$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa File: 67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa (raw, json) Hash identifier: ju9yHMASihgW5TPQA3A92LoHJ5LRHbW6Le8BK93r7u4= Subject key identifier: B9:C6:95:95:3A:8F:11:BC:E0:CB:59:29:79:E2:84:05:D1:4D:08:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15515C2A5F0D6C19D9491D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 30363 IP address blocks: 209.156.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:15:c2:a5:f0:d6:c1:9d:94:91:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=f39f2e56-f06d-4359-a38e-7f97869063cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:b3:73:e2:97:97:61:53:ed:f7:36:4d:3d: 69:ef:8a:e4:39:15:9b:27:ea:d5:99:c3:06:3e:2a: 67:ce:15:17:1f:f0:32:98:b6:f9:38:35:cd:68:ba: 12:39:2a:00:0e:e2:7a:96:ef:e1:4b:dc:5e:fb:86: ad:a9:45:f9:8e:b6:fb:d3:26:70:58:ae:dc:08:44: 81:37:35:de:6b:32:0f:d3:f8:74:0b:4d:3c:5a:cd: 31:f9:1a:d7:31:89:79:52:2d:6e:3b:af:c1:f6:06: 8f:6c:1c:f4:bb:d7:bc:01:69:39:09:1f:67:a5:bc: 07:b0:71:9a:28:00:6d:84:7d:62:47:8d:87:89:8d: ea:fe:a9:59:0a:99:40:18:0f:d0:8e:a5:f4:79:99: f6:5e:be:58:3b:16:9a:53:a6:12:8e:fc:77:a5:83: d0:b2:dd:ff:d2:d5:4d:59:26:17:55:72:8e:f0:bb: 82:94:a8:2e:c8:3b:dd:47:d9:20:27:98:43:81:58: 57:f8:45:e0:6a:b6:b2:f8:d7:cd:0f:da:be:a2:c0: f6:b0:a7:c5:24:e1:bf:e5:86:49:6c:fa:1d:b1:e3: c4:5b:a7:aa:e5:c3:93:3c:fd:be:fc:ac:41:38:fe: 15:4f:23:09:fc:51:8f:b8:9a:a2:33:b2:c8:10:3f: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C6:95:95:3A:8F:11:BC:E0:CB:59:29:79:E2:84:05:D1:4D:08:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67d043b4-f275-3af9-8bb1-fd7e09c7b303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fa:e4:dd:18:70:96:75:ba:a1:58:e8:30:80:7b:f6:d0:f1: 72:c5:47:f9:d9:90:24:85:fb:5f:04:a5:af:3f:c3:99:26:4d: c3:44:52:a8:a6:58:82:0f:e2:fb:8a:c9:88:5b:35:7b:73:3f: 88:ca:29:04:c6:3c:1e:b2:79:af:23:ce:c2:d8:3c:c0:69:79: 1f:fa:c3:12:32:41:79:11:7b:12:74:af:77:6d:ef:17:b1:2c: 7d:b5:00:e1:38:96:0e:a3:37:ea:5f:1c:f6:92:cc:7f:1e:6a: bb:f1:21:85:ca:92:55:c8:02:e5:94:da:10:c9:84:1e:f4:ef: b4:01:df:da:92:90:7e:a3:7f:f2:18:c8:4a:16:d2:f7:6d:34: 9b:ad:c1:0a:42:13:e6:d1:35:74:0a:0a:0a:89:ae:12:28:81: fd:42:3b:1a:55:28:76:03:4c:e5:e8:78:6d:bf:cf:b2:8f:77: 7d:cc:28:ef:4f:32:c7:f9:fb:1a:21:de:e5:39:a7:b0:85:9e: 57:23:aa:27:b6:18:e3:99:1d:3e:f9:20:4c:2e:c1:85:cd:6f: 42:dd:59:20:f4:e2:e0:63:75:32:64:0c:5b:02:ae:ec:f5:ad: 75:18:91:fa:cb:44:85:4b:f3:55:98:ed:51:5b:35:3e:44:18: 94:5b:0f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRXCpfDWwZ2UkdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZjM5ZjJlNTYtZjA2ZC00MzU5LWEzOGUtN2Y5Nzg2OTA2M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP2zc+KXl2FT7fc2TT1p74rkORWbJ+rVmcMG PipnzhUXH/AymLb5ODXNaLoSOSoADuJ6lu/hS9xe+4atqUX5jrb70yZwWK7cCESB NzXeazIP0/h0C008Ws0x+RrXMYl5Ui1uO6/B9gaPbBz0u9e8AWk5CR9npbwHsHGa KABthH1iR42HiY3q/qlZCplAGA/QjqX0eZn2Xr5YOxaaU6YSjvx3pYPQst3/0tVN WSYXVXKO8LuClKguyDvdR9kgJ5hDgVhX+EXgaray+NfND9q+osD2sKfFJOG/5YZJ bPodsePEW6eq5cOTPP2+/KxBOP4VTyMJ/FGPuJqiM7LIED+HTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnGlZU6jxG84MtZKXnihAXRTQjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjdkMDQzYjQtZjI3NS0z YWY5LThiYjEtZmQ3ZTA5YzdiMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZzZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf65N0YcJZ1uqFY6DCAe/bQ8XLFR/nZkCSF+18Epa8/w5kmTcNEUqim WIIP4vuKyYhbNXtzP4jKKQTGPB6yea8jzsLYPMBpeR/6wxIyQXkRexJ0r3dt7xex LH21AOE4lg6jN+pfHPaSzH8earvxIYXKklXIAuWU2hDJhB7077QB39qSkH6jf/IY yEoW0vdtNJutwQpCE+bRNXQKCgqJrhIogf1COxpVKHYDTOXoeG2/z7KPd33MKO9P Msf5+xoh3uU5p7CFnlcjqie2GOOZHT75IEwuwYXNb0LdWSD04uBjdTJkDFsCruz1 rXUYkfrLRIVL81WY7VFbNT5EGJRbD5g= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:28 2024 by rpki-client on console-ams.rpki-client.org