$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ce167e-cdc5-3770-87bf-44a46bb693de.roa File: e4ce167e-cdc5-3770-87bf-44a46bb693de.roa (raw, json) Hash identifier: cYLtDS7eaREwmCSMt41l2XTVzg5vIRMp+AKS5iZUhC0= Subject key identifier: B7:79:F6:91:7A:9D:AD:16:E4:72:D2:D1:EC:78:5B:D8:39:D8:30:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551693E74DC85F0CB161E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ce167e-cdc5-3770-87bf-44a46bb693de.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 36469 IP address blocks: 209.236.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:16:93:e7:4d:c8:5f:0c:b1:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=ff1aeb10-d535-499a-a7f8-fe632d31495a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:bd:7e:5f:5d:51:80:f4:c9:c5:78:ae:56: 7c:ed:aa:95:49:23:6f:03:ce:93:08:81:96:81:18: d8:7b:8b:76:20:1a:f4:94:d4:4b:93:22:37:dc:4d: 94:d8:28:16:a1:68:0e:38:4a:c1:22:84:3d:98:28: b8:9d:a9:b1:3a:70:6c:65:2b:66:20:11:89:3e:a2: 17:03:08:c0:bd:93:9d:77:e1:02:f7:83:f6:28:d0: 21:36:ed:23:76:0b:8e:82:fe:81:cf:84:ff:04:1d: 53:9e:22:87:8e:e4:3d:66:94:d8:b4:c7:89:a9:02: ed:4a:64:19:38:b5:1b:ea:dd:6d:ff:c3:38:dc:98: dc:39:30:35:79:4b:57:86:3f:fe:2c:2e:80:32:aa: 25:2f:57:a7:89:20:ff:67:fa:a1:3c:6a:30:0d:18: bc:6d:7a:93:26:80:df:6a:0d:5e:45:67:b6:e7:97: 57:6f:fc:28:d1:cc:1f:6d:9a:28:1e:45:33:42:26: 3c:99:8c:37:3a:72:14:69:b5:31:ee:80:f5:ae:e9: 0e:db:03:ee:57:56:3e:35:9d:51:92:68:95:dd:cb: ce:f0:5c:05:fb:04:0a:36:a6:b8:64:70:b8:4a:ff: b8:ee:a3:01:79:95:c6:8b:1d:64:10:17:ad:40:6c: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:79:F6:91:7A:9D:AD:16:E4:72:D2:D1:EC:78:5B:D8:39:D8:30:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ce167e-cdc5-3770-87bf-44a46bb693de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.236.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:26:d3:a3:ca:6a:c8:56:14:0e:ec:fe:e0:21:4d:42:20:45: 1d:62:1a:9c:bd:9a:41:77:30:70:31:ff:2f:cd:13:3d:75:a3: 86:ce:9b:43:43:01:27:94:81:29:4d:cc:5d:92:7b:20:84:2a: 7a:87:2e:1f:6c:e4:92:f6:9b:fa:e1:de:5e:e5:ff:14:97:bc: 41:13:bf:08:74:89:f9:3a:6a:b5:50:10:06:3d:c3:99:83:f8: 57:2c:48:0a:7a:1d:4b:3f:f3:9e:a8:30:82:43:3b:10:46:5f: 36:e1:6d:a3:a7:a7:bc:17:c3:aa:83:18:53:f0:3e:96:9f:69: 27:6f:62:39:39:32:d2:59:25:18:b6:18:b1:34:90:77:56:0f: ae:8e:67:0d:58:a4:1b:82:10:60:38:c6:0b:02:f9:92:bc:45: 39:c3:a6:d4:72:be:fc:a2:c0:0e:2d:eb:f0:31:39:6b:1b:b0: 70:b8:80:c5:63:c0:77:92:05:ec:9d:ef:19:cf:dd:ec:75:32: 56:c5:c8:e4:ca:7e:0a:ee:fb:b0:a8:eb:90:14:9a:48:9d:68: c0:f2:68:98:42:58:6c:0b:a3:13:48:24:ff:79:80:d6:8f:8d: 06:07:4d:4b:b4:cb:56:90:c2:bb:01:2e:b9:19:a2:75:37:10: 2b:41:92:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRaT503IXwyxYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZmYxYWViMTAtZDUzNS00OTlhLWE3ZjgtZmU2MzJkMzE0OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBe9fl9dUYD0ycV4rlZ87aqVSSNvA86TCIGW gRjYe4t2IBr0lNRLkyI33E2U2CgWoWgOOErBIoQ9mCi4namxOnBsZStmIBGJPqIX AwjAvZOdd+EC94P2KNAhNu0jdguOgv6Bz4T/BB1TniKHjuQ9ZpTYtMeJqQLtSmQZ OLUb6t1t/8M43JjcOTA1eUtXhj/+LC6AMqolL1eniSD/Z/qhPGowDRi8bXqTJoDf ag1eRWe255dXb/wo0cwfbZooHkUzQiY8mYw3OnIUabUx7oD1rukO2wPuV1Y+NZ1R kmiV3cvO8FwF+wQKNqa4ZHC4Sv+47qMBeZXGix1kEBetQGzJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd59pF6na0W5HLS0ex4W9g52DA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTRjZTE2N2UtY2RjNS0z NzcwLTg3YmYtNDRhNDZiYjY5M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0m06PKashWFA7s/uAhTUIgRR1iGpy9mkF3MHAx/y/NEz11o4bOm0ND ASeUgSlNzF2SeyCEKnqHLh9s5JL2m/rh3l7l/xSXvEETvwh0ifk6arVQEAY9w5mD +FcsSAp6HUs/856oMIJDOxBGXzbhbaOnp7wXw6qDGFPwPpafaSdvYjk5MtJZJRi2 GLE0kHdWD66OZw1YpBuCEGA4xgsC+ZK8RTnDptRyvvyiwA4t6/AxOWsbsHC4gMVj wHeSBeyd7xnP3ex1MlbFyOTKfgru+7Co65AUmkidaMDyaJhCWGwLoxNIJP95gNaP jQYHTUu0y1aQwrsBLrkZonU3ECtBkug= -----END CERTIFICATE-----Generated at Mon Nov 25 16:23:05 2024 by rpki-client on console-ams.rpki-client.org