$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a79bad07-00e0-372e-92b3-9084ab0979d5.roa File: a79bad07-00e0-372e-92b3-9084ab0979d5.roa (raw, json) Hash identifier: XQCAXt8J8vTGshuEEDD3jDEvsHmOhfXG+02OatzJHnI= Subject key identifier: B1:91:8E:7B:47:E5:CC:B8:E8:C4:F5:2F:F8:14:9D:7E:D2:E3:8E:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15518BE7B4F75E23D32F940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a79bad07-00e0-372e-92b3-9084ab0979d5.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 54704 IP address blocks: 207.170.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:18:be:7b:4f:75:e2:3d:32:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=89a9aeac-3d38-457a-b867-fda75b76075e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4c:da:4a:89:04:ce:3b:9d:f1:31:54:a8:99: bc:0f:84:f3:3f:4e:bc:90:56:82:67:64:a7:68:23: 53:a3:68:63:55:59:94:c6:f1:58:55:5a:35:00:c4: 3b:12:a1:86:dc:2f:65:a3:22:c9:a3:a8:38:d2:ca: 0c:6a:95:a6:37:42:02:0a:2a:11:c3:17:78:23:ed: 4f:86:5d:93:44:c7:bd:01:09:47:43:4c:2e:59:0c: b8:32:73:32:f4:65:a1:f1:0f:be:91:9c:58:f5:bf: 6c:a2:6c:eb:a5:46:10:18:0d:b4:2d:80:e1:bd:5d: 79:6c:b8:d4:2c:88:46:90:4b:cc:a0:18:ba:16:14: c9:7b:87:c7:a2:ee:6b:d4:4f:79:b0:1d:75:dd:7b: 44:ee:f5:dc:cd:be:27:05:f6:43:11:fc:b2:72:06: ef:80:e7:0b:95:0e:db:a3:ec:87:01:76:50:80:3b: f8:3d:30:24:a2:45:a6:2b:a0:d1:14:f8:bf:56:0c: b9:13:70:01:3d:88:70:f1:1e:c3:8c:45:25:c0:a0: 7d:4e:d6:01:aa:ec:19:a5:86:11:67:05:32:94:bb: 89:97:9e:c9:16:d4:51:20:87:c6:25:de:96:eb:81: 3b:c9:d0:31:8c:81:7d:67:ca:9e:fb:df:38:81:19: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:91:8E:7B:47:E5:CC:B8:E8:C4:F5:2F:F8:14:9D:7E:D2:E3:8E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a79bad07-00e0-372e-92b3-9084ab0979d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.170.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f3:13:fa:25:ea:be:42:2c:61:68:f0:d3:32:29:d9:f1:84: 6b:9a:d8:9f:fd:17:e2:53:47:e6:fa:83:c4:68:09:48:39:84: 9f:64:61:73:e3:e2:5c:fc:eb:06:b0:ce:6a:67:04:0e:d0:dc: b4:dd:65:d5:c0:3d:db:17:98:b7:d4:ce:9f:a5:30:dd:59:c2: 63:2e:30:1f:d2:31:b3:ec:60:55:5c:22:b4:6e:35:ef:6e:56: 40:19:71:b5:bf:40:b3:77:16:1e:1b:db:63:4e:ed:58:bc:f8: 8d:db:49:c4:5e:dc:1a:cf:e4:4c:db:21:28:cc:b2:96:63:41: b2:2e:64:f2:c0:2c:69:5a:64:8d:74:80:65:4d:bc:13:40:72: cb:a7:24:3f:7f:cc:26:39:dd:b2:c7:a8:2d:2c:bc:28:04:79: db:84:66:cf:54:05:3d:6c:55:9d:1c:72:c0:91:e7:e1:55:f8: 4c:ff:f1:74:20:13:89:12:a8:c8:d5:12:d0:04:38:08:0e:f6: df:86:48:d5:f6:dc:19:53:57:98:8f:d3:2a:a4:da:98:fc:98: 80:29:3e:2a:d1:20:e2:c8:17:2b:39:a0:b4:45:5b:61:bb:87: 04:f9:08:c7:cf:28:35:c0:6e:26:3d:90:d9:e2:77:05:bc:08: 92:e7:cc:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRi+e0914j0y+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODlhOWFlYWMtM2QzOC00NTdhLWI4NjctZmRhNzViNzYwNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEzaSokEzjud8TFUqJm8D4TzP068kFaCZ2Sn aCNTo2hjVVmUxvFYVVo1AMQ7EqGG3C9loyLJo6g40soMapWmN0ICCioRwxd4I+1P hl2TRMe9AQlHQ0wuWQy4MnMy9GWh8Q++kZxY9b9somzrpUYQGA20LYDhvV15bLjU LIhGkEvMoBi6FhTJe4fHou5r1E95sB113XtE7vXczb4nBfZDEfyycgbvgOcLlQ7b o+yHAXZQgDv4PTAkokWmK6DRFPi/Vgy5E3ABPYhw8R7DjEUlwKB9TtYBquwZpYYR ZwUylLuJl57JFtRRIIfGJd6W64E7ydAxjIF9Z8qe+984gRnL/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGRjntH5cy46MT1L/gUnX7S445IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc5YmFkMDctMDBlMC0z NzJlLTkyYjMtOTA4NGFiMDk3OWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6oSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALzE/ol6r5CLGFo8NMyKdnxhGua2J/9F+JTR+b6g8RoCUg5hJ9kYXPj 4lz86wawzmpnBA7Q3LTdZdXAPdsXmLfUzp+lMN1ZwmMuMB/SMbPsYFVcIrRuNe9u VkAZcbW/QLN3Fh4b22NO7Vi8+I3bScRe3BrP5EzbISjMspZjQbIuZPLALGlaZI10 gGVNvBNAcsunJD9/zCY53bLHqC0svCgEeduEZs9UBT1sVZ0ccsCR5+FV+Ez/8XQg E4kSqMjVEtAEOAgO9t+GSNX23BlTV5iP0yqk2pj8mIApPirRIOLIFys5oLRFW2G7 hwT5CMfPKDXAbiY9kNnidwW8CJLnzII= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:34 2024 by rpki-client on console-ams.rpki-client.org