$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69f8ab67-81d3-31a0-8b48-94aa5ce47673.roa File: 69f8ab67-81d3-31a0-8b48-94aa5ce47673.roa (raw, json) Hash identifier: 1LXi4MZuX29Qx0qlEB+2oSV9sCfQCx+qsMOQRbcF7Sg= Subject key identifier: 34:99:7B:8C:4C:95:88:14:06:DF:DF:66:A6:83:55:10:26:67:0B:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15544D2DE35AD0B27300100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69f8ab67-81d3-31a0-8b48-94aa5ce47673.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 33486 IP address blocks: 155.212.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:44:d2:de:35:ad:0b:27:30:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=766fbf24-87fc-4fc1-8884-b72271f170ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:95:25:7f:35:48:9f:7c:da:5e:39:5a:a1: 46:17:cf:42:81:8a:fb:3f:f0:21:2a:20:4d:c4:3b: 30:5f:94:27:09:90:3f:8f:59:0e:f8:26:0d:a5:08: 50:c8:66:e4:12:e5:bf:f3:e3:45:3c:32:49:3d:b1: 64:da:d8:2b:0c:d9:df:4d:80:ab:26:60:1e:e4:cf: c7:05:25:32:3d:b6:d8:0c:86:ce:9f:43:b7:66:04: 82:5c:2c:70:b5:af:f8:e9:07:e6:34:c6:73:72:2e: 34:12:f0:53:80:18:71:05:ef:69:78:f0:72:57:fc: 9b:4d:cd:4b:9b:c5:6a:ad:9c:ce:28:2b:89:ca:0d: 5a:b6:36:57:5b:b5:f3:84:2f:17:ed:15:ac:fb:6d: 54:29:57:2b:95:9f:5f:70:a2:90:87:b8:7c:22:f7: 42:7d:56:cc:9d:ce:e3:92:e6:ea:02:14:ac:86:df: 03:3e:98:68:2b:dd:5e:d8:e9:50:1c:5f:8f:63:0a: a3:4e:e8:95:77:d4:11:83:14:e0:93:f3:85:a9:e7: ad:e8:ee:76:5a:26:d9:99:a2:34:ad:4a:2c:47:63: 23:b4:a9:4d:35:eb:50:17:a0:12:4b:75:00:f6:1a: 41:c7:50:67:ec:5d:b8:67:42:be:e7:42:f9:02:5b: b5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:99:7B:8C:4C:95:88:14:06:DF:DF:66:A6:83:55:10:26:67:0B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69f8ab67-81d3-31a0-8b48-94aa5ce47673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 155.212.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:69:ba:b4:80:c9:bc:57:8c:ef:77:46:8c:d0:8a:9b:7d:f0: bf:82:1d:0c:56:5e:fe:15:be:c9:e3:a0:ff:80:5d:e5:3c:d6: 99:85:91:7f:47:50:6d:c6:63:22:b8:58:ce:84:79:fb:ed:23: e0:79:4c:fa:0b:75:5c:61:e8:8c:fb:d9:ed:ae:2a:b9:38:0d: ce:ab:50:94:f6:38:10:e0:fc:28:d1:6c:2c:99:1a:7b:1e:7f: ed:39:87:2a:a1:95:64:0d:e0:93:b1:2a:1e:5b:30:49:93:d0: 68:a7:b2:6d:16:1a:0f:bf:06:6e:48:e6:a9:d2:30:b5:2f:85: d8:3b:21:12:0d:8e:1c:3a:f9:f1:f7:76:d2:94:c5:8e:39:6f: 8f:4e:5c:2d:68:8a:08:e1:ea:ab:64:b2:5a:ab:95:e2:4a:d1: 6f:7b:66:00:78:26:90:7e:cf:55:a2:db:b5:e3:5c:cf:33:39: a9:10:07:77:18:2a:80:3a:2b:de:0a:3a:0c:26:84:e6:e0:3b: 80:1d:60:b6:44:b2:93:fa:fc:12:8a:a7:a8:88:5c:ea:6e:e3: 79:b5:4c:7b:5a:39:fc:1a:b2:1a:b1:9c:90:24:0c:a9:58:2a: ce:88:ba:6b:84:24:9d:50:98:b6:30:30:2a:07:78:53:31:8e: 3a:1a:fc:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUTS3jWtCycwAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NzY2ZmJmMjQtODdmYy00ZmMxLTg4ODQtYjcyMjcxZjE3MGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj2VJX81SJ982l45WqFGF89CgYr7P/AhKiBN xDswX5QnCZA/j1kO+CYNpQhQyGbkEuW/8+NFPDJJPbFk2tgrDNnfTYCrJmAe5M/H BSUyPbbYDIbOn0O3ZgSCXCxwta/46QfmNMZzci40EvBTgBhxBe9pePByV/ybTc1L m8VqrZzOKCuJyg1atjZXW7XzhC8X7RWs+21UKVcrlZ9fcKKQh7h8IvdCfVbMnc7j kubqAhSsht8DPphoK91e2OlQHF+PYwqjTuiVd9QRgxTgk/OFqeet6O52WibZmaI0 rUosR2MjtKlNNetQF6ASS3UA9hpBx1Bn7F24Z0K+50L5Alu1DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSZe4xMlYgUBt/fZqaDVRAmZws3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjlmOGFiNjctODFkMy0z MWEwLThiNDgtOTRhYTVjZTQ3NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm9QYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFpurSAybxXjO93RozQipt98L+CHQxWXv4VvsnjoP+AXeU81pmFkX9H UG3GYyK4WM6EefvtI+B5TPoLdVxh6Iz72e2uKrk4Dc6rUJT2OBDg/CjRbCyZGnse f+05hyqhlWQN4JOxKh5bMEmT0Ginsm0WGg+/Bm5I5qnSMLUvhdg7IRINjhw6+fH3 dtKUxY45b49OXC1oigjh6qtkslqrleJK0W97ZgB4JpB+z1Wi27XjXM8zOakQB3cY KoA6K94KOgwmhObgO4AdYLZEspP6/BKKp6iIXOpu43m1THtaOfwashqxnJAkDKlY Ks6IumuEJJ1QmLYwMCoHeFMxjjoa/BE= -----END CERTIFICATE-----Generated at Mon Nov 25 15:58:02 2024 by rpki-client on console-fra.rpki-client.org