$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa File: 53cce2d4-8960-3a07-953b-6c289ddfd81e.roa (raw, json) Hash identifier: iOLGNfrkcXjwK98z0IHwO5pp6SMxxXej8aqVTnBVV98= Subject key identifier: 6F:08:3F:C0:89:32:20:DB:BF:CD:47:E8:37:8D:DE:08:68:23:90:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847B961646FE35A4099687B81C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 7029 IP address blocks: 40.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:64:6f:e3:5a:40:99:68:7b:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=b4fc0069-8161-45ae-b05c-357380a0fde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:82:40:39:17:89:72:be:29:eb:98:93:a1: cd:63:39:0c:90:9a:15:dd:f8:b7:13:90:01:bd:1f: 73:51:4d:26:53:b3:99:51:dd:bc:0d:cf:1f:12:7c: dc:c4:42:c1:ea:23:77:11:58:f0:39:2d:e1:21:cf: 29:30:48:1c:55:76:ac:33:5f:be:54:13:44:c1:14: 65:a0:cf:eb:30:27:c8:33:05:1d:8e:02:a5:9e:e1: 0f:b9:6c:95:e1:29:2d:2e:52:19:6a:ab:aa:7e:36: b5:48:d2:90:46:1b:92:0a:ce:fb:00:78:eb:7d:4a: 9c:ff:95:83:7c:c0:be:e2:e7:b6:86:ca:ad:35:5d: b1:a7:66:af:0c:32:e3:81:13:5e:72:64:d5:5e:2b: e3:ee:cd:d4:92:83:5e:d9:12:0a:41:ef:f8:75:ca: bd:d3:20:09:c4:52:aa:6b:d2:68:b1:f9:53:13:c4: e7:1d:eb:23:30:ae:17:3e:91:d3:5e:7e:62:65:a7: ea:1b:b8:49:45:e9:62:d3:3f:88:eb:03:c6:c6:bd: 09:ca:f0:3f:aa:f4:5e:c9:5f:3d:08:21:b8:89:d6: 39:37:82:44:6e:f2:be:11:98:c1:e2:a0:4e:96:57: 06:d2:32:f2:17:cd:52:17:22:2d:41:b8:15:34:41: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:08:3F:C0:89:32:20:DB:BF:CD:47:E8:37:8D:DE:08:68:23:90:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:03:7d:7e:b7:06:72:be:58:6b:42:17:74:f3:14:2c:05:ed: e2:46:2f:5c:f7:45:9b:37:40:27:78:18:d1:c5:25:20:d1:92: db:6c:90:df:95:50:72:7d:f3:d3:f6:24:4a:14:30:70:08:69: 40:a7:8a:71:2d:b5:c8:79:44:b3:52:e3:d7:c8:36:9c:d6:5d: 73:e3:63:ca:ba:85:fd:6d:77:7b:ed:28:87:e7:92:65:93:66: 60:d8:10:37:2a:77:8c:78:69:21:38:1e:8f:60:71:3d:37:61: 3a:4e:94:bd:7e:5d:24:3a:9a:d4:1c:03:bc:42:f1:76:a4:f9: 52:4a:3c:c9:33:2d:5a:dd:2a:bd:74:b3:3e:e6:4d:8c:9b:46: 57:96:2f:0d:ac:28:5b:c7:50:13:e1:a5:e0:37:16:98:ab:2e: 65:d9:7f:2a:bc:8f:b3:0a:78:06:43:9d:e2:bf:e3:64:41:21: 84:84:a6:51:d6:c1:7a:5e:97:13:7b:96:8e:83:16:81:e1:ce: b0:f4:f6:04:3a:4f:09:8d:c5:5a:d5:11:f5:3d:b4:d8:d5:3e: 9f:38:55:c3:43:65:13:14:f9:4f:01:66:78:2b:f9:a1:59:a6: e5:5e:46:be:84:f5:4d:bf:01:20:de:36:c8:a4:93:22:2a:23: bc:64:6f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YWRv41pAmWh7gcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk YjRmYzAwNjktODE2MS00NWFlLWIwNWMtMzU3MzgwYTBmZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloqCQDkXiXK+KeuYk6HNYzkMkJoV3fi3E5AB vR9zUU0mU7OZUd28Dc8fEnzcxELB6iN3EVjwOS3hIc8pMEgcVXasM1++VBNEwRRl oM/rMCfIMwUdjgKlnuEPuWyV4SktLlIZaquqfja1SNKQRhuSCs77AHjrfUqc/5WD fMC+4ue2hsqtNV2xp2avDDLjgRNecmTVXivj7s3UkoNe2RIKQe/4dcq90yAJxFKq a9JosflTE8TnHesjMK4XPpHTXn5iZafqG7hJReli0z+I6wPGxr0JyvA/qvReyV89 CCG4idY5N4JEbvK+EZjB4qBOllcG0jLyF81SFyItQbgVNEGmhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8IP8CJMiDbv81H6DeN3ghoI5DWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTNjY2UyZDQtODk2MC0z YTA3LTk1M2ItNmMyODlkZGZkODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcDfX63BnK+WGtCF3TzFCwF7eJGL1z3RZs3QCd4GNHFJSDRkttskN+V UHJ989P2JEoUMHAIaUCninEttch5RLNS49fINpzWXXPjY8q6hf1td3vtKIfnkmWT ZmDYEDcqd4x4aSE4Ho9gcT03YTpOlL1+XSQ6mtQcA7xC8Xak+VJKPMkzLVrdKr10 sz7mTYybRleWLw2sKFvHUBPhpeA3FpirLmXZfyq8j7MKeAZDneK/42RBIYSEplHW wXpelxN7lo6DFoHhzrD09gQ6TwmNxVrVEfU9tNjVPp84VcNDZRMU+U8BZngr+aFZ puVeRr6E9U2/ASDeNsikkyIqI7xkbz4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:02 2024 by rpki-client on console-fra.rpki-client.org