1duRSkgJG0Wd8buZE10 itdDMvsksqfbLojEvtHisr7duR7Ts0wioi2DkuM8eghLDI2+5Wcv3JP7gHxnhZU9 L3N7730Ic4VHTi8s9CE6RHvvpazYfFRvbgfiPy+vZFRudeusGYEYyL9Yh5r66Dn2 SuE3G+k81ehtmk4kEJHU42NFk/LUP2k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:41 2024 by rpki-client on console-ams.rpki-client.org