$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa File: e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa (raw, json) Hash identifier: HTnKmsbqxUQV/LRztIcONc+ZrXHgVEvBXGExkQLvnDQ= Subject key identifier: FE:B8:8F:F4:4F:F8:B9:02:A6:A3:BB:4B:BE:71:F6:D0:35:79:F9:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15502308E9A2B6A3E2241A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 139.55.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:02:30:8e:9a:2b:6a:3e:22:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=78e71413-4bea-4a7d-843a-e52c267fcbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:10:b8:12:15:f1:ff:6b:71:23:3e:3c:b0: 6a:98:9c:eb:ff:0d:d6:7c:de:11:b8:4f:19:88:3d: a9:69:c3:1c:48:ce:23:46:79:d1:10:98:d9:be:d0: e3:e0:37:25:6f:39:91:83:4d:df:af:41:02:19:0e: da:dd:50:21:21:87:e0:58:3f:d5:fe:a8:22:1c:49: 3e:68:f9:e6:8e:53:f4:9d:41:5d:d9:e8:65:3a:d8: 3b:67:4d:ea:ce:a2:42:9e:80:63:c6:70:d5:96:c1: 42:ba:55:89:f8:5a:56:20:5c:d3:9b:e9:cc:83:8c: 0d:c5:f8:89:b7:9a:d9:56:f3:db:e1:63:99:32:dc: d2:d7:30:8e:44:39:ce:09:70:33:ae:5f:2f:b4:a6: 0e:cf:d8:34:ef:aa:1a:20:af:87:a1:66:60:11:e3: 7f:d8:e1:42:ab:68:d7:b3:d0:62:61:02:a7:50:3b: 79:90:b3:4a:9f:ea:cc:4d:36:9a:26:0e:1a:df:1a: 31:7a:9c:a3:b1:37:9e:b7:66:d5:61:97:db:05:e1: 43:5a:39:27:a7:37:92:fb:c4:e1:6b:b9:d1:5f:d3: 3c:42:b8:e6:39:b3:42:e2:44:5f:5a:d3:6e:88:c3: d6:3a:14:67:c9:69:94:77:b7:fc:4e:e5:7a:79:a5: 00:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:8F:F4:4F:F8:B9:02:A6:A3:BB:4B:BE:71:F6:D0:35:79:F9:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6c8d05d-9f46-35d3-afe0-7f720cae81c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9f:3b:42:03:1d:8b:87:98:17:51:f4:39:2c:f8:92:65:1a: 5f:1b:87:ab:81:c8:b1:5d:e3:c7:7a:7f:7d:80:10:12:ce:b2: ef:39:75:b5:0a:a6:bb:91:4d:21:69:12:56:32:08:2e:e9:40: 69:24:af:d7:e6:38:0b:13:22:65:47:2d:85:a1:81:ee:0b:c1: 21:c8:3c:92:67:0b:85:1d:fc:e0:f8:c4:43:c6:70:d8:9a:e9: d1:78:ec:74:1e:27:96:ec:4f:d1:e6:7c:5e:4e:dd:a7:39:10: 43:84:15:16:91:96:09:71:42:4a:60:8d:40:ba:76:d8:fa:c8: 29:e2:03:e1:19:28:fc:a5:02:09:3a:50:cd:df:80:f1:6c:01: a2:b2:51:28:6a:ba:03:2c:d5:8e:df:66:eb:89:52:68:40:18: 08:46:38:c5:27:50:03:97:07:d9:44:6f:e9:7d:49:1a:4c:f7: c1:d6:8b:0a:5a:fb:8c:61:d0:d3:39:1f:03:35:de:25:08:3c: 5d:9a:cf:c8:80:0a:61:47:95:bf:53:03:73:0d:43:7f:69:ab: 43:77:50:10:3c:fe:4a:4f:c1:ef:2a:3b:69:2e:be:fb:d2:78: ad:02:93:7e:71:5f:20:c8:a4:13:78:45:1a:e9:4f:2a:40:61: 3c:08:36:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQIwjporaj4iQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NzhlNzE0MTMtNGJlYS00YTdkLTg0M2EtZTUyYzI2N2ZjYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqgQuBIV8f9rcSM+PLBqmJzr/w3WfN4RuE8Z iD2pacMcSM4jRnnREJjZvtDj4DclbzmRg03fr0ECGQ7a3VAhIYfgWD/V/qgiHEk+ aPnmjlP0nUFd2ehlOtg7Z03qzqJCnoBjxnDVlsFCulWJ+FpWIFzTm+nMg4wNxfiJ t5rZVvPb4WOZMtzS1zCORDnOCXAzrl8vtKYOz9g076oaIK+HoWZgEeN/2OFCq2jX s9BiYQKnUDt5kLNKn+rMTTaaJg4a3xoxepyjsTeet2bVYZfbBeFDWjknpzeS+8Th a7nRX9M8QrjmObNC4kRfWtNuiMPWOhRnyWmUd7f8TuV6eaUAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP64j/RP+LkCpqO7S75x9tA1efm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTZjOGQwNWQtOWY0Ni0z NWQzLWFmZTAtN2Y3MjBjYWU4MWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAize4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2fO0IDHYuHmBdR9Dks+JJlGl8bh6uByLFd48d6f32AEBLOsu85dbUK pruRTSFpElYyCC7pQGkkr9fmOAsTImVHLYWhge4LwSHIPJJnC4Ud/OD4xEPGcNia 6dF47HQeJ5bsT9HmfF5O3ac5EEOEFRaRlglxQkpgjUC6dtj6yCniA+EZKPylAgk6 UM3fgPFsAaKyUShqugMs1Y7fZuuJUmhAGAhGOMUnUAOXB9lEb+l9SRpM98HWiwpa +4xh0NM5HwM13iUIPF2az8iACmFHlb9TA3MNQ39pq0N3UBA8/kpPwe8qO2kuvvvS eK0Ck35xXyDIpBN4RRrpTypAYTwINkM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:05 2024 by rpki-client on console-ams.rpki-client.org