$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e930e31f-afd9-323b-b4da-5a904ab35d2d.roa File: e930e31f-afd9-323b-b4da-5a904ab35d2d.roa (raw, json) Hash identifier: nKJUcM4v57fyYwbwZ/RUjdoAr+09Oc3e4ISlSAzdhTc= Subject key identifier: 0E:CD:3F:0F:99:08:C7:6E:8F:7C:7B:E1:21:51:A8:ED:2F:42:9A:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155287FB27EF40B1FEA0144 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e930e31f-afd9-323b-b4da-5a904ab35d2d.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7018 IP address blocks: 209.125.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:28:7f:b2:7e:f4:0b:1f:ea:01:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=99bbe566-d2ff-4360-90ad-8a3c4576dc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:67:6b:ab:76:59:11:d7:3a:1a:74:15:76: 2b:f7:4a:e7:63:3a:33:71:1c:45:52:37:ec:c0:81: f9:44:1d:ba:4f:e6:e4:28:26:32:1e:39:26:65:8f: d5:4a:ae:ed:71:84:18:9b:70:8f:23:68:3c:c0:17: 5b:bd:2b:3d:68:32:f0:ca:57:c5:ab:50:99:08:3a: e7:68:6c:bf:00:9c:95:7a:f7:29:43:21:41:be:d7: b6:04:14:28:d7:20:64:b7:1c:6e:47:c8:85:a4:b4: 12:eb:d0:f2:63:81:6a:d0:c5:d4:43:56:4e:6f:17: 8a:fb:e2:f6:b3:f1:b0:51:5c:b5:04:ad:16:a3:77: 4a:3d:b0:9e:17:10:8c:7c:6f:30:88:4c:3d:c3:50: dc:3a:8b:ed:75:19:09:ed:5d:83:86:de:c8:fe:56: 0c:85:fa:21:54:84:70:7a:95:e1:55:1b:75:be:22: 35:a4:0a:30:98:a5:f2:cf:61:0c:90:03:8f:1b:95: eb:21:6b:73:33:d8:f4:4c:43:ec:55:3a:de:99:ff: e3:05:77:0f:cd:52:80:69:f0:0c:b0:8b:cb:1e:47: 03:eb:72:c7:b4:e3:8e:74:6c:3f:48:a4:f8:7d:ef: 7b:a8:1c:50:0f:37:aa:05:65:e9:0a:c2:2d:a3:cf: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CD:3F:0F:99:08:C7:6E:8F:7C:7B:E1:21:51:A8:ED:2F:42:9A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e930e31f-afd9-323b-b4da-5a904ab35d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.125.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:eb:fb:0e:04:59:ba:62:4a:10:5c:74:8c:63:95:f5:98:c8: a7:ca:3d:4b:22:02:72:cb:b6:8e:55:52:66:28:38:66:38:df: 39:48:b6:84:a0:fb:09:26:18:52:66:de:c9:35:02:a1:d3:94: 99:1e:c2:2c:f8:71:14:c0:e5:79:2a:ea:f2:34:6c:d1:41:bd: d3:0d:7c:16:24:1c:db:8f:0e:de:68:f3:df:af:ec:03:9c:b9: 54:e8:b8:bf:c1:a4:08:75:5d:56:f3:5b:ea:bb:4d:75:db:4a: 98:74:34:6a:5e:1c:9d:86:82:b0:2f:56:62:4c:04:9c:b6:87: 4f:06:6d:4d:63:c9:ab:7e:52:81:f0:30:3e:e7:08:38:db:22: bb:6d:fb:ca:4b:ea:4f:3b:cd:b1:23:36:c8:4f:23:58:38:99: 47:4f:2a:da:43:03:cf:6b:f5:19:2e:9e:4c:77:64:53:8a:ea: 33:08:0b:37:ae:b1:e6:62:39:be:02:90:ec:e7:21:ba:43:fd: 41:76:31:69:57:78:39:cf:94:21:f6:39:ba:d1:b7:b6:65:48: 4c:ca:cb:a8:21:7a:74:1d:e1:1b:7b:2d:94:af:ee:37:6c:c8: 5d:6f:3a:ab:29:cc:e2:f1:59:ce:6e:67:97:eb:a0:19:00:f1: 5b:9b:27:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSh/sn70Cx/qAUQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTliYmU1NjYtZDJmZi00MzYwLTkwYWQtOGEzYzQ1NzZkYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt21na6t2WRHXOhp0FXYr90rnYzozcRxFUjfs wIH5RB26T+bkKCYyHjkmZY/VSq7tcYQYm3CPI2g8wBdbvSs9aDLwylfFq1CZCDrn aGy/AJyVevcpQyFBvte2BBQo1yBktxxuR8iFpLQS69DyY4Fq0MXUQ1ZObxeK++L2 s/GwUVy1BK0Wo3dKPbCeFxCMfG8wiEw9w1DcOovtdRkJ7V2Dht7I/lYMhfohVIRw epXhVRt1viI1pAowmKXyz2EMkAOPG5XrIWtzM9j0TEPsVTremf/jBXcPzVKAafAM sIvLHkcD63LHtOOOdGw/SKT4fe97qBxQDzeqBWXpCsIto88IKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7NPw+ZCMduj3x74SFRqO0vQpqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTkzMGUzMWYtYWZkOS0z MjNiLWI0ZGEtNWE5MDRhYjM1ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbr+w4EWbpiShBcdIxjlfWYyKfKPUsiAnLLto5VUmYoOGY43zlItoSg +wkmGFJm3sk1AqHTlJkewiz4cRTA5Xkq6vI0bNFBvdMNfBYkHNuPDt5o89+v7AOc uVTouL/BpAh1XVbzW+q7TXXbSph0NGpeHJ2GgrAvVmJMBJy2h08GbU1jyat+UoHw MD7nCDjbIrtt+8pL6k87zbEjNshPI1g4mUdPKtpDA89r9Rkunkx3ZFOK6jMICzeu seZiOb4CkOznIbpD/UF2MWlXeDnPlCH2ObrRt7ZlSEzKy6ghenQd4Rt7LZSv7jds yF1vOqspzOLxWc5uZ5froBkA8VubJwE= -----END CERTIFICATE-----Generated at Mon Nov 25 03:13:08 2024 by rpki-client on console-ams.rpki-client.org