$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa File: 8bffed36-f32f-3b71-8966-29804d04ee97.roa (raw, json) Hash identifier: WhvYGXWeVce/FV4g4zTBOZCWZKKJFs3MsNflj4rH+04= Subject key identifier: 5A:DB:C9:80:57:6F:FD:6A:3B:8B:4F:D9:3D:F0:E5:3E:CB:C6:EA:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40D921C171D5EA113F9000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 40.131.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d9:21:c1:71:d5:ea:11:3f:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=889a90c5-d5a6-4c74-a5ba-0b3ebd8177d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:45:5b:d0:72:c3:b7:ad:4d:af:97:32:d9: ad:7f:72:8d:ac:0c:1a:3c:59:62:e0:d9:7d:06:b6: 99:65:5f:92:53:3b:70:13:db:cb:07:e9:e5:4a:0a: fc:6f:8f:c0:83:5a:dc:52:af:86:fa:00:b3:f0:5d: 24:98:bf:8e:2f:e7:ba:a9:92:e9:27:8b:33:6f:c7: d0:ff:6c:f2:cc:f4:a5:d9:b9:f9:93:cf:17:37:e9: 86:b1:19:9d:b0:f9:9f:da:63:72:68:a5:5a:05:45: fe:59:84:18:72:df:76:2d:ae:fd:aa:02:6f:8a:30: bb:06:0c:f2:ff:b2:6a:c5:d1:01:13:0d:f7:cb:79: 22:1f:f3:cb:11:67:4e:c3:c8:22:24:e5:c9:78:85: 60:d8:cc:58:c9:03:3e:95:a0:13:92:c4:b8:b1:21: 5f:a8:b1:4f:c9:23:98:84:df:eb:23:06:c3:76:2f: 21:67:22:12:70:95:eb:cd:0b:04:dd:2f:df:1d:9f: 59:da:67:5a:58:02:be:8f:39:4b:b5:14:50:c7:28: a2:63:bb:7b:af:0e:0d:a4:24:5c:72:8d:5d:28:35: 76:ed:d6:8c:0a:c3:90:a0:12:13:95:8b:41:18:cd: d4:70:94:8a:2e:c1:c3:52:6d:0e:7a:b2:5c:6c:4b: ed:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DB:C9:80:57:6F:FD:6A:3B:8B:4F:D9:3D:F0:E5:3E:CB:C6:EA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7b:e0:c7:fd:6d:be:2b:e8:03:25:07:7f:52:de:3a:6e:69: 8e:e9:30:aa:21:3e:03:ec:19:f9:7c:5d:f3:0f:82:80:ba:54: 1b:a9:c1:3c:47:88:3e:54:7f:0b:c4:c6:d7:c3:f4:07:d8:19: ea:9e:de:9b:ca:9a:fc:a1:58:a5:6e:50:5c:0c:24:84:91:61: 3e:ed:90:2f:2c:82:d6:e9:02:6f:21:95:41:d1:86:e5:81:95: fa:1f:6d:41:89:d0:41:e6:6f:ca:50:48:a5:0d:5e:3e:28:77: 6d:ff:6e:2c:c8:f6:06:f0:4e:08:5f:63:b8:12:6a:8c:01:d8: 81:76:3a:57:76:59:18:a8:eb:7d:50:34:a2:f2:b3:5c:d5:0d: ae:8b:d3:b3:25:1d:33:94:28:a3:9a:4d:d4:3f:f6:0a:75:17: 2e:f6:c5:3b:9d:ac:2a:55:2a:ec:b6:10:87:4c:16:9a:b4:2a: 7b:4e:bb:a3:14:19:5f:c0:6f:aa:ed:2f:93:ae:e9:a3:ca:8d: d5:65:99:d1:9e:6f:50:42:65:ab:b0:d7:47:95:53:eb:0e:85: 59:37:56:be:12:a2:d6:a6:d4:ff:5e:26:e7:de:b4:d4:b2:f7: 44:35:db:c8:7d:2f:a8:a6:dc:3c:6d:62:2e:d0:8f:12:cf:af: 02:2b:da:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNkhwXHV6hE/kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODg5YTkwYzUtZDVhNi00Yzc0LWE1YmEtMGIzZWJkODE3N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1xFW9Byw7etTa+XMtmtf3KNrAwaPFli4Nl9 BraZZV+SUztwE9vLB+nlSgr8b4/Ag1rcUq+G+gCz8F0kmL+OL+e6qZLpJ4szb8fQ /2zyzPSl2bn5k88XN+mGsRmdsPmf2mNyaKVaBUX+WYQYct92La79qgJvijC7Bgzy /7JqxdEBEw33y3kiH/PLEWdOw8giJOXJeIVg2MxYyQM+laATksS4sSFfqLFPySOY hN/rIwbDdi8hZyIScJXrzQsE3S/fHZ9Z2mdaWAK+jzlLtRRQxyiiY7t7rw4NpCRc co1dKDV27daMCsOQoBITlYtBGM3UcJSKLsHDUm0OerJcbEvtpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrbyYBXb/1qO4tP2T3w5T7LxurcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJmZmVkMzYtZjMyZi0z YjcxLTg5NjYtMjk4MDRkMDRlZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV74Mf9bb4r6AMlB39S3jpuaY7pMKohPgPsGfl8XfMPgoC6VBupwTxH iD5UfwvExtfD9AfYGeqe3pvKmvyhWKVuUFwMJISRYT7tkC8sgtbpAm8hlUHRhuWB lfofbUGJ0EHmb8pQSKUNXj4od23/bizI9gbwTghfY7gSaowB2IF2Old2WRio631Q NKLys1zVDa6L07MlHTOUKKOaTdQ/9gp1Fy72xTudrCpVKuy2EIdMFpq0KntOu6MU GV/Ab6rtL5Ou6aPKjdVlmdGeb1BCZauw10eVU+sOhVk3Vr4Sotam1P9eJufetNSy 90Q128h9L6im3DxtYi7QjxLPrwIr2mQ= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:47 2024 by rpki-client on console-ams.rpki-client.org