$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa File: e84585a5-4a69-301b-9de8-1242f9d90bed.roa (raw, json) Hash identifier: o6w1cxRJORNle9/Q/ulGMTpWe+n1oh8ERHnegQgbkL4= Subject key identifier: 2C:DD:F5:A0:42:81:1B:63:7B:DD:3E:0E:93:0F:5E:80:B1:6A:A3:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155413A5F36D2B39EC08900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 21881 IP address blocks: 66.153.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:41:3a:5f:36:d2:b3:9e:c0:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a247f920-a716-40e2-b8d5-4ded9a72bf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:dd:20:82:b3:e4:f9:0d:14:20:c6:58:9d: ec:c1:a4:e5:62:c9:a3:c2:e9:d8:8e:6f:57:69:0d: 9a:c7:4d:15:3b:8e:3b:d2:ae:4d:ae:f9:16:ae:6c: 53:cd:30:c1:dc:1c:68:1a:0b:23:cb:5d:6b:58:6c: 60:75:10:88:b9:5a:4d:1e:4c:99:e0:58:07:10:80: 74:ef:83:72:2b:cf:69:e1:56:a5:31:4c:4c:55:02: bd:50:65:b8:ba:2b:92:18:f9:20:78:f7:02:e0:5f: 91:bc:ed:ad:ef:9e:7a:75:77:d1:65:8b:25:bb:05: 57:1d:3c:48:83:ba:d3:f8:2a:53:6e:f4:a2:64:d4: 82:c3:41:2d:76:61:c9:54:ef:1c:fc:e5:98:52:0c: b9:d1:c1:66:e3:3f:b0:bb:e0:6a:1e:f6:5c:ad:e1: 51:04:eb:25:d7:25:71:1e:39:0a:8b:30:ab:94:4f: df:be:30:18:20:b3:da:44:67:4f:26:da:0e:e1:5d: 3a:33:8a:10:eb:c0:1e:b4:d0:25:81:77:75:e2:d5: 86:2b:12:f6:d5:69:51:14:4d:0f:0e:e0:04:35:f4: 88:e9:48:0d:8d:4b:49:7a:64:36:75:89:2a:f7:47: 22:e6:02:81:9c:80:f3:03:9d:7b:20:84:84:74:86: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DD:F5:A0:42:81:1B:63:7B:DD:3E:0E:93:0F:5E:80:B1:6A:A3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e84585a5-4a69-301b-9de8-1242f9d90bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:03:0e:3c:49:aa:26:3b:53:f4:92:2e:f0:47:eb:34:53:a2: 28:d6:eb:8b:45:62:20:ce:8b:e4:6f:e6:b8:b2:67:0b:ce:f0: 33:3c:95:44:d5:70:da:eb:10:51:d9:f9:59:d3:9d:82:8a:b3: 79:ae:b7:5a:eb:a7:c2:66:61:90:c3:a1:64:63:ff:6c:eb:88: e9:29:c7:0c:b0:fe:b1:2c:1f:3f:d2:3e:ba:5b:83:b6:24:f0: 04:ef:2c:5e:55:18:19:bc:af:b4:35:2a:7f:42:79:54:65:f1: e4:3d:24:3e:99:5c:b8:0b:57:0d:c9:50:fa:b3:10:66:3c:8b: 10:b9:5b:7a:7b:c9:49:ad:c2:27:c9:ca:d1:1a:2f:a0:de:fb: ec:00:4b:bb:28:c5:7d:3b:f0:24:d7:28:af:3e:58:ed:15:4d: 5d:c6:79:2b:63:49:6e:18:a8:ae:64:19:36:42:4b:b2:d5:ac: 35:b3:d8:3b:b2:59:64:33:7d:ea:52:b0:ed:49:95:ba:f2:07: a8:bb:76:e7:bf:39:b8:51:56:df:fa:21:8d:cd:02:2f:7a:64: a5:75:88:ee:4d:ae:41:21:ab:ac:f9:b4:df:0a:2e:eb:4c:31: a5:45:bb:b4:8f:6c:95:27:09:91:57:85:0f:80:dc:54:8b:5f: 1d:cc:fe:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUE6XzbSs57AiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTI0N2Y5MjAtYTcxNi00MGUyLWI4ZDUtNGRlZDlhNzJiZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqXdIIKz5PkNFCDGWJ3swaTlYsmjwunYjm9X aQ2ax00VO4470q5NrvkWrmxTzTDB3BxoGgsjy11rWGxgdRCIuVpNHkyZ4FgHEIB0 74NyK89p4ValMUxMVQK9UGW4uiuSGPkgePcC4F+RvO2t7556dXfRZYsluwVXHTxI g7rT+CpTbvSiZNSCw0EtdmHJVO8c/OWYUgy50cFm4z+wu+BqHvZcreFRBOsl1yVx HjkKizCrlE/fvjAYILPaRGdPJtoO4V06M4oQ68AetNAlgXd14tWGKxL21WlRFE0P DuAENfSI6UgNjUtJemQ2dYkq90ci5gKBnIDzA517IISEdIazcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzd9aBCgRtje90+DpMPXoCxaqMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg0NTg1YTUtNGE2OS0z MDFiLTlkZTgtMTI0MmY5ZDkwYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcDDjxJqiY7U/SSLvBH6zRToijW64tFYiDOi+Rv5riyZwvO8DM8lUTV cNrrEFHZ+VnTnYKKs3mut1rrp8JmYZDDoWRj/2zriOkpxwyw/rEsHz/SPrpbg7Yk 8ATvLF5VGBm8r7Q1Kn9CeVRl8eQ9JD6ZXLgLVw3JUPqzEGY8ixC5W3p7yUmtwifJ ytEaL6De++wAS7soxX078CTXKK8+WO0VTV3GeStjSW4YqK5kGTZCS7LVrDWz2Duy WWQzfepSsO1JlbryB6i7due/ObhRVt/6IY3NAi96ZKV1iO5NrkEhq6z5tN8KLutM MaVFu7SPbJUnCZFXhQ+A3FSLXx3M/sU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:57 2024 by rpki-client on console-ams.rpki-client.org