$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa File: 8ed43167-3d55-396e-b7f5-63a15906bbb8.roa (raw, json) Hash identifier: m2UBuI8iNNcjQPp/NE/cbJ0QqF6IsrZcHeVXO3N8k9E= Subject key identifier: 16:54:F6:4E:EC:9E:F3:BC:A3:6A:1F:3D:E3:4A:CD:5C:06:FB:64:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40CF1FCCA574EF4EEDAD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 40.131.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:cf:1f:cc:a5:74:ef:4e:ed:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=dcac26b8-8104-41eb-8ec4-db46fa345558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:67:53:59:17:d0:31:c1:94:b3:10:46:b7: ed:27:80:4b:a2:3b:79:78:ca:81:9e:d2:46:8b:41: f2:df:8c:9d:d7:8a:0f:74:df:f5:39:1d:6a:c9:7d: 74:4c:be:ad:c9:a3:8e:08:fa:12:f5:33:8d:0e:3e: 56:15:b1:c2:d5:59:3f:fb:46:89:dd:63:78:15:80: 6f:96:0c:09:49:5e:be:b6:06:a6:92:f7:3a:2e:71: 9f:4a:6f:ba:59:11:ee:e8:1f:af:41:7c:d6:64:3b: 1c:c9:be:9c:7d:b9:05:6b:c6:e0:81:f7:87:bc:da: c2:b6:55:19:0c:9f:b9:32:10:e1:ba:fc:8e:88:31: bf:09:4c:f4:0b:61:ca:ca:a8:68:55:7c:bb:74:5f: 75:75:29:fc:d0:ac:f9:df:50:91:0e:de:2c:e8:70: 2c:61:f3:a2:7e:52:72:80:ca:c2:a4:46:1f:ff:56: 66:19:79:f5:5d:1c:57:02:e9:d0:76:96:23:f9:d8: 05:8e:a1:bb:75:c4:af:b7:a7:62:34:6b:ee:1e:d0: 07:78:b6:34:39:9a:a7:bd:f1:0c:7e:23:81:6b:a8: 9e:d3:45:b9:8e:09:39:fd:6c:55:6c:0c:63:81:6b: 6b:b8:c1:41:57:ff:6d:48:2f:8e:bc:25:e6:42:7d: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:54:F6:4E:EC:9E:F3:BC:A3:6A:1F:3D:E3:4A:CD:5C:06:FB:64:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:42:91:29:20:b4:39:ce:6f:8e:4a:aa:f9:ee:de:cd:b3:98: 2c:82:4a:38:8e:75:b2:6c:8a:34:a4:73:cb:ad:b0:48:9d:9e: 36:12:dd:01:29:19:31:6e:45:0b:15:a0:f9:4f:6a:63:c9:02: 70:53:75:a6:88:9b:c5:05:c0:25:50:b0:d9:c7:40:e0:d7:10: 78:76:6e:77:d9:3c:b5:43:5f:da:57:cf:e6:0d:63:43:90:80: a0:f2:31:97:b5:73:ad:bc:bb:cc:1b:9b:1e:7b:2f:42:d3:40: 00:29:57:96:1a:37:cc:63:17:2a:eb:a5:85:27:a5:43:4d:5c: 07:82:95:e2:b2:ae:4d:e7:e5:be:2e:0c:e9:1a:2a:5b:9c:40: 1a:b6:27:e4:2d:e8:00:b7:fe:17:fc:c0:b3:4d:83:35:c6:5b: 6c:f3:1b:36:c8:57:44:48:a3:c5:25:47:25:82:ba:9d:fe:3a: e9:1f:98:16:75:db:94:03:4e:33:86:de:fd:69:23:10:56:d8: a4:fd:c8:5e:26:6d:2d:bc:7c:25:a2:f6:05:54:d9:8f:61:c0: 1d:ab:a4:06:08:50:2d:c9:38:53:9a:07:7f:10:92:56:72:3a: 86:1c:4f:81:12:4c:a7:93:d6:55:de:79:3a:3f:88:2a:80:1f: 19:ba:55:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQM8fzKV0707trYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGNhYzI2YjgtODEwNC00MWViLThlYzQtZGI0NmZhMzQ1NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHdnU1kX0DHBlLMQRrftJ4BLojt5eMqBntJG i0Hy34yd14oPdN/1OR1qyX10TL6tyaOOCPoS9TONDj5WFbHC1Vk/+0aJ3WN4FYBv lgwJSV6+tgamkvc6LnGfSm+6WRHu6B+vQXzWZDscyb6cfbkFa8bggfeHvNrCtlUZ DJ+5MhDhuvyOiDG/CUz0C2HKyqhoVXy7dF91dSn80Kz531CRDt4s6HAsYfOiflJy gMrCpEYf/1ZmGXn1XRxXAunQdpYj+dgFjqG7dcSvt6diNGvuHtAHeLY0OZqnvfEM fiOBa6ie00W5jgk5/WxVbAxjgWtruMFBV/9tSC+OvCXmQn1BOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZU9k7snvO8o2ofPeNKzVwG+2SZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGVkNDMxNjctM2Q1NS0z OTZlLWI3ZjUtNjNhMTU5MDZiYmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFCkSkgtDnOb45Kqvnu3s2zmCyCSjiOdbJsijSkc8utsEidnjYS3QEp GTFuRQsVoPlPamPJAnBTdaaIm8UFwCVQsNnHQODXEHh2bnfZPLVDX9pXz+YNY0OQ gKDyMZe1c628u8wbmx57L0LTQAApV5YaN8xjFyrrpYUnpUNNXAeCleKyrk3n5b4u DOkaKlucQBq2J+Qt6AC3/hf8wLNNgzXGW2zzGzbIV0RIo8UlRyWCup3+OukfmBZ1 25QDTjOG3v1pIxBW2KT9yF4mbS28fCWi9gVU2Y9hwB2rpAYIUC3JOFOaB38QklZy OoYcT4ESTKeT1lXeeTo/iCqAHxm6VX0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:55 2024 by rpki-client on console-ams.rpki-client.org