$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa File: 880f3735-f73d-3dab-8ba3-3dc57da7e499.roa (raw, json) Hash identifier: /LLSVRw1vDMCXYPnsHEUvHEBwIP1ei8qachXoJMN4C8= Subject key identifier: 1F:C2:C1:38:AF:F7:01:3A:B3:B3:28:A6:F0:09:B0:F2:52:D0:E5:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15512ED5D62DBB2B8E56A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 22904 IP address blocks: 67.217.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:12:ed:5d:62:db:b2:b8:e5:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=189d264b-190f-4acc-a99d-9fbd12c99b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:93:79:fa:a9:df:d5:55:7f:1e:31:9e:c2: 57:ca:33:f4:16:4b:a0:0a:a8:10:9a:c6:70:e6:ec: c0:cf:1b:d1:16:56:13:61:b4:7b:64:2b:05:2a:9d: 71:cf:18:f4:6c:76:30:af:45:45:2a:6e:2a:01:14: 4a:9d:7c:d1:dc:a1:a6:66:dd:5d:32:61:d3:da:b8: b5:32:78:fe:30:f4:22:a4:9a:76:40:10:1f:d7:8f: e1:aa:ab:47:e1:a9:46:68:b9:02:65:ce:74:f3:9b: 53:20:fc:f7:84:19:18:a5:7c:51:53:54:c2:e7:5e: 5a:24:e6:50:a9:b3:bb:01:d5:82:25:11:a1:53:26: 78:8b:63:08:22:64:29:fb:0f:f6:30:7b:7d:d0:dd: 73:81:3d:33:5c:7a:67:53:7b:8e:f8:64:04:22:a0: b2:1d:b8:6c:d4:93:49:e5:5b:9b:a9:3b:29:39:7e: a8:40:d3:45:99:48:b6:e8:3f:d3:52:89:55:e8:08: 55:9c:c4:4f:eb:85:cc:c2:39:1d:17:82:7a:d8:b1: ad:12:38:98:f5:90:50:3c:14:48:3f:8b:f4:48:df: 08:a6:3d:02:7e:79:fe:80:c0:87:9a:b9:97:13:3e: ac:e6:67:8b:d0:b9:fc:56:87:7c:bc:e4:e1:42:6c: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C2:C1:38:AF:F7:01:3A:B3:B3:28:A6:F0:09:B0:F2:52:D0:E5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/880f3735-f73d-3dab-8ba3-3dc57da7e499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:eb:4e:70:44:52:74:fb:3f:51:5d:fb:19:7e:0c:38:66:2f: 1c:62:04:fc:e7:45:6b:8d:3f:69:2c:f9:4c:63:6f:7e:a4:12: 9a:c3:eb:9a:bf:76:fe:03:5d:6a:ea:81:b0:07:2c:a8:47:ee: 67:68:ba:36:ec:3c:a5:e0:0a:5c:ef:15:78:36:d5:b5:a6:1b: 15:a0:5f:42:55:c7:44:35:e0:5e:60:43:47:ba:64:15:32:4e: 4b:c2:da:07:89:92:21:61:a1:fc:4c:c3:67:db:b2:a0:b6:b0: e7:56:32:a7:7a:ac:2d:9f:f4:70:e3:40:4b:32:22:4f:6c:dc: ef:8d:4c:ce:c9:d1:d5:5d:09:b3:e4:46:1e:3e:95:32:71:bc: 66:b5:4a:92:b2:57:51:bd:e9:6c:97:8f:d7:ef:b8:96:45:8f: 43:3e:88:32:10:5a:8a:5e:56:ef:33:05:31:f4:90:44:f5:6d: 07:05:90:66:87:c1:93:97:04:e5:07:86:2e:96:3d:7e:24:7f: ba:97:b3:f2:c4:37:bf:11:27:95:b5:97:fd:f9:ce:91:01:55: 2f:35:77:35:63:c4:c8:13:3f:a9:2c:b3:e4:5a:5c:0a:ba:35: 4e:99:ca:68:24:ef:61:19:2f:e1:de:36:37:0e:d7:d7:9f:3f: 17:0e:d1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRLtXWLbsrjlagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MTg5ZDI2NGItMTkwZi00YWNjLWE5OWQtOWZiZDEyYzk5YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGqTefqp39VVfx4xnsJXyjP0FkugCqgQmsZw 5uzAzxvRFlYTYbR7ZCsFKp1xzxj0bHYwr0VFKm4qARRKnXzR3KGmZt1dMmHT2ri1 Mnj+MPQipJp2QBAf14/hqqtH4alGaLkCZc5085tTIPz3hBkYpXxRU1TC515aJOZQ qbO7AdWCJRGhUyZ4i2MIImQp+w/2MHt90N1zgT0zXHpnU3uO+GQEIqCyHbhs1JNJ 5VubqTspOX6oQNNFmUi26D/TUolV6AhVnMRP64XMwjkdF4J62LGtEjiY9ZBQPBRI P4v0SN8Ipj0Cfnn+gMCHmrmXEz6s5meL0Ln8Vod8vOThQmznrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/CwTiv9wE6s7MopvAJsPJS0OWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgwZjM3MzUtZjczZC0z ZGFiLThiYTMtM2RjNTdkYTdlNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHrTnBEUnT7P1Fd+xl+DDhmLxxiBPznRWuNP2ks+Uxjb36kEprD65q/ dv4DXWrqgbAHLKhH7mdoujbsPKXgClzvFXg21bWmGxWgX0JVx0Q14F5gQ0e6ZBUy TkvC2geJkiFhofxMw2fbsqC2sOdWMqd6rC2f9HDjQEsyIk9s3O+NTM7J0dVdCbPk Rh4+lTJxvGa1SpKyV1G96WyXj9fvuJZFj0M+iDIQWopeVu8zBTH0kET1bQcFkGaH wZOXBOUHhi6WPX4kf7qXs/LEN78RJ5W1l/35zpEBVS81dzVjxMgTP6kss+RaXAq6 NU6Zymgk72EZL+HeNjcO19efPxcO0aM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:24 2024 by rpki-client on console-ams.rpki-client.org