$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa File: c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa (raw, json) Hash identifier: i2iSxFZmZRAtti40oDAJ+OZ6RNUiMqQGLFPcp0qUTqU= Subject key identifier: EC:A1:84:28:EB:69:2C:E3:45:CA:F7:B0:1A:F4:C9:3A:A8:40:77:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15519D03B11E2E338DE5D30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 398741 IP address blocks: 40.136.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:19:d0:3b:11:e2:e3:38:de:5d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=5fc87365-0e71-4801-886a-ec006bd93f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:71:3b:d7:07:54:b9:9a:9c:8f:33:a9:a1: c6:68:99:f7:9f:f3:f8:be:ce:68:b4:8f:bc:8c:5f: 63:7a:d2:d1:9d:42:8d:f2:c5:ff:7b:e2:73:2e:21: 06:6c:59:ae:22:05:d8:18:f1:2b:81:40:a5:49:89: 90:24:53:bb:03:10:a3:77:08:31:21:42:5a:9d:11: d2:ed:3c:35:37:4e:c1:80:49:5c:a0:1e:30:b3:17: 0f:a7:dd:11:d6:a2:81:19:94:41:4d:98:eb:aa:35: 5a:ac:90:e5:5e:95:f0:66:31:70:2b:22:04:4e:87: ed:9b:a7:e4:f5:8e:e8:fe:b1:4a:29:6e:ac:12:fb: d9:a6:22:1f:2f:1b:17:67:7a:4b:e3:09:02:73:c7: 86:37:e0:0c:0c:85:47:7c:0a:44:b2:ca:53:09:fb: 5a:bd:26:56:63:49:86:b7:c8:14:9e:1e:df:8f:94: fe:ff:23:a2:05:2d:f7:98:1b:79:53:42:27:c3:b5: 0b:3c:4c:82:c9:2e:09:86:ab:f9:50:4d:41:0a:72: 2b:16:9e:60:aa:4b:46:b9:da:fc:70:dd:be:c2:68: 1e:7e:15:14:86:f7:11:f0:80:f3:c8:e1:b5:71:19: 18:b0:ba:90:27:86:23:28:33:5e:e2:3e:8b:23:d7: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A1:84:28:EB:69:2C:E3:45:CA:F7:B0:1A:F4:C9:3A:A8:40:77:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9a:b8:ee:72:32:08:55:bf:9e:d4:e6:4d:ea:48:e2:0d:fc: 72:ea:7f:a4:77:97:0f:3a:12:80:c1:57:04:20:d8:57:d4:2e: 16:5a:4d:77:e9:ca:c8:cd:6d:1b:e4:1c:87:bb:04:ad:f7:80: 9d:48:65:91:b1:9a:18:61:a5:64:48:3e:f1:de:5e:e8:d0:2a: 1c:79:49:a2:f5:17:ea:fc:9e:9a:8b:1d:31:46:90:5c:55:74: ca:a7:97:b8:31:6a:7a:31:4a:ae:0c:d2:3f:32:fe:86:84:73: 5f:70:16:ad:b0:e2:56:83:0e:ef:07:64:6b:64:a2:23:04:49: dd:7a:38:5f:5f:d0:72:a4:d8:91:c7:83:27:77:28:2d:11:61: 05:3c:d5:eb:c6:53:06:42:fa:f9:5c:0a:55:0b:7c:a2:8b:29: 41:5a:c8:e1:cd:52:bd:f6:b7:bd:c9:5d:2a:ce:78:0e:5c:37: f7:f5:c4:91:ad:f2:42:5b:00:c0:b7:d7:ad:26:40:2a:33:fc: f5:d7:c8:fd:28:40:01:9a:77:88:ff:d3:5d:bd:9c:1d:f9:fd: 4d:12:4f:59:11:62:cd:fd:19:5c:9a:99:9f:cc:de:df:96:fe: c4:02:7c:ad:12:4c:59:c1:f5:be:ba:b6:4a:aa:7d:31:5c:c1: 95:d9:b3:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRnQOxHi4zjeXTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NWZjODczNjUtMGU3MS00ODAxLTg4NmEtZWMwMDZiZDkzZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOdxO9cHVLmanI8zqaHGaJn3n/P4vs5otI+8 jF9jetLRnUKN8sX/e+JzLiEGbFmuIgXYGPErgUClSYmQJFO7AxCjdwgxIUJanRHS 7Tw1N07BgElcoB4wsxcPp90R1qKBGZRBTZjrqjVarJDlXpXwZjFwKyIEToftm6fk 9Y7o/rFKKW6sEvvZpiIfLxsXZ3pL4wkCc8eGN+AMDIVHfApEsspTCftavSZWY0mG t8gUnh7fj5T+/yOiBS33mBt5U0Inw7ULPEyCyS4Jhqv5UE1BCnIrFp5gqktGudr8 cN2+wmgefhUUhvcR8IDzyOG1cRkYsLqQJ4YjKDNe4j6LI9fHMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyhhCjraSzjRcr3sBr0yTqoQHdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzljZWExYmUtNzNjYi0z YmNlLWFkNjItZjhhYmI2YjI0ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuauO5yMghVv57U5k3qSOIN/HLqf6R3lw86EoDBVwQg2FfULhZaTXfp ysjNbRvkHIe7BK33gJ1IZZGxmhhhpWRIPvHeXujQKhx5SaL1F+r8npqLHTFGkFxV dMqnl7gxanoxSq4M0j8y/oaEc19wFq2w4laDDu8HZGtkoiMESd16OF9f0HKk2JHH gyd3KC0RYQU81evGUwZC+vlcClULfKKLKUFayOHNUr32t73JXSrOeA5cN/f1xJGt 8kJbAMC3160mQCoz/PXXyP0oQAGad4j/0129nB35/U0ST1kRYs39GVyamZ/M3t+W /sQCfK0STFnB9b66tkqqfTFcwZXZs8E= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:09 2024 by rpki-client on console-fra.rpki-client.org