$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa File: 8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa (raw, json) Hash identifier: qrAKOjhERtUmgRzUWKgYM1s3LGh4HxBOgU5YMZHImYs= Subject key identifier: 0E:5D:A0:18:B7:2A:C9:33:07:38:DE:3B:B2:10:A5:BA:D6:33:8D:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15529F6DFFE228F8A37DB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 63.138.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:29:f6:df:fe:22:8f:8a:37:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=c72b38d3-998f-461f-b909-08cd69fd4a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3c:81:5e:ae:e4:7d:0a:3b:09:c1:c3:79:5e: 9d:68:0e:ac:fb:a7:e1:81:3a:87:ee:60:1e:fe:7c: de:6f:a9:b4:47:ab:62:33:c8:77:9f:76:5a:6a:14: bc:01:d6:02:f7:f3:18:ee:4e:9d:59:23:fc:28:d9: 4b:bb:2b:26:d3:c7:0f:fb:90:4d:2e:f4:d7:1e:c1: 91:96:16:43:db:12:e4:2d:9a:7a:2c:e3:bd:5b:e0: ad:fe:8e:b6:e8:7b:6e:c1:e5:eb:ee:85:e9:cd:86: af:89:a1:aa:39:31:20:a4:14:05:3e:af:40:e3:b9: 33:43:dc:1f:9e:48:36:b8:aa:f5:1c:c9:0e:7e:1b: 42:8a:83:61:a3:6a:75:9c:aa:57:6f:6f:53:92:42: bb:e2:6e:73:43:0a:7c:b8:3e:31:ff:a5:72:01:f2: eb:b8:11:b0:86:10:d0:16:8c:09:6e:28:76:9d:32: 29:d9:25:da:e2:f4:7e:c2:85:a1:7b:c1:13:9e:a0: c3:85:a9:f9:d5:c7:97:cb:05:43:4f:2f:bf:10:9c: 23:e8:e5:1c:96:01:9d:d3:d3:e5:8c:cb:1f:fd:f0: 46:dc:1c:cf:f9:4f:a7:89:53:e0:47:4e:30:31:4c: 91:c6:21:b0:f7:67:94:f1:f0:b1:dd:2d:57:d5:29: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:A0:18:B7:2A:C9:33:07:38:DE:3B:B2:10:A5:BA:D6:33:8D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0b:47:60:73:e0:54:6b:e8:f8:5b:26:e6:2c:3b:7f:f7:94: e8:d9:c4:89:11:24:43:be:79:64:23:52:80:41:77:89:82:ec: 12:2d:f7:1c:96:43:dc:df:f7:3d:04:70:f6:e8:24:97:52:c4: 27:3b:7f:17:f2:1e:be:18:74:06:7a:8a:04:d9:d1:34:af:66: 49:a9:86:4c:d3:d1:65:74:b8:ae:35:a7:f7:d6:61:a7:87:cd: 68:0b:09:84:cf:bc:d7:4c:dc:01:b2:9c:21:2d:d8:61:5e:1e: 57:2f:f1:f9:97:43:67:73:68:c6:47:33:ab:7e:8a:d1:41:07: e1:00:e8:8d:a5:85:41:53:9f:36:b3:76:99:ed:54:d3:72:56: 39:df:50:f8:d5:02:8c:8f:7b:3e:ee:fc:58:42:fd:1d:9d:d0: 8f:5a:50:e4:c6:6e:2b:20:92:2d:ac:6b:70:aa:69:0a:23:ac: 93:98:ba:d6:20:81:71:45:49:53:d1:71:67:cc:84:ac:34:67: 41:0f:5b:52:cb:fd:bc:52:59:13:d8:1f:ff:34:db:02:c1:9b: d2:2b:ac:27:05:cd:bc:b0:c9:9b:1d:0c:17:c1:58:bc:a7:ef: 13:42:97:f9:a8:d3:33:84:9e:b8:c6:6c:21:23:e9:70:26:a2: cd:6d:18:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSn23/4ij4o324AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YzcyYjM4ZDMtOTk4Zi00NjFmLWI5MDktMDhjZDY5ZmQ0YTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTyBXq7kfQo7CcHDeV6daA6s+6fhgTqH7mAe /nzeb6m0R6tiM8h3n3ZaahS8AdYC9/MY7k6dWSP8KNlLuysm08cP+5BNLvTXHsGR lhZD2xLkLZp6LOO9W+Ct/o626HtuweXr7oXpzYaviaGqOTEgpBQFPq9A47kzQ9wf nkg2uKr1HMkOfhtCioNho2p1nKpXb29TkkK74m5zQwp8uD4x/6VyAfLruBGwhhDQ FowJbih2nTIp2SXa4vR+woWhe8ETnqDDhan51ceXywVDTy+/EJwj6OUclgGd09Pl jMsf/fBG3BzP+U+niVPgR04wMUyRxiGw92eU8fCx3S1X1Sm7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5doBi3KskzBzjeO7IQpbrWM438MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY2NWRkNzgtZmQyYy0z ZTRkLTlkZjItZmUzODhkMTUxNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGALR2Bz4FRr6PhbJuYsO3/3lOjZxIkRJEO+eWQjUoBBd4mC7BIt9xyW Q9zf9z0EcPboJJdSxCc7fxfyHr4YdAZ6igTZ0TSvZkmphkzT0WV0uK41p/fWYaeH zWgLCYTPvNdM3AGynCEt2GFeHlcv8fmXQ2dzaMZHM6t+itFBB+EA6I2lhUFTnzaz dpntVNNyVjnfUPjVAoyPez7u/FhC/R2d0I9aUOTGbisgki2sa3CqaQojrJOYutYg gXFFSVPRcWfMhKw0Z0EPW1LL/bxSWRPYH/802wLBm9IrrCcFzbywyZsdDBfBWLyn 7xNCl/mo0zOEnrjGbCEj6XAmos1tGNo= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:47 2024 by rpki-client on console-ams.rpki-client.org