$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa File: d8204647-1d71-34d9-8c5a-17c50fa10403.roa (raw, json) Hash identifier: zRNYyG3161PDZsgqHY3rvd69FAxPw89T9onOnNoAPPE= Subject key identifier: 3E:61:FF:5C:7E:19:09:77:46:DB:EB:2A:BC:81:F7:FE:F7:8C:13:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15516ADF6C94AF6F4623680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 36471 IP address blocks: 209.255.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:16:ad:f6:c9:4a:f6:f4:62:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a21c1450-de2a-4359-95b3-b4c0b6f49b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:c3:f4:67:04:9a:0a:44:e7:36:f0:63:c2: fb:81:c2:8b:87:b3:ce:40:f2:63:60:05:6a:55:88: 84:79:3b:ad:4e:3e:9f:40:eb:85:23:bd:63:8a:d4: 6a:f1:05:b2:23:cf:4d:ec:ed:b0:7c:aa:f3:7c:54: 93:60:63:6f:c5:1b:d3:56:67:28:1f:22:dd:f9:43: 09:5e:bd:94:b1:b1:1e:32:43:ae:c7:6a:65:0a:60: 12:5d:4f:90:fe:6c:07:ee:4a:bf:19:93:aa:c8:8e: e1:be:17:fd:e6:b7:73:4a:88:d7:3d:67:d8:d1:82: 5a:86:c5:7a:2a:5d:1a:d5:6d:b2:11:98:54:5e:a2: 92:d0:59:61:30:a2:52:02:ec:4f:b3:01:60:f2:c1: e4:40:7c:f6:2c:32:e1:e6:17:a3:3c:78:c5:97:5a: e0:49:0f:fd:41:ca:9b:a7:eb:03:66:73:24:67:d2: 93:ed:0c:9f:9e:85:c0:5b:80:2f:f8:a3:cf:25:09: 49:fc:b8:6c:a3:64:50:14:b4:d6:ff:61:eb:64:5b: 8a:54:67:80:b6:f0:80:7d:6c:54:08:db:ec:6d:d5: 05:83:f3:24:52:61:31:2a:b0:ae:24:4b:c8:69:5a: 84:50:6c:eb:f9:70:49:94:2a:7d:bf:69:34:2f:65: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:61:FF:5C:7E:19:09:77:46:DB:EB:2A:BC:81:F7:FE:F7:8C:13:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:59:57:1f:cf:59:5e:d9:1b:73:3d:38:5c:f1:f7:eb:17:71: 03:71:a9:1c:b8:4f:24:a6:30:a5:44:c6:cb:27:5d:a4:61:a2: 71:83:32:8a:79:06:4b:17:52:de:6d:49:75:20:66:a7:b6:f6: ed:56:a5:ea:3a:6c:87:d7:ee:ad:aa:e7:c9:7f:45:1e:50:15: c7:57:3a:09:50:81:a2:32:87:70:3c:15:ee:4e:ad:99:ca:f4: eb:36:b0:3c:76:8d:6e:9c:85:8c:97:c2:d5:bf:f5:80:aa:80: 96:a8:c7:28:d6:3f:c1:fc:4d:4f:7d:bd:99:65:cd:c9:7a:6f: 3f:51:62:3b:f1:05:f2:73:df:d0:7e:4b:c2:7d:2d:fc:c2:ad: 14:19:a4:86:e9:c2:0e:64:fd:36:53:08:fe:8a:fe:a8:04:d4: 50:0a:41:2a:6a:04:5f:d7:24:8d:97:0c:39:5c:27:1d:ab:27: c2:47:27:26:13:68:12:d9:2a:ce:aa:b7:c1:e8:8b:cd:3d:5f: 6e:27:cf:96:e3:08:4c:9d:12:aa:0e:f8:f7:0e:cc:f0:bf:77: 06:0e:ee:d0:12:d9:49:16:01:6b:f9:8d:b5:60:85:1e:3c:ca: cd:01:61:56:d6:c1:97:84:04:52:aa:71:cc:37:98:df:56:b3: 71:23:58:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRat9slK9vRiNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTIxYzE0NTAtZGUyYS00MzU5LTk1YjMtYjRjMGI2ZjQ5YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq/D9GcEmgpE5zbwY8L7gcKLh7POQPJjYAVq VYiEeTutTj6fQOuFI71jitRq8QWyI89N7O2wfKrzfFSTYGNvxRvTVmcoHyLd+UMJ Xr2UsbEeMkOux2plCmASXU+Q/mwH7kq/GZOqyI7hvhf95rdzSojXPWfY0YJahsV6 Kl0a1W2yEZhUXqKS0FlhMKJSAuxPswFg8sHkQHz2LDLh5hejPHjFl1rgSQ/9Qcqb p+sDZnMkZ9KT7QyfnoXAW4Av+KPPJQlJ/Lhso2RQFLTW/2HrZFuKVGeAtvCAfWxU CNvsbdUFg/MkUmExKrCuJEvIaVqEUGzr+XBJlCp9v2k0L2XyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5h/1x+GQl3RtvrKryB9/73jBNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDgyMDQ2NDctMWQ3MS0z NGQ5LThjNWEtMTdjNTBmYTEwNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9ZVx/PWV7ZG3M9OFzx9+sXcQNxqRy4TySmMKVExssnXaRhonGDMop5 BksXUt5tSXUgZqe29u1Wpeo6bIfX7q2q58l/RR5QFcdXOglQgaIyh3A8Fe5OrZnK 9Os2sDx2jW6chYyXwtW/9YCqgJaoxyjWP8H8TU99vZllzcl6bz9RYjvxBfJz39B+ S8J9LfzCrRQZpIbpwg5k/TZTCP6K/qgE1FAKQSpqBF/XJI2XDDlcJx2rJ8JHJyYT aBLZKs6qt8Hoi809X24nz5bjCEydEqoO+PcOzPC/dwYO7tAS2UkWAWv5jbVghR48 ys0BYVbWwZeEBFKqccw3mN9Ws3EjWOg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:52 2024 by rpki-client on console-ams.rpki-client.org