$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa File: 95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa (raw, json) Hash identifier: 1ZA1UzC7j2S0EezO5U+lOZPU8VTsnGru+G9IrA5jUH4= Subject key identifier: 0F:2E:39:6A:4D:A0:D1:DE:38:CA:12:66:44:36:27:EC:C2:71:82:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6BFE4C5C8ADE546C10CFCC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 151.213.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6b:fe:4c:5c:8a:de:54:6c:10:cf:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=fb5de1db-6927-400f-8e29-3ea3d46573f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:9d:a3:8f:4a:81:b6:8c:6f:b9:7d:ef:50: 25:7e:b6:94:cf:33:2c:27:36:cf:be:36:ec:42:03: 6e:6a:54:3e:2f:80:e0:04:39:36:d3:0f:29:e6:dc: 6b:50:20:e2:7c:ad:56:85:fa:a7:c9:81:d5:25:59: f7:aa:cc:2f:bc:84:a3:a1:ce:e7:43:be:3d:4e:b8: a4:08:c9:d4:48:30:bb:7e:ef:b9:c6:1a:ee:86:cd: b5:4c:c2:fc:c5:0a:8a:68:43:0d:ec:2f:e8:24:6d: 1e:89:98:73:4b:07:eb:19:e5:ed:63:ee:22:8b:02: fa:2c:a6:6f:5f:1d:41:68:2f:a4:2a:b5:03:19:95: be:88:a2:50:c1:f4:71:51:ca:f0:36:e5:cc:8d:c3: 83:7f:fc:86:82:f9:4d:fa:ca:bb:f8:6d:cb:e1:54: 8d:a8:2c:0b:f5:85:f7:be:02:06:f7:bf:25:b4:4f: 20:40:21:f5:a9:d9:b3:da:15:59:02:27:ac:41:62: ee:4f:bc:8a:94:cf:4f:2e:24:b5:57:d5:eb:9a:a2: 46:19:7e:80:49:8c:32:76:a8:6d:5f:15:cc:7a:dc: 5c:dd:5b:90:10:45:e8:c8:c9:b7:e0:a3:0f:b4:a4: b2:64:77:7d:4c:0f:cf:68:3f:22:d5:09:55:81:f5: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2E:39:6A:4D:A0:D1:DE:38:CA:12:66:44:36:27:EC:C2:71:82:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95fef00c-c6a3-31a7-b760-ac5bb469f8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f6:10:80:de:8d:1c:da:11:9c:57:86:41:f6:12:d6:14:68: 30:ff:04:e1:c8:1c:b5:da:ac:70:f3:2f:97:7a:32:44:7d:47: c5:4b:0a:c3:5c:9b:68:de:0f:f0:00:ac:c5:75:cf:04:98:53: 15:a0:40:8d:14:b5:b1:57:27:5f:5e:1a:3b:c5:81:bb:c3:fd: 66:99:79:fa:b1:00:05:76:ed:a8:04:69:be:a5:69:db:18:df: 2c:36:43:a4:a6:06:c2:e1:0b:ab:e9:62:76:64:09:dd:b5:fb: 8f:15:dd:82:17:98:e1:54:68:e3:a6:ec:5d:36:0d:11:ed:67: 21:27:b8:ce:eb:e0:99:8b:d7:a2:2c:8f:17:4b:1b:42:74:e7: e3:9c:fe:29:4b:89:96:f7:c6:7c:2c:44:bd:4f:94:aa:52:39: bd:ec:c2:20:2b:d3:df:20:a5:9b:e9:ff:1c:7a:85:bd:b2:49: 33:36:34:eb:8b:19:06:0e:b5:d7:12:c5:9e:82:c5:00:18:31: 5a:70:b4:74:6d:56:75:3f:7b:d5:c9:a7:58:31:cf:25:1a:27: 7c:8b:55:c7:5e:d4:92:d4:99:f0:6a:90:4f:2c:e2:76:cb:aa: 2c:79:bb:16:ff:89:ab:11:75:d4:06:14:c3:a4:60:b6:25:fe: 9e:0e:14:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEera/5MXIreVGwQz8wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk ZmI1ZGUxZGItNjkyNy00MDBmLThlMjktM2VhM2Q0NjU3M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliOdo49KgbaMb7l971AlfraUzzMsJzbPvjbs QgNualQ+L4DgBDk20w8p5txrUCDifK1WhfqnyYHVJVn3qswvvISjoc7nQ749Trik CMnUSDC7fu+5xhruhs21TML8xQqKaEMN7C/oJG0eiZhzSwfrGeXtY+4iiwL6LKZv Xx1BaC+kKrUDGZW+iKJQwfRxUcrwNuXMjcODf/yGgvlN+sq7+G3L4VSNqCwL9YX3 vgIG978ltE8gQCH1qdmz2hVZAiesQWLuT7yKlM9PLiS1V9XrmqJGGX6ASYwydqht XxXMetxc3VuQEEXoyMm34KMPtKSyZHd9TA/PaD8i1QlVgfUbRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8uOWpNoNHeOMoSZkQ2J+zCcYIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVmZWYwMGMtYzZhMy0z MWE3LWI3NjAtYWM1YmI0NjlmOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI72EIDejRzaEZxXhkH2EtYUaDD/BOHIHLXarHDzL5d6MkR9R8VLCsNc m2jeD/AArMV1zwSYUxWgQI0UtbFXJ19eGjvFgbvD/WaZefqxAAV27agEab6ladsY 3yw2Q6SmBsLhC6vpYnZkCd21+48V3YIXmOFUaOOm7F02DRHtZyEnuM7r4JmL16Is jxdLG0J05+Oc/ilLiZb3xnwsRL1PlKpSOb3swiAr098gpZvp/xx6hb2ySTM2NOuL GQYOtdcSxZ6CxQAYMVpwtHRtVnU/e9XJp1gxzyUaJ3yLVcde1JLUmfBqkE8s4nbL qix5uxb/iasRddQGFMOkYLYl/p4OFEA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:59 2024 by rpki-client on console-ams.rpki-client.org