$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa File: 99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa (raw, json) Hash identifier: Q2jE7VkCyTpEW4DBZtE4mDjFyxyechs1L7YoPl6Eeww= Subject key identifier: 48:BE:17:3A:97:00:3E:F5:D2:58:77:C3:93:9C:E9:12:23:70:B1:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AA068A56CD271637CBD8DC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa Signing time: Sat 26 Oct 2024 01:00:31 +0000 ROA not before: Sat 26 Oct 2024 01:00:31 +0000 ROA not after: Fri 24 Jan 2025 02:00:31 +0000 asID: 27338 IP address blocks: 74.8.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:aa:06:8a:56:cd:27:16:37:cb:d8:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 01:00:31 2024 GMT Not After : Jan 24 02:00:31 2025 GMT Subject: CN=fd7dd7d1-5da0-4d5e-bb5b-435c281c2141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:41:0f:a8:7d:13:89:cf:47:80:e6:87:98: 5f:7b:4d:76:46:ab:fb:6a:ae:7e:b5:c7:0f:8a:16: e8:18:bf:b5:3e:0d:f6:23:5f:42:cc:c2:a9:95:68: e0:87:d6:21:27:bd:ad:25:ab:87:39:9d:bf:1f:ff: 86:4b:8d:98:a2:b8:1c:ce:11:14:38:26:c1:9f:e4: 54:63:14:27:3f:1f:49:e0:62:ba:1a:43:65:db:64: 48:2f:45:3d:fe:a6:38:90:24:fa:a4:6b:d3:12:85: 1d:e4:55:e1:62:c7:ba:1e:66:34:bb:0e:2c:c1:be: ad:a2:86:6a:19:e9:1c:ca:e5:74:ee:5c:a7:5d:95: e0:e5:7f:c3:1e:94:82:68:70:dc:5e:84:83:db:7e: 8e:03:60:89:fd:9c:c6:5d:54:79:85:7c:d2:9d:c5: 4a:c1:d8:e5:c3:29:b2:87:dd:1b:29:9b:61:8b:0b: dd:86:fe:05:88:5c:e6:70:c1:7a:78:f1:03:ff:b4: a1:78:7d:1c:3b:9a:50:57:68:3a:91:b1:8d:a0:b0: dc:64:18:dc:31:07:9d:cd:8e:5c:9c:ef:9f:9e:57: f3:4e:e1:fa:b3:98:55:ce:c0:64:4b:ba:76:62:a8: e3:ae:43:3a:25:77:80:6c:2d:9d:69:d0:d4:90:c1: 31:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:17:3A:97:00:3E:F5:D2:58:77:C3:93:9C:E9:12:23:70:B1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8f:ed:c8:2f:26:37:19:ce:59:fd:86:03:f5:17:59:cc:4c: 7d:3c:8a:c6:03:a6:81:08:05:0f:e3:75:91:44:fb:53:a1:cf: 80:58:c4:dd:71:4d:3f:71:7a:5b:00:68:19:ce:60:d8:92:e1: 11:93:b9:02:0f:da:1c:fe:d1:13:1e:17:8c:3f:e9:df:01:7e: 97:0e:54:71:3e:a7:90:95:2d:50:11:e1:a8:96:bc:8e:0a:58: aa:58:d4:a8:2e:06:76:04:ae:83:b9:06:b2:fb:60:64:db:89: e4:94:b6:1b:be:78:40:ab:d8:9b:15:ac:32:38:fe:e4:d9:be: 34:5a:cb:3e:60:4e:60:9a:e1:0c:3d:7f:3e:18:6e:e2:2d:b2: 87:bd:6f:9c:f4:c0:2e:aa:a9:15:be:f2:eb:f4:6d:55:b9:b3: 03:47:75:9f:9c:71:be:df:1d:89:74:55:91:25:5f:e2:21:af: be:36:42:2d:ff:83:11:85:39:a9:98:86:cc:dc:93:a7:0e:a2: f0:6f:99:81:36:8e:19:86:da:dc:6d:54:7f:ad:5f:2e:b0:fd: e4:3f:12:6e:a4:d9:99:b7:7a:2c:c2:46:21:03:5a:11:c0:e4: ba:4d:82:71:07:58:e7:51:b0:19:9e:c0:4a:b7:39:25:e8:b0: 7c:f7:7c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeqBopWzScWN8vY3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjAxMDAzMVoXDTI1MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ3ZGQ3ZDEtNWRhMC00ZDVlLWJiNWItNDM1YzI4MWMyMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMxBD6h9E4nPR4Dmh5hfe012Rqv7aq5+tccP ihboGL+1Pg32I19CzMKplWjgh9YhJ72tJauHOZ2/H/+GS42YorgczhEUOCbBn+RU YxQnPx9J4GK6GkNl22RIL0U9/qY4kCT6pGvTEoUd5FXhYse6HmY0uw4swb6tooZq GekcyuV07lynXZXg5X/DHpSCaHDcXoSD236OA2CJ/ZzGXVR5hXzSncVKwdjlwymy h90bKZthiwvdhv4FiFzmcMF6ePED/7SheH0cO5pQV2g6kbGNoLDcZBjcMQedzY5c nO+fnlfzTuH6s5hVzsBkS7p2YqjjrkM6JXeAbC2dadDUkMExjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi+FzqXAD710lh3w5Oc6RIjcLHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliYThmMGMtYWU0Yi0z OWNlLWFkN2ItMTgxMTkyNmZiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGP7cgvJjcZzln9hgP1F1nMTH08isYDpoEIBQ/jdZFE+1Ohz4BYxN1x TT9xelsAaBnOYNiS4RGTuQIP2hz+0RMeF4w/6d8BfpcOVHE+p5CVLVAR4aiWvI4K WKpY1KguBnYEroO5BrL7YGTbieSUthu+eECr2JsVrDI4/uTZvjRayz5gTmCa4Qw9 fz4YbuItsoe9b5z0wC6qqRW+8uv0bVW5swNHdZ+ccb7fHYl0VZElX+Ihr742Qi3/ gxGFOamYhszck6cOovBvmYE2jhmG2txtVH+tXy6w/eQ/Em6k2Zm3eizCRiEDWhHA 5LpNgnEHWOdRsBmewEq3OSXosHz3fOI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:30 2024 by rpki-client on console-ams.rpki-client.org