$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa File: b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa (raw, json) Hash identifier: 2d2r0JdBDmk4ncSckZ2eqwIOJnSxWEci/QcjSW68zGo= Subject key identifier: AB:FC:40:B9:8C:B9:CD:E9:9F:AD:BF:0D:4D:C6:27:20:B8:E3:7A:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551204CB53F81240CA8D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 14455 IP address blocks: 67.151.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:12:04:cb:53:f8:12:40:ca:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0511f515-035f-47c8-b9a4-ae10f8244610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f3:75:d9:c2:4d:6b:0a:e3:73:49:75:59:c9: 52:b5:9b:d6:80:f4:50:51:fb:8e:7a:4e:eb:8d:c4: 93:40:26:bb:c4:3c:8d:c0:da:ca:49:11:e4:3b:33: 04:cd:a1:50:ae:ad:a5:bb:9b:16:d1:6c:47:43:64: 3e:93:1d:82:14:6e:b9:c4:d9:90:63:1c:3f:e1:4f: e2:3c:80:17:7f:9b:c8:9b:ac:aa:55:17:66:d8:c0: f8:a5:65:ed:74:0a:c6:56:a2:25:d4:ac:a6:e4:86: 5f:55:f1:a7:08:90:b8:b0:32:de:57:9c:68:b3:5a: 66:ad:dc:a7:a0:af:62:25:50:9a:20:f6:cc:d3:e6: af:5b:4f:42:d1:6f:b8:aa:1b:2b:83:a7:5e:79:0e: 24:9e:0a:19:c4:30:e1:a5:c1:6a:5d:fb:fe:a5:ff: 6d:7d:fb:bf:72:93:c1:6c:87:27:ce:08:d7:28:93: db:8e:46:97:07:cd:a0:c2:65:a2:5b:3b:23:7e:1d: 1b:6f:3d:f3:a1:18:34:66:a7:49:31:0d:c1:81:5d: fa:32:09:5e:b4:e9:4d:0a:f2:70:3a:3b:3d:1a:c8: 81:38:d4:55:83:84:c3:24:f1:e5:75:6b:2e:28:56: 21:13:f8:c5:8a:2b:00:10:4d:7c:3c:b2:6d:6a:3a: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FC:40:B9:8C:B9:CD:E9:9F:AD:BF:0D:4D:C6:27:20:B8:E3:7A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:85:5e:42:a5:59:ff:14:e1:78:9e:83:7c:5f:76:e9:80:01: 65:fe:44:b8:a6:13:b0:45:f0:d6:e4:4f:e7:65:29:73:54:29: 69:5f:ae:f4:f3:f8:12:b7:89:55:b6:ac:f1:a8:98:2d:ba:26: 88:b5:7b:ce:63:b3:d7:03:f4:0a:e4:2f:62:7e:8b:9a:0f:6a: 0f:a9:11:81:c4:50:74:76:54:03:3f:dc:91:de:dd:cc:2d:6e: a3:22:71:10:44:dd:aa:be:bc:5f:f2:87:de:5b:b1:6c:7c:79: 3c:0c:f1:7d:39:0f:e1:25:f0:40:fd:e5:fe:31:c9:a0:f5:18: a8:d4:29:5e:df:26:dc:49:ff:6a:a2:02:80:01:49:36:73:35: d5:39:c3:81:61:bc:f2:c5:b5:c9:9e:87:af:87:b9:60:ed:45: 26:3b:97:f2:b0:d0:cd:3e:18:b5:dc:1c:6e:c2:31:f9:fd:6e: 14:01:22:3a:36:c1:57:57:d5:8f:af:2e:2f:06:c6:b2:58:82: 2c:b6:a5:36:85:b1:7d:e6:f2:fd:65:20:06:f5:5a:50:8f:9f: ed:c3:1c:7f:14:08:c1:24:fb:2f:c7:2e:d5:8b:11:96:15:df: 8c:a0:25:68:7b:8c:70:46:1b:8d:a4:ea:66:6e:da:4d:cc:7d: 6b:f0:89:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRIEy1P4EkDKjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MDUxMWY1MTUtMDM1Zi00N2M4LWI5YTQtYWUxMGY4MjQ0NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PN12cJNawrjc0l1WclStZvWgPRQUfuOek7r jcSTQCa7xDyNwNrKSRHkOzMEzaFQrq2lu5sW0WxHQ2Q+kx2CFG65xNmQYxw/4U/i PIAXf5vIm6yqVRdm2MD4pWXtdArGVqIl1Kym5IZfVfGnCJC4sDLeV5xos1pmrdyn oK9iJVCaIPbM0+avW09C0W+4qhsrg6deeQ4kngoZxDDhpcFqXfv+pf9tffu/cpPB bIcnzgjXKJPbjkaXB82gwmWiWzsjfh0bbz3zoRg0ZqdJMQ3BgV36MgletOlNCvJw Ojs9GsiBONRVg4TDJPHldWsuKFYhE/jFiisAEE18PLJtajq00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv8QLmMuc3pn62/DU3GJyC443qwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg4OTliNmItOWZhOS0z OTE0LWJmNjEtYjFkMjFhMGU3NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5fzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeFXkKlWf8U4Xieg3xfdumAAWX+RLimE7BF8NbkT+dlKXNUKWlfrvTz +BK3iVW2rPGomC26Joi1e85js9cD9ArkL2J+i5oPag+pEYHEUHR2VAM/3JHe3cwt bqMicRBE3aq+vF/yh95bsWx8eTwM8X05D+El8ED95f4xyaD1GKjUKV7fJtxJ/2qi AoABSTZzNdU5w4FhvPLFtcmeh6+HuWDtRSY7l/Kw0M0+GLXcHG7CMfn9bhQBIjo2 wVdX1Y+vLi8GxrJYgiy2pTaFsX3m8v1lIAb1WlCPn+3DHH8UCMEk+y/HLtWLEZYV 34ygJWh7jHBGG42k6mZu2k3MfWvwie8= -----END CERTIFICATE-----Generated at Mon Nov 25 16:22:54 2024 by rpki-client on console-ams.rpki-client.org