$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf579565-c451-37d8-81e6-d41740d73cf6.roa File: cf579565-c451-37d8-81e6-d41740d73cf6.roa (raw, json) Hash identifier: m9E2cprfppJcHLNYnwYBfluPPvlL6wdWoJMIswQQHEo= Subject key identifier: A8:8C:4F:A7:B1:2C:70:09:F9:7E:77:8C:3E:6D:20:55:3D:A6:8A:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155027D02AC7E6332D92DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf579565-c451-37d8-81e6-d41740d73cf6.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 151.213.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:02:7d:02:ac:7e:63:32:d9:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=d5091e91-74e6-4f91-875c-bd03fa482054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:5a:d6:b0:fd:dd:4f:ba:53:fd:3e:dc:6a: bd:10:a1:86:33:d5:dd:2c:c5:63:8e:18:56:5a:1a: fe:43:8b:bd:96:c3:2b:25:53:1f:3f:30:c1:42:7b: 4b:e8:e0:15:e4:49:ec:8f:a0:42:0b:9f:b2:0d:19: 2f:43:a0:ab:a9:32:2f:07:eb:a4:b8:3b:03:df:10: 6b:b2:7e:0a:2b:cc:2d:ea:b1:af:6b:58:be:f1:fd: 07:38:6b:8d:4b:0b:d7:46:3d:2b:a0:95:91:97:96: 13:bf:f8:ff:91:35:86:1c:f5:da:71:e6:56:df:5d: 1f:cb:61:f6:0e:64:d3:e8:70:2f:0c:b0:b3:1e:90: ea:58:1c:0f:29:84:a2:bb:52:5a:5b:c1:ed:9b:09: 16:57:32:11:96:c4:dd:1b:e4:d0:da:0b:4d:0c:c4: 95:68:ef:ba:ee:74:87:08:80:59:72:d1:fe:87:66: c4:7d:48:72:79:6a:83:aa:80:79:60:6e:ea:4b:84: 51:02:13:30:41:ac:d6:85:ff:c6:58:b3:f4:c6:8f: 89:3b:cf:54:1e:d9:fb:69:8f:ef:93:59:57:0b:ef: d8:66:c7:61:0e:4e:44:69:d9:80:50:9e:82:29:f8: 5d:0a:ab:b8:a8:87:f1:5a:e1:6e:d4:2a:07:53:7d: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8C:4F:A7:B1:2C:70:09:F9:7E:77:8C:3E:6D:20:55:3D:A6:8A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf579565-c451-37d8-81e6-d41740d73cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:32:fb:b1:1c:4f:80:12:86:5e:f6:77:22:6f:5c:d3:92:53: 8e:21:de:54:96:3f:c1:d8:3d:27:fa:3e:7a:f3:ff:5d:eb:55: 1f:1f:f9:9d:28:96:71:eb:03:53:97:e7:b9:b4:d4:49:4a:0a: d4:12:29:84:13:0f:b4:40:3c:de:2c:72:b9:60:cd:44:e3:84: af:92:90:d6:30:4b:06:97:25:e3:f8:e2:73:58:f6:57:ef:57: cf:a9:12:15:2e:27:99:db:a8:5c:48:5c:41:5b:b6:5f:2c:f3: 6b:5a:fd:fe:66:a3:c4:bf:47:1a:ae:7b:f5:5b:16:5e:4c:b3: 3c:09:fe:b3:be:c6:f8:17:c7:3d:2d:7b:85:a2:cd:47:bd:3a: 6d:10:ea:c4:2d:ed:34:cf:65:ae:ea:21:76:be:8f:79:38:30: 77:9d:e7:c4:76:d8:6c:4f:3c:d7:15:4d:00:1b:0d:d5:e4:b6: b9:73:c5:d1:fa:08:05:ac:ce:34:d5:8b:50:39:7f:9c:21:d5: 8a:b4:16:32:01:22:e5:98:75:64:73:a5:3b:56:dc:ec:5b:ba: 14:c9:03:63:10:ce:4c:c7:19:90:db:52:bf:be:76:79:a5:98: 64:f5:14:1b:0b:cc:2b:1b:fe:e2:f6:19:66:92:80:cc:00:47: 91:77:96:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQJ9Aqx+YzLZLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZDUwOTFlOTEtNzRlNi00ZjkxLTg3NWMtYmQwM2ZhNDgyMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOxa1rD93U+6U/0+3Gq9EKGGM9XdLMVjjhhW Whr+Q4u9lsMrJVMfPzDBQntL6OAV5Ensj6BCC5+yDRkvQ6CrqTIvB+ukuDsD3xBr sn4KK8wt6rGva1i+8f0HOGuNSwvXRj0roJWRl5YTv/j/kTWGHPXaceZW310fy2H2 DmTT6HAvDLCzHpDqWBwPKYSiu1JaW8HtmwkWVzIRlsTdG+TQ2gtNDMSVaO+67nSH CIBZctH+h2bEfUhyeWqDqoB5YG7qS4RRAhMwQazWhf/GWLP0xo+JO89UHtn7aY/v k1lXC+/YZsdhDk5EadmAUJ6CKfhdCqu4qIfxWuFu1CoHU31PYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiMT6exLHAJ+X53jD5tIFU9popsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y1Nzk1NjUtYzQ1MS0z N2Q4LTgxZTYtZDQxNzQwZDczY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgy+7EcT4AShl72dyJvXNOSU44h3lSWP8HYPSf6Pnrz/13rVR8f+Z0o lnHrA1OX57m01ElKCtQSKYQTD7RAPN4scrlgzUTjhK+SkNYwSwaXJeP44nNY9lfv V8+pEhUuJ5nbqFxIXEFbtl8s82ta/f5mo8S/Rxque/VbFl5MszwJ/rO+xvgXxz0t e4WizUe9Om0Q6sQt7TTPZa7qIXa+j3k4MHed58R22GxPPNcVTQAbDdXktrlzxdH6 CAWszjTVi1A5f5wh1Yq0FjIBIuWYdWRzpTtW3OxbuhTJA2MQzkzHGZDbUr++dnml mGT1FBsLzCsb/uL2GWaSgMwAR5F3ljA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:11 2024 by rpki-client on console-ams.rpki-client.org