$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/728bd5fe-35b3-3a1b-9f98-510bf370e5a6.roa File: 728bd5fe-35b3-3a1b-9f98-510bf370e5a6.roa (raw, json) Hash identifier: KG5pAh1nBz65246ioFcjoj+gmp2WH/+RkQGyFulbvYM= Subject key identifier: AC:F5:41:57:36:AE:39:70:FF:BB:73:58:2D:40:80:DC:60:35:5C:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155133B6B4AE99117F7B100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/728bd5fe-35b3-3a1b-9f98-510bf370e5a6.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 26255 IP address blocks: 63.250.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:13:3b:6b:4a:e9:91:17:f7:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=42230d79-1837-4263-b3e4-3218d914d71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:f2:5c:0b:d0:b6:98:72:fb:e3:48:d9:18: af:df:36:ff:5e:bd:60:68:89:f7:b5:fc:2d:8d:7a: b4:12:67:99:ec:f8:b6:d8:99:dd:e8:a0:3b:ee:be: c4:67:1e:d2:d2:1c:bc:24:64:ad:1d:df:ce:4b:df: 46:54:14:65:a1:4d:27:d4:46:06:9b:ad:b8:14:6c: b9:42:e8:04:86:cd:9d:56:49:8b:b1:9d:17:24:88: 91:95:ca:f1:81:22:91:79:f8:96:61:ef:d3:02:e4: 11:ae:ac:44:bb:86:f9:96:6a:1a:d5:c5:89:89:0d: 3c:85:f4:82:b8:62:d8:1f:e3:3e:13:75:ed:94:a9: 4b:14:77:0d:fd:f7:c6:ff:09:f0:ae:6f:a1:fe:e2: 87:6d:3f:fd:60:ec:a8:fa:b1:e5:8a:3b:f4:86:67: 5c:9a:6b:94:66:8c:b6:0b:53:94:ea:b2:31:2c:91: 83:ae:a5:2c:c0:45:62:2c:fb:0f:02:6b:c0:ef:2e: 71:a6:38:93:6f:7a:c5:44:25:5c:7e:e3:28:bd:b9: 12:c2:72:4e:43:cd:59:bb:f4:7e:39:d2:86:52:1b: f5:2e:45:d3:cc:f2:e4:4b:a9:91:16:7f:02:13:f6: 4c:f6:bf:2f:2f:d8:e4:83:91:e2:9f:4e:79:e8:91: 50:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:41:57:36:AE:39:70:FF:BB:73:58:2D:40:80:DC:60:35:5C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/728bd5fe-35b3-3a1b-9f98-510bf370e5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.250.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:04:55:42:cc:66:0c:4c:d5:fb:bd:9a:32:ef:bd:6e:f6:0d: 85:db:35:7a:55:37:aa:66:4c:23:d9:29:ca:c5:e6:04:00:ee: 94:9f:5e:4b:83:05:4f:54:af:f9:bf:8a:e4:5f:dd:98:49:13: 03:47:fd:d5:7d:23:dd:41:38:a3:25:81:d4:3b:a0:75:24:87: 51:34:16:60:08:4e:fb:41:8e:98:55:ae:1e:86:50:e1:a6:5e: 52:8a:ba:1e:51:05:3f:a6:54:a5:c4:65:73:fd:07:d2:8c:50: 2b:25:24:14:08:76:2a:a7:ab:55:38:22:98:f5:0f:3e:a6:89: af:ef:9d:6c:83:82:b5:f7:df:00:8b:af:2e:dc:ed:3e:6d:d6: 6e:93:67:7d:e7:b8:51:97:e4:b3:ba:98:f1:3e:30:50:4a:fb: 1b:9f:47:6c:6a:75:19:d5:c5:22:36:2e:41:c4:47:ff:8d:b5: 97:f5:0c:e3:b9:d6:ca:69:b0:d2:0a:6d:51:c1:da:06:fa:7d: de:05:22:ca:2b:bb:b7:f0:91:19:87:0d:95:d4:e5:d7:c3:99: 18:5a:21:8a:50:72:8c:7e:75:82:eb:3e:e8:50:8a:af:8a:9b: 4e:d4:60:d7:ee:8d:52:89:3f:be:02:6b:18:80:d1:a7:8c:09: 89:3f:58:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRM7a0rpkRf3sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NDIyMzBkNzktMTgzNy00MjYzLWIzZTQtMzIxOGQ5MTRkNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxTyXAvQtphy++NI2Riv3zb/Xr1gaIn3tfwt jXq0EmeZ7Pi22Jnd6KA77r7EZx7S0hy8JGStHd/OS99GVBRloU0n1EYGm624FGy5 QugEhs2dVkmLsZ0XJIiRlcrxgSKRefiWYe/TAuQRrqxEu4b5lmoa1cWJiQ08hfSC uGLYH+M+E3XtlKlLFHcN/ffG/wnwrm+h/uKHbT/9YOyo+rHlijv0hmdcmmuUZoy2 C1OU6rIxLJGDrqUswEViLPsPAmvA7y5xpjiTb3rFRCVcfuMovbkSwnJOQ81Zu/R+ OdKGUhv1LkXTzPLkS6mRFn8CE/ZM9r8vL9jkg5Hin0556JFQYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz1QVc2rjlw/7tzWC1AgNxgNVxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzI4YmQ1ZmUtMzViMy0z YTFiLTlmOTgtNTEwYmYzNzBlNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/rjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4EVULMZgxM1fu9mjLvvW72DYXbNXpVN6pmTCPZKcrF5gQA7pSfXkuD BU9Ur/m/iuRf3ZhJEwNH/dV9I91BOKMlgdQ7oHUkh1E0FmAITvtBjphVrh6GUOGm XlKKuh5RBT+mVKXEZXP9B9KMUCslJBQIdiqnq1U4Ipj1Dz6mia/vnWyDgrX33wCL ry7c7T5t1m6TZ33nuFGX5LO6mPE+MFBK+xufR2xqdRnVxSI2LkHER/+NtZf1DOO5 1sppsNIKbVHB2gb6fd4FIsoru7fwkRmHDZXU5dfDmRhaIYpQcox+dYLrPuhQiq+K m07UYNfujVKJP74CaxiA0aeMCYk/WKA= -----END CERTIFICATE-----Generated at Mon Nov 25 15:58:05 2024 by rpki-client on console-fra.rpki-client.org