$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59a7116c-16de-3bda-97b5-761c80819a9a.roa File: 59a7116c-16de-3bda-97b5-761c80819a9a.roa (raw, json) Hash identifier: AJJv7j1b3oJEIcUfPRF2b4iRhtdfYlgvoA9qrVPfSDw= Subject key identifier: D7:DE:A6:8E:E2:99:A6:11:B2:50:1F:F4:C8:24:C9:36:F9:37:9D:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551727647ECCDF4DE55900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59a7116c-16de-3bda-97b5-761c80819a9a.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 40399 IP address blocks: 63.139.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:17:27:64:7e:cc:df:4d:e5:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=32c728fa-83d1-4799-ba83-8d895c3800b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:89:87:31:fd:fc:f2:58:d9:2f:e1:26:11: 77:0e:8d:91:ef:75:e5:f5:30:d5:c6:9f:60:04:b3: 30:a2:dd:c6:f3:95:6c:db:93:47:54:ac:0a:a3:2d: 66:b6:c9:e6:c5:e9:5d:d5:69:96:08:27:6d:d7:cc: 16:69:c3:ba:b7:ad:02:93:eb:5a:71:72:9d:80:86: f9:c8:fd:14:69:26:29:6d:e2:ce:22:de:a6:50:bb: 6d:bc:c4:4a:9f:96:0a:f5:8c:16:25:e3:7e:cc:a4: c7:ca:48:b1:2b:6b:f5:c9:88:9f:50:e9:35:62:1e: 71:01:8e:62:b9:e7:d2:25:07:af:ce:46:30:8f:4b: d3:3f:76:1c:be:b8:ee:92:3c:f1:37:e6:a3:10:3e: c7:b4:91:f4:8e:25:6d:ee:b5:ee:16:eb:d7:da:00: c7:9e:07:fd:a4:c4:3c:7f:5d:11:d7:7c:fa:9b:a0: 49:28:0f:68:0c:2f:2b:cf:62:27:96:f8:68:f3:9b: 86:11:9a:2c:fa:c0:b4:54:e2:49:c9:67:5d:d5:af: 81:70:63:b9:92:81:c4:84:dd:6f:b2:33:a9:9b:55: bb:9a:e4:ac:9d:c5:a3:d2:e6:aa:68:2c:93:11:a4: a0:ca:63:12:3f:b7:15:66:db:3e:ee:a2:de:41:8b: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DE:A6:8E:E2:99:A6:11:B2:50:1F:F4:C8:24:C9:36:F9:37:9D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59a7116c-16de-3bda-97b5-761c80819a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.139.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9e:72:41:b8:0c:5c:14:6f:40:35:53:74:c3:2a:c6:1c:cd: 0f:62:c8:85:fc:46:77:9b:bf:bf:56:60:90:9f:64:93:df:29: 41:bb:37:7c:1f:db:14:90:9b:b2:e5:a3:56:64:a2:eb:c9:98: 22:d5:88:f3:0b:74:c3:2a:f1:44:15:1c:15:e5:c1:a6:ea:0a: 5a:c5:f4:35:f4:ae:90:b3:c4:40:68:04:38:59:05:ee:3c:0d: c1:82:2a:ea:7a:af:d3:1d:b8:04:e6:97:e6:3f:cb:7b:6f:68: ce:d9:55:78:d7:d9:c8:7a:a9:ca:3c:78:8b:0e:d7:85:8e:7b: c0:0b:29:10:3e:7e:6f:36:44:67:8d:68:88:4a:02:63:cf:27: 5b:61:ed:36:4d:ad:bd:a3:31:23:e4:ff:c3:1e:48:2a:97:62: 80:9d:30:b9:2a:8f:74:93:a7:ee:b4:6c:ae:1c:a9:11:94:68: 60:84:24:b3:24:a5:c8:4e:76:33:57:8a:25:2d:5b:d9:70:24: 33:c7:f8:78:e9:1a:1c:39:35:45:ed:5e:ec:a6:ce:65:7d:8b: 3e:fa:98:58:ea:94:d1:bf:53:dd:b9:08:53:1f:8e:55:f4:1d: 0e:ab:d6:41:13:7b:04:5e:4a:fc:be:30:33:fc:73:9d:02:53: 87:33:fa:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRcnZH7M303lWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MzJjNzI4ZmEtODNkMS00Nzk5LWJhODMtOGQ4OTVjMzgwMGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi12JhzH9/PJY2S/hJhF3Do2R73Xl9TDVxp9g BLMwot3G85Vs25NHVKwKoy1mtsnmxeld1WmWCCdt18wWacO6t60Ck+tacXKdgIb5 yP0UaSYpbeLOIt6mULttvMRKn5YK9YwWJeN+zKTHykixK2v1yYifUOk1Yh5xAY5i uefSJQevzkYwj0vTP3YcvrjukjzxN+ajED7HtJH0jiVt7rXuFuvX2gDHngf9pMQ8 f10R13z6m6BJKA9oDC8rz2Inlvho85uGEZos+sC0VOJJyWdd1a+BcGO5koHEhN1v sjOpm1W7muSsncWj0uaqaCyTEaSgymMSP7cVZts+7qLeQYsdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfepo7imaYRslAf9MgkyTb5N50lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTlhNzExNmMtMTZkZS0z YmRhLTk3YjUtNzYxYzgwODE5YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4tuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGeckG4DFwUb0A1U3TDKsYczQ9iyIX8Rnebv79WYJCfZJPfKUG7N3wf 2xSQm7Llo1ZkouvJmCLViPMLdMMq8UQVHBXlwabqClrF9DX0rpCzxEBoBDhZBe48 DcGCKup6r9MduATml+Y/y3tvaM7ZVXjX2ch6qco8eIsO14WOe8ALKRA+fm82RGeN aIhKAmPPJ1th7TZNrb2jMSPk/8MeSCqXYoCdMLkqj3STp+60bK4cqRGUaGCEJLMk pchOdjNXiiUtW9lwJDPH+HjpGhw5NUXtXuymzmV9iz76mFjqlNG/U925CFMfjlX0 HQ6r1kETewReSvy+MDP8c50CU4cz+jU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:21:29 2024 by rpki-client on console-fra.rpki-client.org