$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa File: c8879e0a-a047-3aa1-9f06-79affe165955.roa (raw, json) Hash identifier: DMuVKx+9PkFDRB7XLLGhClJ/PKLGBfegqfoXJp5a+OY= Subject key identifier: 66:AF:74:DB:BE:27:68:89:70:4F:D9:88:45:80:44:9F:10:81:D1:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584734C79096DED951C7EE181700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 7029 IP address blocks: 40.137.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c7:90:96:de:d9:51:c7:ee:18:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=1776c84a-629e-4250-9cce-fbc2611e2016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1c:dc:d8:0a:f5:57:1c:69:17:b5:92:5e:0e: 59:9f:bc:84:ca:4a:ca:5b:a6:7b:72:bc:6b:bc:24: cb:8d:42:50:48:4e:7a:30:6c:fc:43:88:85:52:c9: e9:8b:b7:02:62:17:65:9b:e1:e3:2d:87:63:de:12: 6b:1c:5b:8c:d8:cc:5e:bf:2c:6d:f0:35:e6:65:76: 8e:79:77:6b:72:15:76:03:d1:fe:33:2c:df:6c:d9: 20:c0:be:15:03:14:02:07:23:a4:50:f2:14:fe:53: 8a:61:44:30:66:d8:49:f4:0f:39:7a:0b:00:f1:ce: 69:2e:c0:3e:1b:29:b2:dc:6a:0c:0c:5e:84:7a:ca: 50:01:26:d5:e9:9c:1a:b6:bb:90:18:08:13:6d:e3: 85:bb:3f:e6:ff:d3:89:6a:dd:33:be:9b:3d:a4:fd: a3:08:38:25:ea:26:81:60:1e:3f:3f:8d:7c:4f:68: bd:f8:bc:43:38:81:77:bd:9a:f3:16:d5:be:0c:82: 47:4d:1c:69:6a:cb:79:84:7b:9e:0e:54:e4:c9:7d: 57:b2:3b:28:39:55:90:e6:fe:9c:a8:b3:31:06:93: 05:a0:15:cc:12:0a:28:5c:5e:de:77:d2:42:42:51: 3a:ed:cd:a1:a2:5f:8c:c9:41:33:45:47:c6:7c:a6: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AF:74:DB:BE:27:68:89:70:4F:D9:88:45:80:44:9F:10:81:D1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:37:01:42:38:cf:c3:ec:a2:0d:73:2c:d7:22:32:0d:da:f2: 63:0e:1f:e1:82:49:69:e1:71:02:fd:2a:b3:a7:1f:31:d8:51: 8d:22:3c:7f:b1:10:c1:a0:93:15:5d:94:a6:ed:e9:ac:08:93: a4:be:fb:34:fd:22:7d:c2:00:39:30:f6:34:49:c0:f4:b2:9a: d4:2e:4b:81:8a:51:3e:31:2a:26:d0:15:68:fa:07:c0:bf:01: 12:75:2c:91:df:90:94:5b:23:be:18:fe:f3:43:dd:26:c5:93: fa:bf:9e:fb:ae:66:d1:6d:81:f3:1d:54:54:45:3d:45:70:45: 4d:cd:74:be:2d:37:e9:4b:79:28:ec:29:d0:b3:91:6b:76:a4: 45:a2:f2:35:83:c5:40:05:7e:82:82:f8:ce:cb:12:44:78:b9: aa:82:a0:2f:74:93:78:2f:42:bb:d8:06:78:e9:e7:c3:7a:20: 5d:15:9a:23:ad:c6:38:d6:3e:ea:33:97:e6:de:b0:eb:a3:e2: c7:a3:7d:c9:da:cc:05:34:fb:08:b2:6c:4a:65:fd:1a:08:55: 6a:2e:bd:7d:f4:e1:e5:4b:c4:1e:65:81:9b:54:49:12:87:7b: 30:78:dd:d7:e5:29:7b:21:6e:5e:52:20:96:af:2b:32:e3:e8: d7:ea:64:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x5CW3tlRx+4YFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MTc3NmM4NGEtNjI5ZS00MjUwLTljY2UtZmJjMjYxMWUyMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihzc2Ar1VxxpF7WSXg5Zn7yEykrKW6Z7crxr vCTLjUJQSE56MGz8Q4iFUsnpi7cCYhdlm+HjLYdj3hJrHFuM2Mxevyxt8DXmZXaO eXdrchV2A9H+MyzfbNkgwL4VAxQCByOkUPIU/lOKYUQwZthJ9A85egsA8c5pLsA+ Gymy3GoMDF6EespQASbV6ZwatruQGAgTbeOFuz/m/9OJat0zvps9pP2jCDgl6iaB YB4/P418T2i9+LxDOIF3vZrzFtW+DIJHTRxpast5hHueDlTkyX1XsjsoOVWQ5v6c qLMxBpMFoBXMEgooXF7ed9JCQlE67c2hol+MyUEzRUfGfKZurQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGavdNu+J2iJcE/ZiEWARJ8QgdGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzg4NzllMGEtYTA0Ny0z YWExLTlmMDYtNzlhZmZlMTY1OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc3AUI4z8Psog1zLNciMg3a8mMOH+GCSWnhcQL9KrOnHzHYUY0iPH+x EMGgkxVdlKbt6awIk6S++zT9In3CADkw9jRJwPSymtQuS4GKUT4xKibQFWj6B8C/ ARJ1LJHfkJRbI74Y/vND3SbFk/q/nvuuZtFtgfMdVFRFPUVwRU3NdL4tN+lLeSjs KdCzkWt2pEWi8jWDxUAFfoKC+M7LEkR4uaqCoC90k3gvQrvYBnjp58N6IF0VmiOt xjjWPuozl+besOuj4sejfcnazAU0+wiybEpl/RoIVWouvX304eVLxB5lgZtUSRKH ezB43dflKXshbl5SIJavKzLj6NfqZPo= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:31 2024 by rpki-client on console-fra.rpki-client.org