$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a44e469c-98c2-3eee-888a-7d2cc6c330ce.roa File: a44e469c-98c2-3eee-888a-7d2cc6c330ce.roa (raw, json) Hash identifier: YrewEC0AGSyoXg+J7+3H4o2V7ZlegArlMQuqCc/UmVA= Subject key identifier: F9:13:C9:CE:28:66:0C:F9:64:80:4D:85:B6:E7:57:C1:F6:B7:9D:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550CDF75DEF1422CD32FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a44e469c-98c2-3eee-888a-7d2cc6c330ce.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.236.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0c:df:75:de:f1:42:2c:d3:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=cd1267a4-b30c-4736-a1b7-70d29b52c440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:50:d5:1e:50:fc:ac:37:59:63:34:a0:10: 78:41:c3:bd:d7:e2:7a:c1:7f:a1:cd:1d:3b:3f:70: 83:8c:4d:4a:61:86:9c:e5:a0:b5:86:6b:d7:1f:92: e1:9a:e3:08:86:ca:73:06:28:e5:8f:83:12:38:a7: dc:2f:a4:ba:88:5c:36:ea:23:a1:b6:fc:74:99:8d: e6:fe:ca:9a:8e:ca:74:79:f1:33:68:98:9b:45:3d: 84:26:39:24:16:82:c3:55:78:12:c2:5b:55:1e:25: d8:f1:f6:c4:63:65:82:7e:d1:eb:94:36:37:82:f6: 10:3d:36:cc:02:52:86:16:fc:a9:26:a2:d7:c1:85: d5:a8:fd:34:3d:d7:0a:47:81:2c:3d:c5:f6:e5:36: 73:24:af:ac:1f:6e:e0:7c:2f:0e:29:de:bc:aa:81: f2:c8:4b:40:b7:d6:f8:1d:52:56:ef:54:0c:5f:67: de:41:97:d7:ce:f0:a7:67:89:ea:37:d1:85:13:95: 53:60:bb:2e:ae:d5:a6:39:e0:ef:6a:22:81:02:c8: d0:66:49:7d:3e:fd:59:13:c8:67:eb:54:d8:12:b4: e8:a0:ff:89:e3:e7:99:cd:03:9f:3c:ae:78:b5:61: d3:02:01:da:3a:2a:de:1b:16:d1:2c:49:48:a3:95: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:13:C9:CE:28:66:0C:F9:64:80:4D:85:B6:E7:57:C1:F6:B7:9D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a44e469c-98c2-3eee-888a-7d2cc6c330ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:82:e4:a4:e7:ed:a8:e9:a9:da:db:08:c2:a8:a7:65:e6:d1: c8:49:07:cf:11:7a:b2:38:39:a8:6f:e1:0a:16:4e:0a:81:a7: 7a:9c:e6:d1:7d:dc:61:e7:f3:1c:2f:f3:1d:b9:a2:63:9c:4d: 6e:5e:6e:ea:52:b2:38:c6:49:ed:48:de:ef:6e:3e:e0:58:20: db:2f:9b:b7:74:55:9c:59:df:23:bd:87:ec:fa:dc:88:ef:ae: a0:aa:09:72:61:10:4b:4e:d3:23:b5:31:20:9d:b2:a6:38:93: 03:d7:0a:c4:7e:11:14:28:7e:65:69:f4:d3:f5:8b:cd:a4:f7: 56:50:7a:bc:aa:99:e9:24:71:22:fb:dc:40:fe:5b:59:ba:eb: dd:7c:14:26:f3:9b:06:83:6e:79:34:45:34:59:33:37:7e:a9: ad:79:40:dd:26:46:84:82:0b:97:86:d9:da:1c:f2:0c:27:67: 1c:2a:12:cd:6a:fa:14:38:3f:9a:e7:e3:bc:67:44:8d:a5:04: 79:4c:08:23:5e:4c:6b:53:0e:79:f3:dc:d7:47:fa:38:9a:2b: 5b:fc:44:04:da:fe:1f:64:f4:6c:dc:05:cc:a9:54:e9:34:89: 80:0f:85:3d:43:da:06:15:5b:89:60:ca:8f:ef:41:5f:ab:78: 0d:5a:bb:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQzfdd7xQizTL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk Y2QxMjY3YTQtYjMwYy00NzM2LWExYjctNzBkMjliNTJjNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK1Q1R5Q/Kw3WWM0oBB4QcO91+J6wX+hzR07 P3CDjE1KYYac5aC1hmvXH5LhmuMIhspzBijlj4MSOKfcL6S6iFw26iOhtvx0mY3m /sqajsp0efEzaJibRT2EJjkkFoLDVXgSwltVHiXY8fbEY2WCftHrlDY3gvYQPTbM AlKGFvypJqLXwYXVqP00PdcKR4EsPcX25TZzJK+sH27gfC8OKd68qoHyyEtAt9b4 HVJW71QMX2feQZfXzvCnZ4nqN9GFE5VTYLsurtWmOeDvaiKBAsjQZkl9Pv1ZE8hn 61TYErTooP+J4+eZzQOfPK54tWHTAgHaOireGxbRLElIo5X+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkTyc4oZgz5ZIBNhbbnV8H2t51HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQ0ZTQ2OWMtOThjMi0z ZWVlLTg4OGEtN2QyY2M2YzMzMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2OwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGC5KTn7ajpqdrbCMKop2Xm0chJB88RerI4Oahv4QoWTgqBp3qc5tF9 3GHn8xwv8x25omOcTW5ebupSsjjGSe1I3u9uPuBYINsvm7d0VZxZ3yO9h+z63Ijv rqCqCXJhEEtO0yO1MSCdsqY4kwPXCsR+ERQofmVp9NP1i82k91ZQeryqmekkcSL7 3ED+W1m66918FCbzmwaDbnk0RTRZMzd+qa15QN0mRoSCC5eG2doc8gwnZxwqEs1q +hQ4P5rn47xnRI2lBHlMCCNeTGtTDnnz3NdH+jiaK1v8RATa/h9k9GzcBcypVOk0 iYAPhT1D2gYVW4lgyo/vQV+reA1auxk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:02 2024 by rpki-client on console-ams.rpki-client.org