$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa File: a4d7ea20-7764-3514-bd6b-25b304f423e7.roa (raw, json) Hash identifier: nW55i445wG5FEWpX86Vd/MWQ3NCFDboVJEUT0Lms+N8= Subject key identifier: 47:73:93:FC:A0:37:ED:CF:68:A8:D4:B2:80:B6:AE:4E:AB:2D:DF:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155403B09227320010131C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7896 IP address blocks: 40.135.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:40:3b:09:22:73:20:01:01:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=501e6c72-423d-42ae-b192-47a2a2dfc1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:b7:cf:4e:3d:75:59:23:41:35:e4:67:41: 11:ce:22:a8:a8:75:25:a7:49:d9:f4:5e:80:be:f4: f4:9a:44:b2:39:06:1a:6b:cc:a2:d5:53:cc:0d:cb: d5:0c:4f:33:b0:dc:a7:86:e4:b9:42:fa:e2:76:90: 9c:9a:ef:b9:93:3d:88:88:c1:c0:43:78:f9:cf:08: a9:f3:a1:3d:09:6a:95:38:ba:d4:c9:9b:33:a8:77: fa:99:54:4a:e2:ec:b3:11:9a:9a:b5:05:86:03:74: 4b:ec:33:74:75:ce:5c:ef:44:38:5a:30:67:4b:f4: c8:b9:53:6a:4b:4b:a9:b7:57:9f:77:7c:c8:a1:38: cd:35:16:e8:d3:4a:46:d0:c4:bc:e7:f4:af:e9:1f: 21:e8:2c:8b:d4:a6:63:09:58:0e:03:8a:1d:34:d8: 31:15:e2:6d:82:52:0b:0b:10:ce:1b:66:b4:e8:77: 4f:48:6c:07:45:2d:00:12:0f:16:b1:f1:af:a2:f1: f7:6e:fc:b6:74:d9:71:15:c5:87:27:2e:1b:a0:06: 49:1a:50:14:9a:ca:49:8e:22:fc:33:86:6e:b6:c0: 2d:4c:7c:7c:9c:27:6b:7f:e5:00:42:18:23:f5:03: 3f:d7:3c:d3:2f:93:3b:85:04:92:fc:58:86:f6:85: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:93:FC:A0:37:ED:CF:68:A8:D4:B2:80:B6:AE:4E:AB:2D:DF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.135.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c1:16:ad:64:88:19:bd:a4:1e:06:5c:1c:c5:c7:f0:6f:7e: 3f:c3:a8:5e:4d:e9:51:e3:82:e2:1e:c5:07:91:56:e1:cc:ea: 18:4b:83:e2:21:ec:17:d6:0b:d9:bf:4f:02:e7:8d:f5:15:ed: ee:c7:f7:01:70:f9:9d:53:12:c4:48:a1:45:6d:ca:ef:1f:8b: fb:da:85:9a:75:0b:2a:d9:ed:48:3b:2c:d4:be:41:e5:99:5b: f5:ba:f3:1b:10:6f:2f:5f:55:ab:65:fd:ea:f9:42:d2:07:d1: fa:88:44:38:64:f7:e8:51:6f:8d:25:87:e7:d4:cc:75:f4:40: b1:dc:f5:d7:cc:97:62:2e:34:ec:84:26:ba:c4:f4:eb:7a:92: 9c:93:47:29:e4:ea:5e:23:dd:24:0e:f7:59:d5:5e:57:54:4f: c9:64:46:4a:a3:fa:ee:0c:7c:32:86:4e:ec:eb:ad:ad:23:5f: 6b:79:0b:33:7d:6a:29:90:17:38:dd:fb:77:ab:a0:07:79:24: 35:3a:47:ad:b0:db:7d:99:1f:69:f7:ad:0b:6c:c7:4f:7b:a4: 0d:c4:1b:46:5f:7e:31:19:08:c8:bb:c1:00:d5:86:e3:4b:b3: 62:b8:3f:5c:64:80:1b:4d:cc:38:8d:38:26:ce:60:cb:bb:8a: 25:5d:d7:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUA7CSJzIAEBMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NTAxZTZjNzItNDIzZC00MmFlLWIxOTItNDdhMmEyZGZjMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4q3z049dVkjQTXkZ0ERziKoqHUlp0nZ9F6A vvT0mkSyOQYaa8yi1VPMDcvVDE8zsNynhuS5QvridpCcmu+5kz2IiMHAQ3j5zwip 86E9CWqVOLrUyZszqHf6mVRK4uyzEZqatQWGA3RL7DN0dc5c70Q4WjBnS/TIuVNq S0upt1efd3zIoTjNNRbo00pG0MS85/Sv6R8h6CyL1KZjCVgOA4odNNgxFeJtglIL CxDOG2a06HdPSGwHRS0AEg8WsfGvovH3bvy2dNlxFcWHJy4boAZJGlAUmspJjiL8 M4ZutsAtTHx8nCdrf+UAQhgj9QM/1zzTL5M7hQSS/FiG9oXTAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdzk/ygN+3PaKjUsoC2rk6rLd+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRkN2VhMjAtNzc2NC0z NTE0LWJkNmItMjViMzA0ZjQyM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzBFq1kiBm9pB4GXBzFx/Bvfj/DqF5N6VHjguIexQeRVuHM6hhLg+Ih 7BfWC9m/TwLnjfUV7e7H9wFw+Z1TEsRIoUVtyu8fi/vahZp1CyrZ7Ug7LNS+QeWZ W/W68xsQby9fVatl/er5QtIH0fqIRDhk9+hRb40lh+fUzHX0QLHc9dfMl2IuNOyE JrrE9Ot6kpyTRynk6l4j3SQO91nVXldUT8lkRkqj+u4MfDKGTuzrra0jX2t5CzN9 aimQFzjd+3eroAd5JDU6R62w232ZH2n3rQtsx097pA3EG0ZffjEZCMi7wQDVhuNL s2K4P1xkgBtNzDiNOCbOYMu7iiVd15g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:33 2024 by rpki-client on console-ams.rpki-client.org