$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa File: a48c4031-9001-3dda-aefc-539842bcaa83.roa (raw, json) Hash identifier: NHfRq2RZjhCi3VwA+0PiLtUCRIjdYHFxOjHRLPC8IX8= Subject key identifier: 0A:32:FF:3B:85:0B:E5:9A:62:73:81:EF:31:71:25:C0:B8:92:A2:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15545E38D1C356160AF1C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 54120 IP address blocks: 64.206.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:45:e3:8d:1c:35:61:60:af:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=94d56942-d84b-4c7c-9d73-1de7befd5178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:67:e2:0d:5c:6c:40:52:1d:7d:39:f4:38: f0:94:d9:58:bf:a4:9c:c7:71:c3:b0:b9:f4:20:8c: 2a:8a:91:c1:91:02:89:6e:f6:95:73:26:bd:14:50: 64:71:7b:3a:6c:06:ee:7d:99:e4:1c:de:38:8e:19: 7b:f4:09:b0:43:4a:4e:04:8c:63:95:fc:85:8a:25: fd:43:ad:a2:bb:6f:96:7e:c7:18:a1:c3:67:97:f8: 28:84:aa:08:7d:4a:5a:75:2c:46:48:29:20:05:1e: 71:f1:d0:8b:42:bb:2f:86:d1:d0:7c:3b:63:13:4d: 8e:85:37:ec:9a:49:29:91:5a:06:30:75:96:68:4b: d3:c4:9a:82:63:96:73:05:43:22:09:82:d2:7b:49: 3b:78:f0:60:95:1b:63:da:17:99:96:8e:d1:c3:43: eb:33:4a:55:19:b1:ce:bd:5c:20:42:73:d4:4d:b6: 94:a1:01:d0:6c:1f:f1:9e:4d:79:75:7e:33:04:49: ba:f5:9e:31:34:28:87:8b:9f:bd:a0:88:ae:9f:8c: dc:bc:a3:03:73:c8:c3:fc:35:95:c1:77:57:9b:8a: f7:76:49:4d:04:d9:90:ce:f8:5b:1c:be:5e:b9:51: 33:cf:98:eb:80:d1:38:b6:d0:4e:fc:78:2a:22:8d: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:FF:3B:85:0B:E5:9A:62:73:81:EF:31:71:25:C0:B8:92:A2:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cb:30:68:41:23:34:68:82:90:35:9c:e3:1e:ff:52:de:b5: 6d:a6:1b:e2:f5:b3:5e:ae:1a:22:76:76:5d:6c:cc:4a:b2:3e: 1a:6d:0f:8e:3c:ea:26:47:04:7e:f8:32:78:22:b5:61:35:57: 34:19:eb:6a:29:4e:b4:6c:ca:ba:dd:a7:3c:af:15:d4:7c:45: 42:82:48:94:9b:01:c4:b3:e4:30:7f:83:5b:0e:f0:7d:34:23: 26:5d:56:cb:ea:dd:9d:6c:b2:1f:c9:00:64:0e:4c:24:b8:c8: 06:72:b1:2b:c6:9a:70:e1:01:5b:90:f7:20:5c:57:42:89:08: 49:a8:77:09:2a:90:2d:9f:3a:52:cb:90:ff:b1:93:79:18:55: 39:90:8d:d0:93:e0:f8:25:60:44:25:f9:f1:a5:74:96:65:0b: db:54:f6:f4:19:0b:d8:bb:7f:98:74:19:03:48:5f:bb:a6:39: 57:ed:f3:0c:39:f8:a6:dc:f0:f5:16:48:35:6d:74:4d:42:65: 32:b7:3d:76:2f:36:f6:d5:79:b8:11:47:e7:db:0e:db:e1:da: db:42:ad:59:9b:36:08:58:d8:07:03:07:62:3f:55:ae:43:7a: e8:4b:5d:8b:c7:d4:43:3e:9f:9f:65:b3:59:da:f4:c4:92:d8: 3c:8e:4d:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUXjjRw1YWCvHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTRkNTY5NDItZDg0Yi00YzdjLTlkNzMtMWRlN2JlZmQ1MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRJn4g1cbEBSHX059DjwlNlYv6Scx3HDsLn0 IIwqipHBkQKJbvaVcya9FFBkcXs6bAbufZnkHN44jhl79AmwQ0pOBIxjlfyFiiX9 Q62iu2+WfscYocNnl/gohKoIfUpadSxGSCkgBR5x8dCLQrsvhtHQfDtjE02OhTfs mkkpkVoGMHWWaEvTxJqCY5ZzBUMiCYLSe0k7ePBglRtj2heZlo7Rw0PrM0pVGbHO vVwgQnPUTbaUoQHQbB/xnk15dX4zBEm69Z4xNCiHi5+9oIiun4zcvKMDc8jD/DWV wXdXm4r3dklNBNmQzvhbHL5euVEzz5jrgNE4ttBO/HgqIo2A/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoy/zuFC+WaYnOB7zFxJcC4kqLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQ4YzQwMzEtOTAwMS0z ZGRhLWFlZmMtNTM5ODQyYmNhYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHLMGhBIzRogpA1nOMe/1LetW2mG+L1s16uGiJ2dl1szEqyPhptD448 6iZHBH74MngitWE1VzQZ62opTrRsyrrdpzyvFdR8RUKCSJSbAcSz5DB/g1sO8H00 IyZdVsvq3Z1ssh/JAGQOTCS4yAZysSvGmnDhAVuQ9yBcV0KJCEmodwkqkC2fOlLL kP+xk3kYVTmQjdCT4PglYEQl+fGldJZlC9tU9vQZC9i7f5h0GQNIX7umOVft8ww5 +Kbc8PUWSDVtdE1CZTK3PXYvNvbVebgRR+fbDtvh2ttCrVmbNghY2AcDB2I/Va5D euhLXYvH1EM+n59ls1na9MSS2DyOTRk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:33 2024 by rpki-client on console-ams.rpki-client.org