$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95930e38-caf9-3daf-b9f8-9826c8d04a30.roa File: 95930e38-caf9-3daf-b9f8-9826c8d04a30.roa (raw, json) Hash identifier: wQCy/5imyDR4MOeOHWCoNZqX1G+ExH34qLjGrJ9JmW8= Subject key identifier: 9E:31:03:73:8B:11:C3:E4:5B:BB:18:85:AC:62:FF:C1:8E:85:1D:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584793B14ED28CA6507346C56BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95930e38-caf9-3daf-b9f8-9826c8d04a30.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 7029 IP address blocks: 209.253.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:4e:d2:8c:a6:50:73:46:c5:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=f1dac6ec-ccea-403d-bf5f-f0c91cd64c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:49:91:e1:32:55:93:00:2c:21:e4:04:7b:b4: 3d:08:70:2d:27:65:dd:89:15:31:9d:2a:cd:8e:76: 02:9b:a3:35:64:14:d9:e7:ed:30:c8:bf:9d:08:bc: 54:ab:e2:2e:50:68:9a:a3:26:71:dc:95:3c:22:5a: ca:e2:f3:9c:b5:68:9e:0d:78:b8:08:52:37:17:ce: 26:4d:29:d0:7c:b1:94:5b:42:f4:0b:ee:d7:e7:eb: e6:58:90:01:5d:df:6f:2a:77:10:2f:22:fa:af:72: 58:1e:c4:15:a9:db:e4:74:54:76:b8:7a:30:15:13: b8:63:67:2f:91:17:fd:a6:23:55:a3:80:8d:4b:3b: b2:dc:d1:e8:c7:45:c3:a4:4d:30:3a:d5:5c:a5:ce: 7d:0b:60:89:f2:73:58:86:3c:93:eb:52:db:be:91: c5:2e:57:70:72:42:0d:a5:e0:72:48:6f:4a:55:50: 18:96:92:55:84:94:1b:6d:e3:bf:8a:6b:95:2b:5e: 7f:4d:9d:fe:0a:29:ce:9e:20:a0:12:65:e1:2d:69: 0b:05:77:6b:0f:dc:0a:7c:b9:2e:a0:cb:18:94:6d: 46:1d:04:5b:c2:ef:ca:87:85:51:04:83:c1:8c:fb: 30:aa:71:40:7b:8e:9d:9a:4a:9b:5e:8a:f3:81:e3: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:03:73:8B:11:C3:E4:5B:BB:18:85:AC:62:FF:C1:8E:85:1D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95930e38-caf9-3daf-b9f8-9826c8d04a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c8:2b:35:ab:c9:f1:26:68:8e:93:c9:2f:fb:99:bd:b7:43: 1d:04:e2:c4:8e:bb:56:11:f2:e2:10:a2:fc:4b:1b:45:12:da: bb:c7:31:03:5a:b0:44:e8:ba:98:d2:c6:eb:44:3f:97:4b:03: 19:84:b3:b1:64:92:3b:e6:28:c3:4c:d7:59:38:e6:51:fb:56: 2a:3a:66:42:f3:ad:a8:72:c8:6d:2a:09:fc:fb:a9:81:8a:2a: 00:cc:69:96:4f:7d:af:40:d3:3e:d2:74:6e:2a:e8:67:44:ff: cb:8b:87:9b:c2:6c:f6:eb:ee:b0:37:38:cf:4a:70:3b:28:bd: c8:6b:cd:61:1e:6b:93:76:92:ad:86:ff:a1:e0:ff:04:86:2b: e9:de:fc:1b:8b:86:97:95:bb:7f:0b:04:f7:bd:a6:ca:e4:9d: d1:20:0e:bb:9f:2f:18:a5:f3:c9:6f:b8:02:20:80:4d:96:aa: d9:fd:f0:09:90:4c:98:09:00:2c:c4:27:57:e0:b3:b7:f3:0c: 57:ae:f1:66:60:cd:c6:d2:ff:e6:7b:90:6c:1d:d8:ce:75:a4: 86:8a:80:f0:b8:07:52:39:88:a3:21:ca:bb:f2:af:46:77:11: f4:ae:22:6b:f9:35:e0:a2:b6:10:d0:e8:d3:d4:5b:28:e9:67: 71:92:b1:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsU7SjKZQc0bFa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk ZjFkYWM2ZWMtY2NlYS00MDNkLWJmNWYtZjBjOTFjZDY0YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkmR4TJVkwAsIeQEe7Q9CHAtJ2XdiRUxnSrN jnYCm6M1ZBTZ5+0wyL+dCLxUq+IuUGiaoyZx3JU8IlrK4vOctWieDXi4CFI3F84m TSnQfLGUW0L0C+7X5+vmWJABXd9vKncQLyL6r3JYHsQVqdvkdFR2uHowFRO4Y2cv kRf9piNVo4CNSzuy3NHox0XDpE0wOtVcpc59C2CJ8nNYhjyT61LbvpHFLldwckIN peBySG9KVVAYlpJVhJQbbeO/imuVK15/TZ3+CinOniCgEmXhLWkLBXdrD9wKfLku oMsYlG1GHQRbwu/Kh4VRBIPBjPswqnFAe46dmkqbXorzgeOqcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4xA3OLEcPkW7sYhaxi/8GOhR2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTU5MzBlMzgtY2FmOS0z ZGFmLWI5ZjgtOTgyNmM4ZDA0YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDIKzWryfEmaI6TyS/7mb23Qx0E4sSOu1YR8uIQovxLG0US2rvHMQNa sEToupjSxutEP5dLAxmEs7FkkjvmKMNM11k45lH7Vio6ZkLzrahyyG0qCfz7qYGK KgDMaZZPfa9A0z7SdG4q6GdE/8uLh5vCbPbr7rA3OM9KcDsovchrzWEea5N2kq2G /6Hg/wSGK+ne/BuLhpeVu38LBPe9psrkndEgDrufLxil88lvuAIggE2Wqtn98AmQ TJgJACzEJ1fgs7fzDFeu8WZgzcbS/+Z7kGwd2M51pIaKgPC4B1I5iKMhyrvyr0Z3 EfSuImv5NeCithDQ6NPUWyjpZ3GSsWE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:48 2024 by rpki-client on console-ams.rpki-client.org