$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa File: 844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa (raw, json) Hash identifier: XHa5xjdFl+eWVJwUEAPonOc2htlfNejdtTVpdzioQ3c= Subject key identifier: 43:46:E8:1A:E3:0D:49:1E:A8:5B:08:3B:69:77:A5:60:4A:F6:E7:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155412EF87B377C786D0510 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 20458 IP address blocks: 216.204.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:41:2e:f8:7b:37:7c:78:6d:05:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=509d8c19-65f7-40dd-93de-dd3d4ea0b60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:10:c9:ea:f0:c1:d1:04:63:45:88:ac:d5: 1b:13:22:d2:9d:a8:17:b9:0b:83:2e:7d:fc:ad:e9: dc:aa:13:3f:2b:af:63:9a:d6:8c:5e:f1:0a:ac:6e: 5b:a1:38:c6:5a:80:8e:d1:a6:ef:d3:b4:1a:e6:45: 22:29:1f:a9:23:e1:ae:61:69:42:f1:3a:c1:22:98: b1:a3:c5:63:4f:ec:ea:f4:3d:f2:b9:c2:3d:d4:30: 46:93:73:57:18:9f:89:62:d6:a0:c9:37:b6:13:3c: b1:33:cf:bd:02:cc:ff:d3:fd:b3:4c:3d:25:f2:e9: a2:a3:e9:2d:82:af:30:11:0c:54:7e:e1:f8:d6:c7: c8:97:89:53:fd:ab:cb:be:9b:a5:e3:da:b9:75:53: 8f:c2:48:7f:4e:26:70:85:c4:d3:9c:ea:a9:16:06: 6b:3e:dd:2d:c1:39:86:1c:76:9b:e7:b7:44:aa:df: 2b:85:b4:71:32:8e:ad:63:77:6f:42:39:4c:e9:ba: 9d:58:cf:e7:70:78:f6:35:b4:9f:03:c1:03:47:83: ca:d9:61:06:22:65:a4:3b:c3:fe:12:a1:df:d4:3c: 81:1f:eb:4d:ef:f6:58:5a:03:87:c4:3f:05:11:2f: cc:e4:ac:3b:3b:e3:77:11:f8:9b:f8:d5:66:16:b9: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:E8:1A:E3:0D:49:1E:A8:5B:08:3B:69:77:A5:60:4A:F6:E7:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/844d0b42-1f30-3e27-a73a-6a6d8f04c158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fc:c4:b1:a6:c8:33:f9:48:61:e1:b9:af:d4:97:84:85:ad: 9a:7d:d7:90:8d:2a:a2:e7:d3:7c:28:97:2b:99:82:41:c2:ad: 8d:13:80:8d:ac:0f:9e:e7:68:46:b1:c3:57:3d:4e:e7:7d:88: e5:0a:04:ff:1b:36:fd:12:8e:8d:13:e2:92:f8:2c:ea:ec:07: b0:7b:7e:de:07:9d:4f:c3:cc:b5:69:14:e0:81:bb:a9:37:32: ad:2f:b1:8d:7c:c5:56:2e:18:37:80:5b:e8:53:4f:f1:01:fc: 88:fe:a5:55:fc:b0:8f:c9:77:2e:fe:34:32:8c:05:03:66:7b: d5:83:32:fb:b5:06:e7:d7:dc:e0:20:92:9f:05:5f:40:3b:8b: 85:a6:5b:74:32:d6:45:3d:ff:62:00:03:e2:ca:0c:2e:71:b3: 6d:2f:91:22:4e:53:b3:b8:d7:af:e0:af:e4:01:23:8a:a6:98: 3f:4e:ca:29:3c:5d:ab:d3:38:ae:07:60:d9:6d:77:3c:ab:57: 99:0a:2d:5a:10:3b:63:5e:e6:47:3a:04:ce:94:a6:bb:19:e7: 41:bb:b5:10:4e:a9:09:e5:74:71:89:9b:f6:63:b0:8f:f5:db: 8f:08:a8:be:af:9f:2b:06:02:c7:cb:4a:4d:3f:96:c5:29:f2: 9e:8c:37:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUEu+Hs3fHhtBRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NTA5ZDhjMTktNjVmNy00MGRkLTkzZGUtZGQzZDRlYTBiNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLoQyerwwdEEY0WIrNUbEyLSnagXuQuDLn38 rencqhM/K69jmtaMXvEKrG5boTjGWoCO0abv07Qa5kUiKR+pI+GuYWlC8TrBIpix o8VjT+zq9D3yucI91DBGk3NXGJ+JYtagyTe2EzyxM8+9Asz/0/2zTD0l8umio+kt gq8wEQxUfuH41sfIl4lT/avLvpul49q5dVOPwkh/TiZwhcTTnOqpFgZrPt0twTmG HHab57dEqt8rhbRxMo6tY3dvQjlM6bqdWM/ncHj2NbSfA8EDR4PK2WEGImWkO8P+ EqHf1DyBH+tN7/ZYWgOHxD8FES/M5Kw7O+N3Efib+NVmFrnYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENG6BrjDUkeqFsIO2l3pWBK9ufsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ0ZDBiNDItMWYzMC0z ZTI3LWE3M2EtNmE2ZDhmMDRjMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MyTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX8xLGmyDP5SGHhua/Ul4SFrZp915CNKqLn03wolyuZgkHCrY0TgI2s D57naEaxw1c9Tud9iOUKBP8bNv0Sjo0T4pL4LOrsB7B7ft4HnU/DzLVpFOCBu6k3 Mq0vsY18xVYuGDeAW+hTT/EB/Ij+pVX8sI/Jdy7+NDKMBQNme9WDMvu1BufX3OAg kp8FX0A7i4WmW3Qy1kU9/2IAA+LKDC5xs20vkSJOU7O416/gr+QBI4qmmD9Oyik8 XavTOK4HYNltdzyrV5kKLVoQO2Ne5kc6BM6UprsZ50G7tRBOqQnldHGJm/ZjsI/1 248IqL6vnysGAsfLSk0/lsUp8p6MNw8= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:36 2024 by rpki-client on console-ams.rpki-client.org