$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa File: 4f6b7ca3-8281-3da3-be27-54175315d8a3.roa (raw, json) Hash identifier: Zo84r0YzOZFe3g8Mnw7DdJqqrhDIOwidx7dgjC4j4J8= Subject key identifier: 54:E6:08:16:81:14:D0:65:1D:36:D2:02:D4:E0:E8:10:D3:73:07:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584731179025C031F58AEE800200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa Signing time: Thu 12 Sep 2024 17:22:02 +0000 ROA not before: Thu 12 Sep 2024 17:22:02 +0000 ROA not after: Wed 11 Dec 2024 18:22:02 +0000 asID: 7029 IP address blocks: 67.140.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:90:25:c0:31:f5:8a:ee:80:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:02 2024 GMT Not After : Dec 11 18:22:02 2024 GMT Subject: CN=6be49e8e-b322-48cb-8964-bed8ca4dce7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:e3:81:ba:1a:a0:20:00:8a:57:e3:b9:ce: 9b:5a:ba:c6:15:8b:6f:e5:3a:19:10:bf:d9:0e:e8: dc:7a:39:7b:a2:0b:24:9f:3c:5d:c5:78:f5:58:8c: 48:89:6f:8f:25:a8:93:65:ea:3e:fd:aa:bb:f7:65: 0a:d4:4f:1c:e4:0a:6d:5e:87:48:7b:6c:24:27:48: f7:9f:bb:da:f6:47:77:21:dd:df:b7:c7:50:01:2a: 1a:09:0d:65:ac:7b:af:9a:62:57:78:69:5b:16:a0: 35:ac:ff:11:29:72:4d:68:24:58:ca:b3:e8:61:a8: 4e:cd:b7:07:73:7b:42:3e:ad:34:21:4e:ef:4b:a8: 9a:f4:ec:dd:79:4f:ca:d9:a8:bb:12:2f:c0:d5:ee: 4b:d4:8e:51:bc:90:2d:bb:ad:40:05:fe:3d:cf:29: 7a:52:e5:b4:ee:fe:52:bb:73:32:8b:62:cb:4a:49: dd:ce:00:56:f4:45:fd:8e:50:75:01:2d:02:1c:1c: 53:aa:37:a5:49:27:2d:d0:53:97:07:eb:1f:f0:5d: 46:e5:72:69:73:74:18:6e:cd:ea:fc:59:8b:e2:90: 7c:44:28:d0:8c:57:06:f5:5a:c9:e3:8f:ae:a1:20: bf:3f:c8:76:1c:59:32:dd:b6:2f:8a:67:e3:b9:39: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E6:08:16:81:14:D0:65:1D:36:D2:02:D4:E0:E8:10:D3:73:07:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f6b7ca3-8281-3da3-be27-54175315d8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:95:da:be:e2:89:b8:ce:f5:9a:3c:d6:60:db:1a:5a:da:db: 2d:cf:9d:24:70:2d:fe:8d:01:a1:28:a1:08:35:c1:2b:17:9d: e2:20:e7:56:ef:08:23:82:ed:c0:5a:35:63:5c:80:09:24:e5: e1:4e:fd:52:7a:54:3f:32:5c:29:a9:b4:22:f3:1f:f2:a3:c5: b9:13:eb:f1:5a:1e:9e:81:38:80:a4:67:b4:7c:16:58:86:5f: 35:ab:7d:57:cf:19:6f:26:34:c8:ed:53:f7:d2:da:eb:cc:8e: 58:3d:b2:64:41:14:d5:54:da:e5:31:0d:e3:28:ef:5e:93:44: be:c3:12:31:aa:8e:a3:bf:32:07:01:d1:a3:ec:87:4a:16:3f: ae:01:8d:1e:39:b5:ef:93:08:9a:d1:57:6c:29:6f:4f:3f:5e: 47:36:94:50:a1:95:62:cc:49:f4:0d:1b:f7:33:5b:96:06:18: 7d:09:b2:8f:0f:a2:bd:14:43:8c:50:8f:aa:58:ea:c9:58:1c: f6:ff:c5:c4:68:13:1f:57:d4:8a:0b:99:2d:44:cd:5d:b9:d9: 16:e4:5e:fe:29:47:42:ce:16:f5:01:2b:36:d9:39:9c:1b:ef: 9e:bb:52:3f:21:e4:11:9a:ac:a6:0f:21:d9:09:bc:85:29:4d: b1:e7:3d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF5AlwDH1iu6AAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIwMloXDTI0MTIxMTE4MjIwMlowLzEtMCsGA1UEAxMk NmJlNDllOGUtYjMyMi00OGNiLTg5NjQtYmVkOGNhNGRjZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkTjgboaoCAAilfjuc6bWrrGFYtv5ToZEL/Z Dujcejl7ogsknzxdxXj1WIxIiW+PJaiTZeo+/aq792UK1E8c5AptXodIe2wkJ0j3 n7va9kd3Id3ft8dQASoaCQ1lrHuvmmJXeGlbFqA1rP8RKXJNaCRYyrPoYahOzbcH c3tCPq00IU7vS6ia9OzdeU/K2ai7Ei/A1e5L1I5RvJAtu61ABf49zyl6UuW07v5S u3Myi2LLSkndzgBW9EX9jlB1AS0CHBxTqjelSSct0FOXB+sf8F1G5XJpc3QYbs3q /FmL4pB8RCjQjFcG9VrJ44+uoSC/P8h2HFky3bYvimfjuTn7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTmCBaBFNBlHTbSAtTg6BDTcwcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY2YjdjYTMtODI4MS0z ZGEzLWJlMjctNTQxNzUzMTVkOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKV2r7iibjO9Zo81mDbGlra2y3PnSRwLf6NAaEooQg1wSsXneIg51bv CCOC7cBaNWNcgAkk5eFO/VJ6VD8yXCmptCLzH/KjxbkT6/FaHp6BOICkZ7R8FliG XzWrfVfPGW8mNMjtU/fS2uvMjlg9smRBFNVU2uUxDeMo716TRL7DEjGqjqO/MgcB 0aPsh0oWP64BjR45te+TCJrRV2wpb08/Xkc2lFChlWLMSfQNG/czW5YGGH0Jso8P or0UQ4xQj6pY6slYHPb/xcRoEx9X1IoLmS1EzV252RbkXv4pR0LOFvUBKzbZOZwb 7567Uj8h5BGarKYPIdkJvIUpTbHnPfo= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:07 2024 by rpki-client on console-fra.rpki-client.org