$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace85b09-a012-38de-a412-cd157390cbfd.roa File: ace85b09-a012-38de-a412-cd157390cbfd.roa (raw, json) Hash identifier: IVbMrWtQK35UsyqYyg6jOYfxWyb+ryIVX5rQNYSb3iE= Subject key identifier: A0:36:9A:F0:FF:62:26:97:35:C4:ED:A9:16:B9:7C:5B:5F:D4:DE:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6C000DCA78689F555EAA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace85b09-a012-38de-a412-cd157390cbfd.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 166.82.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:00:0d:ca:78:68:9f:55:5e:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=e88fc5e1-500d-4751-bbed-029868a3c6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:2c:3b:95:7e:ff:bc:71:2e:de:90:71:70: 5a:d8:24:68:ab:e3:b4:c1:a5:c5:60:a3:f3:2a:69: b8:a7:70:f5:63:a0:ac:9a:74:92:41:cd:68:b5:2c: 23:e9:fa:87:4a:e4:8c:58:fe:d3:9f:bb:3f:57:ec: ea:87:6d:b5:34:07:b7:b8:74:c9:22:1d:00:04:fd: 3a:60:49:24:fc:7c:ef:d6:39:49:75:ba:0e:19:7e: d9:ce:4a:33:67:39:55:95:ff:c2:f6:0f:65:b1:61: b3:53:95:43:1f:a8:bc:c1:ad:b0:c9:06:20:21:8f: 27:f0:fe:97:3f:6a:90:d4:63:7b:b3:e5:ce:c2:47: 5c:84:d6:4b:5e:f4:a5:8e:8b:76:b6:81:b8:29:8c: 83:dd:b4:e7:74:b1:17:91:8e:c5:54:17:e8:b2:55: 61:ac:c9:d4:d1:d6:06:a4:50:f6:40:d7:f9:b3:60: 0c:f8:b0:e0:7d:1d:e7:a0:c2:33:71:02:33:7b:8a: 2a:31:ae:93:73:18:8b:bd:bf:90:1e:1c:4b:9f:96: 9c:80:40:43:ef:13:39:02:e3:53:f2:c4:f4:6c:ae: 86:7f:9d:29:5a:06:ab:43:04:41:3a:4a:97:d0:9e: f9:fc:a1:56:47:50:56:02:f3:9a:09:d5:f9:63:73: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:36:9A:F0:FF:62:26:97:35:C4:ED:A9:16:B9:7C:5B:5F:D4:DE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ace85b09-a012-38de-a412-cd157390cbfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c5:8f:f4:d4:83:dc:38:f6:b4:b8:b5:a5:26:ac:1c:14:10: 4d:02:2a:f9:fb:44:90:82:52:8f:0a:5b:90:dc:17:98:00:32: 5d:e3:70:31:80:47:c5:b6:aa:21:62:c3:81:1c:b6:59:fd:d7: 5c:1b:bc:c4:e8:ab:ee:61:00:99:a3:cb:3a:2d:75:61:ed:9b: 10:bd:44:e5:d6:1e:e1:cb:21:1d:1e:2b:d1:2e:ef:c1:0f:5a: 40:af:62:71:e8:d0:1a:21:36:03:2f:94:7f:a7:a6:dc:22:35: ad:91:b8:af:ac:5e:54:74:9a:af:b0:1e:aa:ef:b4:97:9f:13: 2b:27:b5:ba:7e:9b:ae:2d:9e:79:c8:96:90:4b:2b:7f:1e:1a: 57:af:c2:e7:e0:27:ef:0f:6a:31:1b:96:9d:90:3b:df:68:83: 3f:05:81:a8:05:70:be:0e:1d:2c:f3:e4:0e:1b:0c:e2:6e:91: 01:29:44:e3:c8:7e:eb:9f:7e:50:1b:27:19:6b:9c:5c:49:35: 26:ce:53:ba:89:4c:5a:b5:3a:86:4f:b4:60:3c:7b:4d:d9:65: 1d:13:ad:9b:0f:08:f0:7c:1a:2f:e9:29:e5:60:01:5d:6e:03: 4d:d9:27:76:38:3b:7d:d3:d4:2e:3c:e3:c9:a5:aa:42:83:64: 82:2e:8f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbAANynhon1VeqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk ZTg4ZmM1ZTEtNTAwZC00NzUxLWJiZWQtMDI5ODY4YTNjNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJwsO5V+/7xxLt6QcXBa2CRoq+O0waXFYKPz Kmm4p3D1Y6CsmnSSQc1otSwj6fqHSuSMWP7Tn7s/V+zqh221NAe3uHTJIh0ABP06 YEkk/Hzv1jlJdboOGX7ZzkozZzlVlf/C9g9lsWGzU5VDH6i8wa2wyQYgIY8n8P6X P2qQ1GN7s+XOwkdchNZLXvSljot2toG4KYyD3bTndLEXkY7FVBfoslVhrMnU0dYG pFD2QNf5s2AM+LDgfR3noMIzcQIze4oqMa6TcxiLvb+QHhxLn5acgEBD7xM5AuNT 8sT0bK6Gf50pWgarQwRBOkqX0J75/KFWR1BWAvOaCdX5Y3OWgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA2mvD/YiaXNcTtqRa5fFtf1N6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNlODViMDktYTAxMi0z OGRlLWE0MTItY2QxNTczOTBjYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjFj/TUg9w49rS4taUmrBwUEE0CKvn7RJCCUo8KW5DcF5gAMl3jcDGA R8W2qiFiw4Ectln911wbvMToq+5hAJmjyzotdWHtmxC9ROXWHuHLIR0eK9Eu78EP WkCvYnHo0BohNgMvlH+nptwiNa2RuK+sXlR0mq+wHqrvtJefEysntbp+m64tnnnI lpBLK38eGlevwufgJ+8PajEblp2QO99ogz8FgagFcL4OHSzz5A4bDOJukQEpROPI fuufflAbJxlrnFxJNSbOU7qJTFq1OoZPtGA8e03ZZR0TrZsPCPB8Gi/pKeVgAV1u A03ZJ3Y4O33T1C4848mlqkKDZIIuj7w= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:04 2024 by rpki-client on console-ams.rpki-client.org