$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa File: d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa (raw, json) Hash identifier: +mch9988JF2Iq8EIOyid0/IRCbmj4hjtMtrbwhUxuHo= Subject key identifier: 79:57:BE:CD:F3:8F:B0:7D:06:1A:86:18:BD:DB:37:6C:5B:C0:1C:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847311A2DD87349AD7E0792BE88 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa Signing time: Thu 12 Sep 2024 17:27:18 +0000 ROA not before: Thu 12 Sep 2024 17:27:18 +0000 ROA not after: Wed 11 Dec 2024 18:27:18 +0000 asID: 7029 IP address blocks: 71.30.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:1a:2d:d8:73:49:ad:7e:07:92:be:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:27:18 2024 GMT Not After : Dec 11 18:27:18 2024 GMT Subject: CN=3638f431-1de0-427b-9458-9bc84a31123a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:64:47:f9:e9:8d:c7:aa:76:1e:92:5d:54:1d: 1a:22:70:c1:55:0c:b7:f1:46:df:47:3d:e0:e9:35: 21:bb:14:b3:4e:d3:da:52:6a:ef:80:20:c7:a3:3e: 73:90:d2:2a:51:7f:9e:4c:ef:32:ca:44:da:a2:d4: 7f:6f:a1:0e:8f:63:26:09:41:30:8e:4a:5e:f4:82: 74:47:7b:37:1e:61:a6:97:a1:50:f9:42:a8:0f:ad: 89:7c:9a:b4:cb:f6:c0:a1:ec:d7:4c:81:aa:46:43: 06:fb:9b:8e:a1:b9:98:bb:2b:04:2d:52:43:5f:d9: 65:70:a2:35:b0:06:6e:11:d7:53:2b:b4:89:16:c1: 74:b5:fb:27:a6:82:dd:e6:df:91:a6:0c:8c:b5:cf: b9:2e:ac:69:d2:7b:c3:7f:ba:b4:1e:8b:81:8a:30: 11:94:71:04:41:d6:0a:2f:84:c8:63:da:ca:33:6e: c4:02:b3:88:6b:1f:5c:1a:a3:b9:93:80:cf:69:17: 18:b2:ed:f0:a1:91:4a:03:5e:f7:5b:49:94:d5:a7: 09:7d:25:be:56:b5:a8:2d:64:e1:13:de:04:69:2c: c0:c0:e7:f9:44:c6:d0:d7:24:90:7e:e3:54:11:be: 63:29:25:c8:f7:2c:2b:16:11:03:0d:71:68:52:10: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:57:BE:CD:F3:8F:B0:7D:06:1A:86:18:BD:DB:37:6C:5B:C0:1C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6e:1f:15:52:4a:b1:58:00:e7:26:0c:1c:62:bd:99:d3:66: 94:93:92:61:04:4b:22:91:1a:1a:78:4c:20:ae:54:b3:7f:5c: 4b:87:00:95:7b:5b:a8:ee:6b:30:3e:8e:0d:4b:c2:0e:bf:b9: 7a:8f:56:dd:8e:3a:9a:f5:a8:b3:ba:e1:84:f2:73:ab:05:c1: 59:af:1e:f8:6a:1b:fe:19:1b:7a:0c:e4:5d:05:e6:65:d5:10: dd:18:2b:b3:23:99:95:4c:91:b2:59:8b:02:38:ca:94:f1:de: a2:f3:fe:95:55:e3:7a:64:de:46:a8:ab:0f:62:2e:60:a4:ea: 28:00:84:57:82:f7:f4:1c:7a:76:87:22:31:ea:77:a8:fb:dd: a6:e7:68:04:c8:a0:a2:cb:7f:77:45:16:d3:9a:3e:69:b5:3e: c4:a7:e6:3f:33:df:fc:01:d4:1d:7a:e6:c0:63:a9:15:29:9c: 01:9d:69:f2:f6:a7:d9:84:81:25:cd:7e:be:87:80:76:d0:a2: 80:00:bb:7d:73:9b:fe:44:a1:47:ed:2b:9f:57:32:b9:58:ef: 01:46:68:31:e1:ac:a3:1e:b5:53:85:d4:0d:cd:a2:55:d0:02: f6:3d:ba:5a:9f:cb:7c:08:f9:60:bb:d3:d5:c5:dc:2c:f9:f6: 92:28:d5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxGi3Yc0mtfgeSvogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjcxOFoXDTI0MTIxMTE4MjcxOFowLzEtMCsGA1UEAxMk MzYzOGY0MzEtMWRlMC00MjdiLTk0NTgtOWJjODRhMzExMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmRH+emNx6p2HpJdVB0aInDBVQy38UbfRz3g 6TUhuxSzTtPaUmrvgCDHoz5zkNIqUX+eTO8yykTaotR/b6EOj2MmCUEwjkpe9IJ0 R3s3HmGml6FQ+UKoD62JfJq0y/bAoezXTIGqRkMG+5uOobmYuysELVJDX9llcKI1 sAZuEddTK7SJFsF0tfsnpoLd5t+RpgyMtc+5Lqxp0nvDf7q0HouBijARlHEEQdYK L4TIY9rKM27EArOIax9cGqO5k4DPaRcYsu3woZFKA173W0mU1acJfSW+VrWoLWTh E94EaSzAwOf5RMbQ1ySQfuNUEb5jKSXI9ywrFhEDDXFoUhCpVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlXvs3zj7B9BhqGGL3bN2xbwBxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRjZWE4MjUtZjAyMi0z YjRlLWEwODItMWExYzg4YmMxYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9uHxVSSrFYAOcmDBxivZnTZpSTkmEESyKRGhp4TCCuVLN/XEuHAJV7 W6juazA+jg1Lwg6/uXqPVt2OOpr1qLO64YTyc6sFwVmvHvhqG/4ZG3oM5F0F5mXV EN0YK7MjmZVMkbJZiwI4ypTx3qLz/pVV43pk3kaoqw9iLmCk6igAhFeC9/QcenaH IjHqd6j73abnaATIoKLLf3dFFtOaPmm1PsSn5j8z3/wB1B165sBjqRUpnAGdafL2 p9mEgSXNfr6HgHbQooAAu31zm/5EoUftK59XMrlY7wFGaDHhrKMetVOF1A3NolXQ AvY9ulqfy3wI+WC709XF3Cz59pIo1fY= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:03 2024 by rpki-client on console-ams.rpki-client.org