$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa File: d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa (raw, json) Hash identifier: 1wp+ST1tK7j4Ll8YW4Q4PnU54NcOGvRyoU0hr2umbVA= Subject key identifier: 64:D8:2F:09:4E:95:43:7E:78:E9:7C:F7:27:02:66:C1:7A:21:60:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AA068A9D4B6C2F2CFD770480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa Signing time: Sat 26 Oct 2024 01:00:31 +0000 ROA not before: Sat 26 Oct 2024 01:00:31 +0000 ROA not after: Fri 24 Jan 2025 02:00:31 +0000 asID: 27338 IP address blocks: 74.9.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:aa:06:8a:9d:4b:6c:2f:2c:fd:77:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 01:00:31 2024 GMT Not After : Jan 24 02:00:31 2025 GMT Subject: CN=c8854df7-569c-444b-8627-a5c943051738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:66:6c:1a:bf:d9:c3:6b:d4:45:eb:b4:63:35: 8a:8b:45:c4:f2:31:ef:86:03:d9:dd:1a:6b:9c:44: ee:2b:fd:a4:bb:42:72:23:52:cd:b9:ac:50:a8:fd: 83:72:a8:72:07:c8:c8:bf:a5:47:77:cb:99:40:a4: 80:8c:ab:b1:f2:1c:73:69:8b:97:72:46:b0:aa:15: 19:57:0e:ec:31:74:dc:c3:67:33:1d:71:01:93:05: 56:fd:b0:a9:1f:18:2e:e1:08:4b:85:41:68:c2:f7: 85:65:69:78:25:db:89:e9:65:3b:0c:1e:a6:73:1c: fe:db:d0:8b:6e:64:9f:4e:c5:94:1e:7a:62:00:60: 6e:f2:e9:84:5e:49:ea:78:d5:7c:89:62:65:df:59: f7:d1:9d:41:e5:a9:25:65:8e:a0:5c:e1:d1:da:bd: 01:10:9d:68:eb:ab:7b:49:c8:38:b6:d9:4c:07:fd: 5e:fe:cf:fe:79:94:03:ac:ad:ce:47:0b:8e:8b:47: ce:f9:e4:b0:9b:89:c0:33:3d:4e:63:7c:db:02:b9: 68:8b:62:75:73:60:ff:46:3e:68:52:63:96:77:84: 0e:d5:6d:d2:d4:b8:79:60:f5:cb:28:29:a1:c6:61: 6e:ef:da:cd:1b:8f:01:0f:da:3e:b8:bc:43:b9:f9: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:2F:09:4E:95:43:7E:78:E9:7C:F7:27:02:66:C1:7A:21:60:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.9.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b2:c6:ed:f7:7d:8b:59:97:45:00:2b:7f:80:b5:fc:8b:6a: c3:17:e8:cb:8b:b5:b0:fa:a9:45:fb:1d:d9:04:c7:d5:85:b3: 96:14:eb:1f:85:ce:63:44:7c:41:6f:75:69:b0:73:a3:c4:86: 51:c8:a4:40:9c:1b:5d:8a:38:82:66:fa:d6:be:54:79:ef:b7: 01:1a:0d:a2:12:a7:1b:42:9a:19:90:20:03:5f:a9:c7:f4:f3: 6a:55:90:5b:0a:b4:4c:db:68:68:c5:6b:ce:82:d7:42:e1:7d: bc:20:85:44:38:41:30:23:bc:e9:cb:3f:80:6f:dd:3a:56:ad: 20:32:3f:e2:fc:0b:0b:c5:0b:e0:b3:85:0d:a9:60:aa:23:1a: e5:a7:a7:63:fd:23:14:f9:1f:41:34:ac:08:e9:c9:c4:1d:25: 48:72:9d:85:43:89:fb:43:42:28:7c:8e:21:6a:95:41:a5:c7: 20:8d:77:af:80:86:8d:1c:fe:c6:04:c5:33:b4:83:c3:98:01: 34:2d:e3:d3:4f:2c:43:4b:14:eb:db:37:32:81:e1:ff:1f:b9: 7c:32:a1:2c:ca:e0:12:d3:42:eb:d5:4b:18:e8:f3:49:c3:ef: 3f:38:f6:52:ff:44:84:72:f1:f5:a5:68:ee:14:60:6f:a4:1a: 70:de:b8:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeqBoqdS2wvLP13BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjAxMDAzMVoXDTI1MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk Yzg4NTRkZjctNTY5Yy00NDRiLTg2MjctYTVjOTQzMDUxNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmZsGr/Zw2vUReu0YzWKi0XE8jHvhgPZ3Rpr nETuK/2ku0JyI1LNuaxQqP2DcqhyB8jIv6VHd8uZQKSAjKux8hxzaYuXckawqhUZ Vw7sMXTcw2czHXEBkwVW/bCpHxgu4QhLhUFowveFZWl4JduJ6WU7DB6mcxz+29CL bmSfTsWUHnpiAGBu8umEXknqeNV8iWJl31n30Z1B5aklZY6gXOHR2r0BEJ1o66t7 Scg4ttlMB/1e/s/+eZQDrK3ORwuOi0fO+eSwm4nAMz1OY3zbArloi2J1c2D/Rj5o UmOWd4QO1W3S1Lh5YPXLKCmhxmFu79rNG48BD9o+uLxDufnsuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTYLwlOlUN+eOl89ycCZsF6IWDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJmMmRhNmMtZTU1OC0z MTU0LWJiNzEtNGIyYThjMGEwNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgkGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+yxu33fYtZl0UAK3+AtfyLasMX6MuLtbD6qUX7HdkEx9WFs5YU6x+F zmNEfEFvdWmwc6PEhlHIpECcG12KOIJm+ta+VHnvtwEaDaISpxtCmhmQIANfqcf0 82pVkFsKtEzbaGjFa86C10LhfbwghUQ4QTAjvOnLP4Bv3TpWrSAyP+L8CwvFC+Cz hQ2pYKojGuWnp2P9IxT5H0E0rAjpycQdJUhynYVDiftDQih8jiFqlUGlxyCNd6+A ho0c/sYExTO0g8OYATQt49NPLENLFOvbNzKB4f8fuXwyoSzK4BLTQuvVSxjo80nD 7z849lL/RIRy8fWlaO4UYG+kGnDeuLE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:50 2024 by rpki-client on console-ams.rpki-client.org