$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa File: 6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa (raw, json) Hash identifier: krEgeSFAvddcoQuNG7SrnwOxU/WCI9SYD5IGSX4KNPo= Subject key identifier: 38:ED:79:42:75:B8:EE:A2:8D:C5:21:6C:9F:DB:B1:91:F0:58:5C:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155132CBFB23532C9FC4200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 25660 IP address blocks: 64.198.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:13:2c:bf:b2:35:32:c9:fc:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=49d485bf-485f-422a-9e17-9d10e63bf69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:fb:1f:67:55:99:09:b0:d6:97:65:3b:e1: f9:f0:cb:04:01:fb:0f:62:61:d6:05:a9:69:d3:be: 3a:6f:35:fb:00:bd:1c:bb:32:99:6d:f5:02:73:8f: 50:a3:b1:f0:7d:f5:f6:b3:55:6d:7a:f9:3f:a2:b4: 74:01:60:05:64:3a:b5:1b:da:97:f3:a8:ac:65:ef: c4:80:e0:a7:24:c2:72:5f:e7:9d:3b:0c:77:c2:e3: 32:93:e1:df:ef:d7:2a:e3:cc:ae:3b:ff:b8:19:65: 28:d7:10:c9:34:f5:8d:ad:ae:28:81:31:d0:3a:92: 91:09:f7:48:4b:ad:bd:4c:74:28:66:49:14:30:59: 9b:4e:ad:f7:16:80:c7:ac:a9:a3:8a:fc:1f:f3:cc: 91:d1:8e:07:63:ca:18:9b:eb:30:1a:73:a1:71:1d: 43:38:8f:99:9b:73:a1:d4:b0:16:33:32:88:30:02: de:03:9a:aa:47:4c:df:5f:8f:87:e3:7f:95:a1:93: 8b:6c:77:82:df:8f:ba:bb:b8:b0:c7:e4:13:84:55: f5:9d:95:b2:b4:86:e8:6a:f0:38:8c:2d:ca:4e:98: 7a:9c:7d:30:7e:31:43:8a:cb:ec:64:2e:d7:de:b5: b0:92:7a:67:38:0d:ce:53:45:51:43:5a:93:f2:e0: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:ED:79:42:75:B8:EE:A2:8D:C5:21:6C:9F:DB:B1:91:F0:58:5C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.198.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:82:05:86:d3:1e:df:00:69:60:85:ac:5e:fd:ae:bb:74:02: d1:2e:21:78:5d:db:27:a7:cf:22:59:8f:80:80:86:68:39:b8: c4:dc:b7:9a:02:81:da:ef:3a:1d:84:41:0f:dd:68:a5:71:32: a4:0c:b6:28:66:39:97:98:09:29:da:b1:8d:52:05:24:ef:29: f8:26:80:34:f6:8e:73:7e:f2:da:7a:21:d7:66:21:7c:ec:5f: f9:81:6a:bd:27:2a:1c:c8:e5:30:5e:d0:77:f4:3f:1e:34:ec: 6c:93:22:6e:e1:ad:18:c6:9b:71:ce:22:0d:09:b5:b6:69:e4: 34:72:5d:ae:ea:bf:71:66:a4:b0:64:22:22:68:cd:1a:92:ee: ba:12:66:ad:2a:e7:81:d3:ff:52:c0:0f:ee:c6:13:5a:4a:6b: 04:1e:d2:d7:87:fd:2c:3d:9f:99:27:61:73:a4:83:e0:f0:2f: 79:da:eb:e8:11:9b:7c:76:02:4a:4c:23:81:24:dc:fc:39:ed: ce:9c:05:9a:cf:3b:2a:f7:c0:51:67:a4:cc:86:bc:f4:de:03: 2a:6d:ce:a1:9e:bb:c7:4e:d7:54:f7:71:f3:fe:74:65:2e:56: 1e:9c:64:01:7f:a7:70:7b:f3:1e:67:24:23:56:2b:61:18:a9: 63:20:a6:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRMsv7I1Msn8QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NDlkNDg1YmYtNDg1Zi00MjJhLTllMTctOWQxMGU2M2JmNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ37H2dVmQmw1pdlO+H58MsEAfsPYmHWBalp 0746bzX7AL0cuzKZbfUCc49Qo7HwffX2s1Vtevk/orR0AWAFZDq1G9qX86isZe/E gOCnJMJyX+edOwx3wuMyk+Hf79cq48yuO/+4GWUo1xDJNPWNra4ogTHQOpKRCfdI S629THQoZkkUMFmbTq33FoDHrKmjivwf88yR0Y4HY8oYm+swGnOhcR1DOI+Zm3Oh 1LAWMzKIMALeA5qqR0zfX4+H43+VoZOLbHeC34+6u7iwx+QThFX1nZWytIboavA4 jC3KTph6nH0wfjFDisvsZC7X3rWwknpnOA3OU0VRQ1qT8uAgmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjteUJ1uO6ijcUhbJ/bsZHwWFwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmVmNmI1ZjAtNGE5NS0z YWM0LWIzZWUtZjVhN2YwNmFiZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyCBYbTHt8AaWCFrF79rrt0AtEuIXhd2yenzyJZj4CAhmg5uMTct5oC gdrvOh2EQQ/daKVxMqQMtihmOZeYCSnasY1SBSTvKfgmgDT2jnN+8tp6IddmIXzs X/mBar0nKhzI5TBe0Hf0Px407GyTIm7hrRjGm3HOIg0JtbZp5DRyXa7qv3FmpLBk IiJozRqS7roSZq0q54HT/1LAD+7GE1pKawQe0teH/Sw9n5knYXOkg+DwL3na6+gR m3x2AkpMI4Ek3Pw57c6cBZrPOyr3wFFnpMyGvPTeAyptzqGeu8dO11T3cfP+dGUu Vh6cZAF/p3B78x5nJCNWK2EYqWMgphc= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:30 2024 by rpki-client on console-ams.rpki-client.org