$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa File: 5338ef0f-921e-34fb-9c0b-c753c46e0181.roa (raw, json) Hash identifier: GoTIr8OicNOBvhw0NGNpj6atETbhTopMBDKVc4GfqDc= Subject key identifier: 3C:B7:30:3D:98:7F:CC:6C:C4:48:50:A8:8F:3B:3C:3C:59:13:F8:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EE8A36EDA29EFF21BFD44D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 69.40.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:36:ed:a2:9e:ff:21:bf:d4:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=d88c9144-aef4-4d6c-aa75-b28a06984dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:79:58:25:32:87:d5:22:9b:27:92:b7:af: 0b:de:c8:ae:14:67:4d:34:fb:52:39:67:aa:b5:6e: 1d:b6:20:e0:4c:b0:c6:fd:d1:b7:92:cb:cf:24:a2: a0:b4:37:51:45:97:22:64:4e:a0:24:e7:83:a4:2b: 43:e9:14:24:ad:9f:72:a4:66:e7:06:3b:21:5a:55: 9b:24:14:e8:78:37:13:67:da:2a:6c:91:bd:ac:a6: ef:46:d4:fd:2d:2c:85:2d:2c:14:aa:b4:9f:92:ca: 47:dd:8f:1d:b7:bb:08:3d:73:91:3e:bf:f0:b8:1f: 86:03:35:63:43:26:14:48:1c:5b:81:da:83:aa:7c: 80:3c:68:70:49:6e:99:11:e8:f7:83:60:2c:c4:85: 26:75:da:8b:fe:76:99:d7:6e:17:7c:37:9f:09:03: 32:e7:12:4e:c9:6a:73:65:c8:aa:2e:48:65:ac:39: 13:a0:81:5f:0e:47:e5:47:75:2f:93:06:28:6f:00: 8a:b6:c1:d1:86:8d:33:bb:77:c6:9e:19:b4:e3:57: 60:e1:71:c4:eb:ee:ef:f5:52:d1:c1:d8:cf:67:d8: 31:b1:87:41:0b:68:f4:2e:bf:5c:79:60:41:7b:80: 7a:32:08:ef:c7:8c:39:a9:77:24:46:33:e7:85:a3: d3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B7:30:3D:98:7F:CC:6C:C4:48:50:A8:8F:3B:3C:3C:59:13:F8:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d2:32:02:ca:c3:6f:e9:ee:a1:17:1c:b4:44:0b:5d:38:12: ab:c4:e5:53:af:16:67:74:04:7f:af:9a:d6:00:40:4e:8c:dc: d2:06:09:3b:e9:29:65:99:e0:61:a6:30:ca:0f:91:2f:6e:c3: 09:0d:9d:9b:8b:04:fe:85:ec:40:28:0c:eb:a4:3b:62:3b:14: da:27:94:c3:e5:33:7c:4d:da:4e:bf:84:e7:a7:fc:c6:35:f4: f4:92:22:0e:10:f4:57:6d:06:30:a5:b3:b1:9c:20:47:bb:4a: 6f:86:df:74:4d:97:47:4e:96:02:8c:8b:7c:44:5b:a0:13:c4: 66:98:61:2a:30:fd:ce:53:c3:d7:0d:f7:99:ca:98:99:c6:e5: af:f8:c6:59:67:6b:66:6e:ab:b3:4f:b2:af:78:4b:47:d6:8d: 25:bb:93:e5:1a:0b:ed:70:1c:4c:47:40:93:d0:ba:eb:4b:de: e1:07:f3:48:f4:44:09:bd:9b:39:9c:36:b0:34:27:e6:c1:38: d4:c2:99:c6:ec:b9:b7:7f:c7:b8:85:79:47:63:a9:ad:05:05: cc:6f:ed:f4:15:6d:24:5e:6b:38:0d:3f:98:d9:0c:85:0f:bf: 50:52:93:84:3c:eb:de:a3:81:a5:f7:37:17:ba:0a:22:e1:d2: 96:22:da:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijbtop7/Ib/UTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDg4YzkxNDQtYWVmNC00ZDZjLWFhNzUtYjI4YTA2OTg0ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju55WCUyh9UimyeSt68L3siuFGdNNPtSOWeq tW4dtiDgTLDG/dG3ksvPJKKgtDdRRZciZE6gJOeDpCtD6RQkrZ9ypGbnBjshWlWb JBToeDcTZ9oqbJG9rKbvRtT9LSyFLSwUqrSfkspH3Y8dt7sIPXORPr/wuB+GAzVj QyYUSBxbgdqDqnyAPGhwSW6ZEej3g2AsxIUmddqL/naZ124XfDefCQMy5xJOyWpz ZciqLkhlrDkToIFfDkflR3UvkwYobwCKtsHRho0zu3fGnhm041dg4XHE6+7v9VLR wdjPZ9gxsYdBC2j0Lr9ceWBBe4B6Mgjvx4w5qXckRjPnhaPTwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy3MD2Yf8xsxEhQqI87PDxZE/i1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTMzOGVmMGYtOTIxZS0z NGZiLTljMGItYzc1M2M0NmUwMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3SMgLKw2/p7qEXHLREC104EqvE5VOvFmd0BH+vmtYAQE6M3NIGCTvp KWWZ4GGmMMoPkS9uwwkNnZuLBP6F7EAoDOukO2I7FNonlMPlM3xN2k6/hOen/MY1 9PSSIg4Q9FdtBjCls7GcIEe7Sm+G33RNl0dOlgKMi3xEW6ATxGaYYSow/c5Tw9cN 95nKmJnG5a/4xllna2Zuq7NPsq94S0fWjSW7k+UaC+1wHExHQJPQuutL3uEH80j0 RAm9mzmcNrA0J+bBONTCmcbsubd/x7iFeUdjqa0FBcxv7fQVbSReazgNP5jZDIUP v1BSk4Q8696jgaX3Nxe6CiLh0pYi2qA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:44 2024 by rpki-client on console-ams.rpki-client.org