$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b33780e5-e153-3634-b935-b042d6daf97c.roa File: b33780e5-e153-3634-b935-b042d6daf97c.roa (raw, json) Hash identifier: tMwNWsCowIuNTAB042KqYvVg79vhqXWf6FGrjKyiycE= Subject key identifier: A7:71:D4:59:57:A4:E1:0B:CB:48:EF:11:92:BC:80:44:D4:D2:10:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155461089C6A4F1C8012EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b33780e5-e153-3634-b935-b042d6daf97c.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 54966 IP address blocks: 64.206.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:46:10:89:c6:a4:f1:c8:01:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=e0f63cb2-1358-49cd-9b49-a3a2261dbdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:59:81:a9:e8:8c:31:8c:41:26:17:d6:60: f9:f7:1c:dd:c1:ef:a4:bc:df:39:66:98:a3:99:e2: 23:c0:9b:4d:5c:a4:da:87:7e:77:61:6b:c8:96:db: e0:49:8b:7d:d0:f3:2b:2b:22:ad:56:f5:88:8f:04: 2f:eb:fc:bc:7a:d6:db:9e:6e:6d:c0:a0:fa:a2:e3: cf:32:39:1c:98:a5:ca:93:e1:20:cd:60:ff:a3:93: 2e:70:35:7e:2d:32:d3:26:e8:fe:58:71:bf:41:21: 46:1c:dd:81:bb:67:fb:f8:aa:ca:07:7f:5f:71:1d: 92:12:d1:4e:11:cd:06:37:c8:1b:41:6e:32:f4:1e: 6a:48:71:84:fe:e7:60:31:bb:9b:b9:a6:b4:d8:95: 24:33:ca:a8:e4:a8:c5:4f:92:9b:6f:f4:a2:ec:a2: ce:22:38:c7:ca:d4:ff:bd:60:67:1d:c1:8e:1d:1a: f8:13:46:d8:98:fa:6d:43:5b:9a:8f:57:9e:a2:d4: e8:f6:d1:75:3e:f0:2a:de:68:8f:a0:0b:26:98:65: 4f:24:00:dd:9d:26:f0:fc:f8:be:71:2e:79:cb:11: 78:c7:8d:0c:7f:5f:18:f7:08:58:83:da:50:39:31: 0e:be:3f:34:a2:82:81:1e:d9:07:40:48:2a:42:2b: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:71:D4:59:57:A4:E1:0B:CB:48:EF:11:92:BC:80:44:D4:D2:10:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b33780e5-e153-3634-b935-b042d6daf97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:09:be:71:87:1d:16:42:ff:ae:08:0c:05:84:1a:e6:27:96: d6:12:14:d3:43:08:ae:32:ad:36:53:38:fc:42:74:a4:a9:19: f7:16:38:de:2f:46:d3:b1:79:a4:a1:97:90:74:c4:7b:99:5f: ff:30:f5:87:8b:8c:15:7b:2d:9c:4a:74:4b:26:d5:23:df:18: a0:96:d4:ef:1f:a0:07:b7:27:7f:ca:87:54:fc:cd:f3:a3:34: 92:55:3d:a5:6d:85:86:c5:5c:27:fb:0c:6e:6c:e2:62:59:2b: a9:35:16:90:69:7e:2d:0c:73:f5:e7:9b:c3:3f:50:55:a5:2a: 4b:66:6c:a0:3d:56:17:42:8d:05:d8:b6:8d:65:1f:7b:6d:e6: 81:ec:42:9d:a5:3f:63:d8:ea:6a:21:10:f2:57:99:00:c1:d2: f1:e6:1f:1c:1f:f3:74:66:73:49:92:0e:c6:6e:45:71:f1:e5: a7:5a:b7:06:48:b5:94:0c:e2:07:c8:08:c9:2c:de:68:cc:fb: 97:1c:1d:45:18:d1:b6:c0:6a:af:77:55:ff:fa:7e:9f:c4:68: 41:12:77:ae:10:e1:7a:3b:06:78:24:70:8b:04:06:e0:97:af: 25:e3:e2:8d:3f:c9:e7:01:40:86:35:a1:9e:84:bd:ac:99:c5: 47:21:64:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUYQicak8cgBLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZTBmNjNjYjItMTM1OC00OWNkLTliNDktYTNhMjI2MWRiZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxVZganojDGMQSYX1mD59xzdwe+kvN85Zpij meIjwJtNXKTah353YWvIltvgSYt90PMrKyKtVvWIjwQv6/y8etbbnm5twKD6ouPP MjkcmKXKk+EgzWD/o5MucDV+LTLTJuj+WHG/QSFGHN2Bu2f7+KrKB39fcR2SEtFO Ec0GN8gbQW4y9B5qSHGE/udgMbubuaa02JUkM8qo5KjFT5Kbb/Si7KLOIjjHytT/ vWBnHcGOHRr4E0bYmPptQ1uaj1eeotTo9tF1PvAq3miPoAsmmGVPJADdnSbw/Pi+ cS55yxF4x40Mf18Y9whYg9pQOTEOvj80ooKBHtkHQEgqQiuG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdx1FlXpOELy0jvEZK8gETU0hCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjMzNzgwZTUtZTE1My0z NjM0LWI5MzUtYjA0MmQ2ZGFmOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAJvnGHHRZC/64IDAWEGuYnltYSFNNDCK4yrTZTOPxCdKSpGfcWON4v RtOxeaShl5B0xHuZX/8w9YeLjBV7LZxKdEsm1SPfGKCW1O8foAe3J3/Kh1T8zfOj NJJVPaVthYbFXCf7DG5s4mJZK6k1FpBpfi0Mc/Xnm8M/UFWlKktmbKA9VhdCjQXY to1lH3tt5oHsQp2lP2PY6mohEPJXmQDB0vHmHxwf83Rmc0mSDsZuRXHx5adatwZI tZQM4gfICMks3mjM+5ccHUUY0bbAaq93Vf/6fp/EaEESd64Q4Xo7BngkcIsEBuCX ryXj4o0/yecBQIY1oZ6EvayZxUchZE8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:40 2024 by rpki-client on console-ams.rpki-client.org