$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa File: a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa (raw, json) Hash identifier: NRcWpbZDoLqZKJQkHgh0q/KZVc0nzmsWGbtgWrej/UM= Subject key identifier: 22:3A:13:3A:B2:DB:6C:01:F3:6E:57:7A:FA:BE:6F:C3:1B:50:F3:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15515B62DE95CD3A23CA010 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 30155 IP address blocks: 162.245.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:15:b6:2d:e9:5c:d3:a2:3c:a0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=ba2b1b0c-2ae6-41d9-a823-a06a641d6f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:ab:16:fd:e8:3f:11:a9:1c:eb:ec:c0:60: 33:a3:df:16:e7:f5:01:2b:0c:30:39:89:a4:a7:cb: f9:d8:d7:36:06:0a:cd:11:47:48:af:69:4e:81:fd: d7:50:19:f8:ce:97:55:99:ce:b5:21:5a:dd:2a:69: 9d:35:1b:1a:1d:2e:c4:65:f0:10:44:3a:04:ef:97: 3a:ff:82:65:8d:69:c3:48:b1:1c:ce:bc:3d:dd:3f: 5e:10:2c:1c:0d:3f:0d:12:5b:58:68:89:1e:65:ee: bf:4d:4a:ac:fc:be:1a:fd:6c:78:3e:2f:1e:ed:44: 0d:4a:03:94:ed:df:e2:69:ee:f5:25:65:29:76:e0: 74:3f:06:92:ad:bd:14:c7:d0:46:3a:b7:22:72:a3: b7:85:8e:d1:5f:3c:ea:49:19:57:e8:c7:ad:1c:6e: 85:fd:ce:4c:67:8b:10:b1:77:39:b2:24:9c:ad:1d: 49:bb:fc:51:55:74:c1:79:92:51:30:a4:f0:92:3c: c7:66:65:56:05:02:f3:7c:7f:ab:e2:fb:27:70:81: 43:be:1e:65:85:d5:cb:e6:a5:0a:da:65:e5:d4:f2: 7d:97:39:9c:56:84:20:57:64:86:c1:0f:74:95:e8: ce:9a:38:23:3e:88:03:25:08:21:f5:c2:66:86:07: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3A:13:3A:B2:DB:6C:01:F3:6E:57:7A:FA:BE:6F:C3:1B:50:F3:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.245.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3b:7f:38:c0:56:9c:21:48:bb:51:6b:b8:3b:e7:65:04:8d: 35:58:70:5e:56:5c:f0:be:48:bb:c1:39:8b:cc:0e:4e:3d:38: af:33:fa:2d:03:06:62:e7:b4:6e:cf:d4:f3:68:4b:62:50:a1: 73:74:34:7a:c5:52:50:77:a5:0c:14:c2:dc:81:3b:19:40:a7: d9:c8:09:46:1d:87:6b:aa:58:e4:da:59:9c:66:15:5c:37:e7: f4:85:dd:66:71:91:79:4c:28:cb:5b:0d:b6:86:83:f5:2f:fe: 23:19:07:76:c7:b9:07:32:25:76:10:10:de:c1:87:18:e1:ae: b3:5e:b0:f1:14:be:60:ad:50:78:d2:6b:1d:de:77:2e:fd:e1: 80:c1:4b:ce:b8:35:91:c4:b5:09:97:b1:a4:3b:a7:a7:c6:e5: 36:8f:03:5e:da:b8:08:c1:a1:53:cf:67:15:22:0a:8d:c9:ed: 2d:0b:ac:1d:d8:a9:78:35:ef:bf:c1:ca:ed:46:5f:0b:6c:d4: 59:d9:c6:91:47:0b:0c:c8:47:2e:95:e9:88:ff:41:18:c3:df: 31:da:06:b1:43:2f:41:10:d9:b1:5c:00:95:95:22:37:95:d9: 8c:68:22:4d:b2:95:b3:ae:56:7e:75:8e:f3:c3:03:3d:96:7e: 4b:fc:f8:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRW2Lelc06I8oBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YmEyYjFiMGMtMmFlNi00MWQ5LWE4MjMtYTA2YTY0MWQ2ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqrFv3oPxGpHOvswGAzo98W5/UBKwwwOYmk p8v52Nc2BgrNEUdIr2lOgf3XUBn4zpdVmc61IVrdKmmdNRsaHS7EZfAQRDoE75c6 /4JljWnDSLEczrw93T9eECwcDT8NEltYaIkeZe6/TUqs/L4a/Wx4Pi8e7UQNSgOU 7d/iae71JWUpduB0PwaSrb0Ux9BGOrcicqO3hY7RXzzqSRlX6MetHG6F/c5MZ4sQ sXc5siScrR1Ju/xRVXTBeZJRMKTwkjzHZmVWBQLzfH+r4vsncIFDvh5lhdXL5qUK 2mXl1PJ9lzmcVoQgV2SGwQ90lejOmjgjPogDJQgh9cJmhgctpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI6Ezqy22wB825Xevq+b8MbUPO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTdiYTgwNDAtZGI3My0z ZjY1LThjNGUtOGQxZTk3Mjg0NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovWiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY7fzjAVpwhSLtRa7g752UEjTVYcF5WXPC+SLvBOYvMDk49OK8z+i0D BmLntG7P1PNoS2JQoXN0NHrFUlB3pQwUwtyBOxlAp9nICUYdh2uqWOTaWZxmFVw3 5/SF3WZxkXlMKMtbDbaGg/Uv/iMZB3bHuQcyJXYQEN7BhxjhrrNesPEUvmCtUHjS ax3edy794YDBS864NZHEtQmXsaQ7p6fG5TaPA17auAjBoVPPZxUiCo3J7S0LrB3Y qXg177/Byu1GXwts1FnZxpFHCwzIRy6V6Yj/QRjD3zHaBrFDL0EQ2bFcAJWVIjeV 2YxoIk2ylbOuVn51jvPDAz2Wfkv8+FQ= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:47 2024 by rpki-client on console-ams.rpki-client.org