$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa File: e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa (raw, json) Hash identifier: GeC9vUxODPQ8qwd9ZES+oiGa62nldB8OodSdnkEu2xA= Subject key identifier: DD:AA:06:9F:BA:E6:1B:77:43:62:BE:CF:3E:69:E4:94:FF:CA:E1:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155129C942E84D930A04500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 21609 IP address blocks: 40.141.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:12:9c:94:2e:84:d9:30:a0:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=934e7f27-ee13-4bdb-aba6-662c139c59a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2a:0b:9d:1c:b4:0c:30:1d:c4:fa:70:db:36: a9:8c:aa:f1:98:ba:cc:7c:ad:f3:20:b5:1c:a6:7b: 67:a0:17:f6:9c:b0:bc:b1:4a:96:c9:ff:29:c8:f1: 9a:7e:a2:a1:4f:44:c3:8e:c6:91:13:02:0c:13:00: 79:9f:64:81:29:22:9f:6a:a6:d0:35:70:c5:77:82: 0c:eb:65:e4:ff:e0:f9:f6:9b:78:b8:04:88:8b:24: cf:7e:51:f3:01:1c:a9:12:ae:5b:c7:c5:c0:10:af: 8b:01:86:78:d5:d7:8d:d9:31:31:4e:d5:6d:97:19: fb:a3:06:0b:cc:c3:6c:0f:26:38:81:07:01:cb:0f: 3a:c6:a9:a7:65:11:8e:9d:d3:de:5e:b1:bd:72:25: 71:2f:fd:f4:4c:10:f4:ed:7a:9b:1f:02:6f:ae:bd: 97:1b:dc:56:4f:1d:7b:ed:f1:3b:c5:9b:37:07:07: 2f:ec:68:b4:ec:73:f1:01:b1:ed:8a:ed:ff:c1:f6: e5:0c:44:bf:e3:2a:ac:53:36:1d:7f:0e:c0:72:ba: 68:5b:67:c6:39:3a:0b:cb:eb:ac:77:d9:a8:f4:eb: ea:92:5a:d4:92:af:e1:da:eb:a9:07:e5:44:e1:63: 04:0f:87:fc:36:f9:00:d3:8b:e0:19:61:0b:5d:fc: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:06:9F:BA:E6:1B:77:43:62:BE:CF:3E:69:E4:94:FF:CA:E1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.141.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ce:b4:2e:ef:a9:1a:55:f2:21:df:48:6b:7c:b9:59:c6:72: 5d:13:de:98:f9:a8:1f:16:9f:b4:cb:19:0b:2a:4b:47:19:6a: a0:bb:e0:97:da:98:ac:1c:3a:6c:d8:a4:87:d9:b1:7c:60:46: ef:7f:ef:59:68:d9:eb:b0:80:fe:cb:46:a5:ca:81:32:7c:c6: 32:4f:5d:09:0b:b3:00:04:65:f3:8d:66:40:70:32:3e:21:ce: cd:82:9b:c6:7f:68:df:08:6a:69:29:88:46:71:93:f4:c6:95: 25:5b:24:e5:9a:ab:ca:d5:44:82:5f:e2:2b:9b:14:fc:8b:91: 38:51:da:8a:6c:21:6a:c9:54:89:ff:ba:8e:bb:d0:04:3c:df: 78:ec:0e:3b:11:df:ef:f3:f0:94:19:5e:c4:5b:8d:eb:c0:0e: d6:79:fe:83:e9:a2:db:e6:66:47:43:8a:53:e0:f4:37:f4:3a: 02:b4:63:09:bf:de:1b:50:ac:97:ad:83:20:5f:5a:bd:c0:ce: af:d0:66:35:47:b7:a7:28:0d:0b:cb:1e:8a:1d:d4:c3:b0:f7: b5:b0:ca:73:d3:8c:e1:d7:e9:0c:8d:1e:46:22:c0:cf:38:d9: 9b:a5:ab:86:d3:7d:bd:8a:26:6b:50:25:b7:ad:04:fd:ef:a4: 74:97:08:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRKclC6E2TCgRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTM0ZTdmMjctZWUxMy00YmRiLWFiYTYtNjYyYzEzOWM1OWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgioLnRy0DDAdxPpw2zapjKrxmLrMfK3zILUc pntnoBf2nLC8sUqWyf8pyPGafqKhT0TDjsaREwIMEwB5n2SBKSKfaqbQNXDFd4IM 62Xk/+D59pt4uASIiyTPflHzARypEq5bx8XAEK+LAYZ41deN2TExTtVtlxn7owYL zMNsDyY4gQcByw86xqmnZRGOndPeXrG9ciVxL/30TBD07XqbHwJvrr2XG9xWTx17 7fE7xZs3Bwcv7Gi07HPxAbHtiu3/wfblDES/4yqsUzYdfw7AcrpoW2fGOToLy+us d9mo9OvqklrUkq/h2uupB+VE4WMED4f8NvkA04vgGWELXfzmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2qBp+65ht3Q2K+zz5p5JT/yuHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTAyNGQyZWEtMDRmNS0z YjFkLTk0NDctOGQyOWQyZjFmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITOtC7vqRpV8iHfSGt8uVnGcl0T3pj5qB8Wn7TLGQsqS0cZaqC74Jfa mKwcOmzYpIfZsXxgRu9/71lo2euwgP7LRqXKgTJ8xjJPXQkLswAEZfONZkBwMj4h zs2Cm8Z/aN8IamkpiEZxk/TGlSVbJOWaq8rVRIJf4iubFPyLkThR2opsIWrJVIn/ uo670AQ833jsDjsR3+/z8JQZXsRbjevADtZ5/oPpotvmZkdDilPg9Df0OgK0Ywm/ 3htQrJetgyBfWr3Azq/QZjVHt6coDQvLHood1MOw97WwynPTjOHX6QyNHkYiwM84 2Zulq4bTfb2KJmtQJbetBP3vpHSXCOE= -----END CERTIFICATE-----Generated at Mon Nov 25 16:23:04 2024 by rpki-client on console-ams.rpki-client.org