$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51bd17d6-7fdb-38e1-b031-6a58465d3262.roa File: 51bd17d6-7fdb-38e1-b031-6a58465d3262.roa (raw, json) Hash identifier: ZPVARBrANlwHOQHNu3lazzWwTe55peA0uMZvjAr1bAk= Subject key identifier: F6:D4:62:C1:F5:FC:E4:6E:65:46:59:3C:C0:39:8A:52:FA:8B:D0:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155416C45126E9FF7827900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51bd17d6-7fdb-38e1-b031-6a58465d3262.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 22660 IP address blocks: 209.152.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:41:6c:45:12:6e:9f:f7:82:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=e9c7b284-c2fa-484a-9c64-9a8a21c8a56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:ab:b6:73:29:65:4f:6c:8b:58:95:96:03: 6f:e0:ab:23:b5:e8:b1:1b:50:2a:69:50:ea:22:06: 5e:ae:e8:e7:28:f1:78:6b:60:52:cb:2b:84:88:c8: 85:55:84:ca:d0:af:34:49:31:aa:a3:b0:94:e1:0f: 6b:b0:3d:c0:61:db:18:1f:0d:0a:7d:19:f9:74:6e: 7c:05:a4:df:2a:8d:75:1e:73:46:b9:23:b7:90:8f: 2e:04:fe:e4:52:2f:43:18:2e:5c:d0:fd:04:32:5e: 66:cf:92:a3:c5:0b:21:fc:e4:3e:13:0b:60:14:0b: 7b:c2:d7:f0:0c:93:6b:6c:3d:26:c9:2e:18:e6:bd: 39:21:f6:97:7c:12:2f:b0:8f:63:09:4d:9e:86:c4: c2:b7:c3:1f:89:d2:b6:49:16:89:9d:50:ee:d5:e7: bf:d9:d6:93:a7:0e:09:2b:b4:2c:eb:89:e6:99:c9: c2:2b:cb:33:39:a2:b3:e5:57:e5:a9:e3:57:ac:da: a5:ee:a8:05:07:68:20:a5:c4:c9:e6:b0:0d:0c:f1: 68:f4:27:23:d4:ef:64:2a:82:36:e5:4b:8e:9a:ca: 83:04:a4:a9:7a:36:98:46:12:94:b3:80:09:e9:b4: 61:9d:30:3b:c1:33:56:f8:86:e3:6e:b7:40:fa:5f: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D4:62:C1:F5:FC:E4:6E:65:46:59:3C:C0:39:8A:52:FA:8B:D0:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51bd17d6-7fdb-38e1-b031-6a58465d3262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.152.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:80:ad:f4:09:40:11:ee:0b:73:fe:31:1d:0b:59:dd:1d:32: fc:b4:8c:70:ba:28:50:bd:70:0f:b4:c3:d5:71:e6:11:c7:af: 45:84:da:d1:42:0d:b4:97:60:ee:fc:a1:a0:b7:18:ee:fc:63: 55:f6:0d:5e:4f:2e:cf:6f:83:44:50:7f:5b:2c:d3:df:65:b0: 56:18:75:7c:1a:dc:85:47:e8:7d:cd:85:2a:18:30:3b:cc:e0: 77:55:43:09:da:44:c7:f8:fd:b3:b3:9d:59:f6:e6:8b:78:18: 7e:99:77:a1:72:b2:08:c4:ca:54:31:32:29:71:d8:cf:4e:e9: 1c:38:d6:9c:39:b1:9e:e2:f7:6c:70:59:c8:46:d1:0f:de:95: 4d:b3:2a:49:df:19:26:bd:a8:cc:dc:da:a1:d4:33:a6:13:0e: b0:a3:20:ce:77:90:f9:75:19:43:78:8e:bc:7f:91:e4:8c:e2: ac:e3:4a:e0:62:d3:fd:2a:01:29:a0:44:72:c4:b5:77:f2:42: 60:e8:d4:b6:3a:d9:bc:41:01:c5:b3:96:8e:94:b0:16:b6:dc: 66:f5:ee:a4:01:ba:79:8c:c0:bc:dd:ba:2a:c5:a4:14:0d:2b: bc:3c:60:90:b6:80:e0:33:06:d0:74:af:0c:14:f6:51:87:d3: 22:9f:1d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUFsRRJun/eCeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZTljN2IyODQtYzJmYS00ODRhLTljNjQtOWE4YTIxYzhhNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpurtnMpZU9si1iVlgNv4KsjteixG1AqaVDq IgZerujnKPF4a2BSyyuEiMiFVYTK0K80STGqo7CU4Q9rsD3AYdsYHw0KfRn5dG58 BaTfKo11HnNGuSO3kI8uBP7kUi9DGC5c0P0EMl5mz5KjxQsh/OQ+EwtgFAt7wtfw DJNrbD0myS4Y5r05IfaXfBIvsI9jCU2ehsTCt8MfidK2SRaJnVDu1ee/2daTpw4J K7Qs64nmmcnCK8szOaKz5VflqeNXrNql7qgFB2ggpcTJ5rANDPFo9Ccj1O9kKoI2 5UuOmsqDBKSpejaYRhKUs4AJ6bRhnTA7wTNW+IbjbrdA+l9CgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbUYsH1/ORuZUZZPMA5ilL6i9AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTFiZDE3ZDYtN2ZkYi0z OGUxLWIwMzEtNmE1ODQ2NWQzMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZjXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGArfQJQBHuC3P+MR0LWd0dMvy0jHC6KFC9cA+0w9Vx5hHHr0WE2tFC DbSXYO78oaC3GO78Y1X2DV5PLs9vg0RQf1ss099lsFYYdXwa3IVH6H3NhSoYMDvM 4HdVQwnaRMf4/bOznVn25ot4GH6Zd6FysgjEylQxMilx2M9O6Rw41pw5sZ7i92xw WchG0Q/elU2zKknfGSa9qMzc2qHUM6YTDrCjIM53kPl1GUN4jrx/keSM4qzjSuBi 0/0qASmgRHLEtXfyQmDo1LY62bxBAcWzlo6UsBa23Gb17qQBunmMwLzduirFpBQN K7w8YJC2gOAzBtB0rwwU9lGH0yKfHdI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:21:26 2024 by rpki-client on console-fra.rpki-client.org