$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa File: 8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa (raw, json) Hash identifier: veu0YRjPe7nQIdR1SBVJFAQjPS7+duGZWzrIAxgU01A= Subject key identifier: CD:53:4A:57:C7:BE:FC:37:20:17:D7:E2:69:4B:E4:FC:24:91:A6:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15541E97B07350034B57640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 26284 IP address blocks: 209.83.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:41:e9:7b:07:35:00:34:b5:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0f4f02f5-aee9-4f0c-83d4-b7c264fa045f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:be:0e:60:9b:2b:7b:b9:37:11:29:4e:c6: 15:9a:75:de:2e:5f:08:5b:4b:d1:cf:28:25:8d:16: a0:ce:d9:2f:17:7a:2a:1b:91:be:e3:a4:c3:81:5b: 20:57:83:21:3f:47:7c:af:4d:0f:44:cb:60:d9:70: b3:0b:66:1e:47:59:d4:7f:bb:03:a4:b9:1a:33:48: ea:63:a5:f3:42:2d:40:94:15:0d:fa:b6:fc:61:f5: 5f:a9:41:ab:75:28:2d:f7:62:35:61:c1:4f:e5:2d: c7:00:ad:0e:6c:3b:03:63:2a:3f:69:b6:48:36:f3: df:ed:9c:88:f1:04:a6:17:c1:82:df:89:ed:8a:32: 69:81:86:c4:ae:59:88:8e:5b:20:17:e7:0c:87:2a: d3:d3:6b:f7:bd:ab:1a:0d:32:ce:69:5b:e4:0b:b4: 15:3c:3b:57:f5:5f:e2:0e:0e:c9:89:ee:c9:24:ae: 24:47:62:b6:e9:9d:12:51:ab:9e:9c:ec:91:c3:6f: 03:fc:03:b0:23:d7:ef:ff:b2:67:f4:3b:b0:b8:6c: 99:fe:5b:10:33:45:a6:76:39:95:c9:36:dc:e1:d0: af:2d:50:87:57:90:e1:30:ed:f9:98:c1:9d:44:58: 6f:4a:29:fb:7e:5b:4d:41:58:d2:d7:11:f7:ff:c5: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:53:4A:57:C7:BE:FC:37:20:17:D7:E2:69:4B:E4:FC:24:91:A6:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.83.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:56:b2:eb:cf:a2:9d:c2:da:8e:88:66:70:9a:82:8c:f1:93: 4a:66:de:d6:31:f4:c6:81:ba:b0:bb:2f:83:a7:65:fd:1d:0f: 96:71:44:94:df:78:41:c7:40:2d:90:85:c8:3b:95:3f:b7:ff: 53:e4:a5:ea:74:63:31:73:38:9b:6e:0f:ec:42:6a:24:61:84: 8c:06:e2:14:4a:ce:5c:b1:93:16:85:84:b8:12:92:c0:c4:ec: 85:86:d6:70:d3:82:2d:aa:f1:f3:1d:90:13:f7:5b:f0:a2:97: 0b:72:22:52:31:f8:91:65:d6:12:c9:e7:70:49:b7:0d:6d:b2: 2a:7a:a6:52:0b:c8:a2:78:cc:ce:f1:c2:c5:31:69:31:c5:ad: b5:31:a3:3b:f0:4e:d4:3b:1a:56:d9:ac:9a:53:9a:11:1b:1f: ed:67:bf:81:d5:ff:c8:e3:a1:59:02:fc:78:5a:90:7e:ec:05: 43:03:c6:49:34:92:a2:e0:31:cb:ae:26:d2:61:d8:fd:24:21: b8:36:87:3a:78:60:0c:0c:52:b0:ac:9c:ec:bd:ce:0e:83:b8: 9f:7d:01:da:12:b2:7c:00:f9:48:7d:32:84:09:7b:0c:5a:17: 88:60:29:f8:fc:5f:6b:59:10:62:a9:3f:50:0b:ba:f5:90:26: 10:1f:5c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUHpewc1ADS1dkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MGY0ZjAyZjUtYWVlOS00ZjBjLTgzZDQtYjdjMjY0ZmEwNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUq+DmCbK3u5NxEpTsYVmnXeLl8IW0vRzygl jRagztkvF3oqG5G+46TDgVsgV4MhP0d8r00PRMtg2XCzC2YeR1nUf7sDpLkaM0jq Y6XzQi1AlBUN+rb8YfVfqUGrdSgt92I1YcFP5S3HAK0ObDsDYyo/abZINvPf7ZyI 8QSmF8GC34ntijJpgYbErlmIjlsgF+cMhyrT02v3vasaDTLOaVvkC7QVPDtX9V/i Dg7Jie7JJK4kR2K26Z0SUauenOyRw28D/AOwI9fv/7Jn9DuwuGyZ/lsQM0WmdjmV yTbc4dCvLVCHV5DhMO35mMGdRFhvSin7fltNQVjS1xH3/8VijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1TSlfHvvw3IBfX4mlL5PwkkaaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJlM2Y3ZmEtMDU1MS0z OWE4LTlmYjQtZGExNWE2NmE5MWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0VMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlWsuvPop3C2o6IZnCagozxk0pm3tYx9MaBurC7L4OnZf0dD5ZxRJTf eEHHQC2Qhcg7lT+3/1Pkpep0YzFzOJtuD+xCaiRhhIwG4hRKzlyxkxaFhLgSksDE 7IWG1nDTgi2q8fMdkBP3W/CilwtyIlIx+JFl1hLJ53BJtw1tsip6plILyKJ4zM7x wsUxaTHFrbUxozvwTtQ7GlbZrJpTmhEbH+1nv4HV/8jjoVkC/HhakH7sBUMDxkk0 kqLgMcuuJtJh2P0kIbg2hzp4YAwMUrCsnOy9zg6DuJ99AdoSsnwA+Uh9MoQJewxa F4hgKfj8X2tZEGKpP1ALuvWQJhAfXCU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:25 2024 by rpki-client on console-ams.rpki-client.org