$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c8a61ad-d8df-3504-8788-081e0e9fa4c6.roa File: 5c8a61ad-d8df-3504-8788-081e0e9fa4c6.roa (raw, json) Hash identifier: 99KRgOsew/jlTdX/oxtmSRZ0gY9MG833J2x61PPOkJQ= Subject key identifier: 47:7C:D4:30:C2:0F:C6:FF:52:A6:B9:F2:10:88:4B:40:10:69:B4:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553443A281CAC1C42D7CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c8a61ad-d8df-3504-8788-081e0e9fa4c6.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 139.55.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:34:43:a2:81:ca:c1:c4:2d:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=4c792853-74cd-4bf6-b6b9-3cc46591c2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:bd:72:2d:f3:05:23:ba:af:9e:88:01:c3: 87:6a:cc:60:d0:90:ee:ab:32:e9:03:5b:23:c5:b8: 95:19:4b:7e:85:13:1e:93:01:1f:cd:a1:4c:cc:88: 54:23:32:50:5a:84:c1:e7:db:46:3e:70:0d:60:c5: 71:e4:9d:f1:4c:6b:f3:b4:ee:2c:7f:74:f5:bc:10: 09:46:de:88:ac:77:60:56:1f:42:80:3c:39:01:e6: 5b:37:8e:96:c7:86:8a:5b:f5:8b:3b:c4:da:ff:6c: 7c:b9:36:50:a0:f1:b2:19:23:56:ee:c1:1f:9f:f3: cf:40:05:ea:1f:de:00:78:1e:47:f0:ae:27:3e:c9: 41:9e:9b:5d:6c:af:b4:4f:8e:0e:5b:4e:ad:4e:e4: a2:6c:71:26:57:3b:a2:9c:38:31:0f:f5:44:a0:36: 0c:50:88:70:57:bb:4c:e4:57:cf:24:3c:b8:c6:7e: 5f:7d:9a:3b:8c:01:b3:72:4a:0d:1a:0c:86:ac:f5: e8:b8:5f:23:ad:e7:a3:ef:ff:f0:35:a7:d6:0b:a3: 50:56:c1:e0:55:00:bf:b3:62:d4:01:66:f7:23:51: a1:59:5b:55:17:7b:04:3c:cc:53:27:14:46:5b:0b: d1:5f:a1:55:ac:0a:e0:0e:99:7f:e4:91:e4:15:5e: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7C:D4:30:C2:0F:C6:FF:52:A6:B9:F2:10:88:4B:40:10:69:B4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c8a61ad-d8df-3504-8788-081e0e9fa4c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b2:29:d1:fd:d8:0c:a1:62:ee:f1:39:fb:a2:fb:63:52:17: cb:a7:d2:b1:fe:b2:2e:85:04:f0:89:01:3d:2a:f1:3f:06:a6: c8:25:6e:57:0f:bb:4c:88:b3:f8:4c:02:6e:5c:2c:22:a2:e3: c5:11:bf:61:96:fe:75:b8:69:8e:7e:4c:fb:a1:f0:c2:52:4d: 11:33:cc:a5:c3:d7:5e:99:ce:3a:7d:52:74:ff:ad:8e:26:d6: 1c:01:f2:d6:b4:11:c9:3a:be:24:41:2e:04:66:91:c4:ff:cb: 93:c6:67:35:26:bb:9e:eb:95:91:ea:a3:24:12:cb:b1:9e:63: 19:b1:71:3d:b6:15:d1:c5:55:96:3c:37:36:3d:76:59:b2:e9: 82:f3:7b:4e:e6:d5:35:59:72:48:89:a8:95:fd:a9:d0:fd:e7: 72:c1:f4:6a:a8:76:cb:72:1c:95:8f:d4:07:b1:15:8d:e9:62: 7a:8c:b8:f3:5a:41:bc:b1:52:f2:c6:4b:37:94:68:15:5d:b2: f8:89:41:31:f9:e9:ac:12:47:6d:eb:1b:ee:cd:6d:c3:80:d5: 8a:9f:9f:1b:c5:6a:5f:e8:4d:8d:53:3d:ba:d3:82:d7:3b:72: 1b:76:86:12:a9:91:a8:b5:87:50:0f:60:be:d4:f0:0a:2d:c8: 57:9a:09:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTRDooHKwcQtfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NGM3OTI4NTMtNzRjZC00YmY2LWI2YjktM2NjNDY1OTFjMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsG9ci3zBSO6r56IAcOHasxg0JDuqzLpA1sj xbiVGUt+hRMekwEfzaFMzIhUIzJQWoTB59tGPnANYMVx5J3xTGvztO4sf3T1vBAJ Rt6IrHdgVh9CgDw5AeZbN46Wx4aKW/WLO8Ta/2x8uTZQoPGyGSNW7sEfn/PPQAXq H94AeB5H8K4nPslBnptdbK+0T44OW06tTuSibHEmVzuinDgxD/VEoDYMUIhwV7tM 5FfPJDy4xn5ffZo7jAGzckoNGgyGrPXouF8jreej7//wNafWC6NQVsHgVQC/s2LU AWb3I1GhWVtVF3sEPMxTJxRGWwvRX6FVrArgDpl/5JHkFV5tjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEd81DDCD8b/Uqa58hCIS0AQabSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM4YTYxYWQtZDhkZi0z NTA0LTg3ODgtMDgxZTBlOWZhNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCyKdH92AyhYu7xOfui+2NSF8un0rH+si6FBPCJAT0q8T8GpsglblcP u0yIs/hMAm5cLCKi48URv2GW/nW4aY5+TPuh8MJSTREzzKXD116Zzjp9UnT/rY4m 1hwB8ta0Eck6viRBLgRmkcT/y5PGZzUmu57rlZHqoyQSy7GeYxmxcT22FdHFVZY8 NzY9dlmy6YLze07m1TVZckiJqJX9qdD953LB9GqodstyHJWP1AexFY3pYnqMuPNa QbyxUvLGSzeUaBVdsviJQTH56awSR23rG+7NbcOA1YqfnxvFal/oTY1TPbrTgtc7 cht2hhKpkai1h1APYL7U8AotyFeaCQ8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:03 2024 by rpki-client on console-fra.rpki-client.org