$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4064fd8-42be-3a12-80fa-cd44f427220a.roa File: f4064fd8-42be-3a12-80fa-cd44f427220a.roa (raw, json) Hash identifier: GJI0gEpyDoJC+Mwjo0voTj2cPzX2Rtf7oYIbijqm4/k= Subject key identifier: 5E:2A:74:63:38:AC:3D:AD:5E:04:C5:0B:34:78:1C:CE:90:58:99:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15515FC1EBAFED14BADCB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4064fd8-42be-3a12-80fa-cd44f427220a.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 30544 IP address blocks: 206.245.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:15:fc:1e:ba:fe:d1:4b:ad:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=35b36e4c-01fb-4c67-b0f7-0af54c61c565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:0d:5e:b1:4c:29:25:f2:dd:8a:3f:47:70: d4:a7:f6:46:5e:a4:05:23:1a:74:98:7d:c7:96:1c: a7:d8:02:46:0a:8a:16:7d:64:9d:44:e7:20:a9:a5: 80:33:14:db:7e:13:fe:1e:aa:66:72:81:47:2d:d2: 8a:2c:f3:14:54:b6:f6:17:24:34:43:a7:ad:0a:8e: a8:46:36:f7:8f:7d:78:0b:79:57:74:6e:61:f7:07: d1:35:48:9a:98:b8:4a:1d:28:9f:e9:d9:fc:c2:52: 09:73:f7:d0:02:b3:d6:14:0b:37:83:a8:97:91:ba: b5:66:de:88:84:f7:c6:6c:d4:60:39:e6:3d:04:23: 82:b7:1c:14:6a:29:80:c8:19:58:a1:29:da:1f:86: 9b:9d:f3:3b:cd:6f:08:bf:3c:29:5a:0f:61:2a:33: 4f:90:25:e8:07:f2:af:12:51:36:0d:14:f3:19:44: 3c:d2:a3:0f:5b:ee:16:cb:bd:85:5d:e2:b7:9d:c6: 82:a6:17:4d:3a:0b:8b:c6:0e:c8:2f:31:d1:11:47: 25:9c:0a:61:13:af:c0:af:e9:1f:21:ed:aa:f1:9e: 1a:96:03:33:1d:be:fc:c8:35:9a:56:e0:85:46:77: a7:63:d0:26:48:0e:1b:6f:59:b3:59:90:bc:bb:33: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2A:74:63:38:AC:3D:AD:5E:04:C5:0B:34:78:1C:CE:90:58:99:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4064fd8-42be-3a12-80fa-cd44f427220a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 206.245.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1c:38:bd:8a:e9:1b:96:37:4d:51:7f:5f:2c:b0:47:f4:e4: 1c:95:d1:cd:5f:b7:67:d5:14:ec:3b:53:a2:02:40:ff:23:f1: cc:b4:c3:fb:75:04:78:a1:2c:d3:d5:a3:c4:90:9a:e7:8f:39: 2d:c0:35:91:e3:84:55:cc:fa:d6:5d:82:2d:9b:fe:9f:41:6e: 11:b5:ed:b3:84:10:9f:24:de:b5:69:59:45:54:6e:74:cf:75: 15:fb:f4:88:8f:b7:e5:12:a0:55:90:08:a0:59:39:a6:63:e3: 21:03:f5:46:29:ef:dd:f4:75:b7:c2:cb:95:10:70:52:ee:e2: 09:2f:bc:22:59:2b:dc:da:62:73:e0:b9:8e:a9:65:c4:70:36: db:59:bd:7e:c5:e3:59:da:cb:35:b6:90:62:ad:37:88:d7:53: 60:39:43:00:c5:78:e3:d7:b2:6b:02:ad:cf:77:e1:9f:78:de: 04:d0:e8:ee:82:4f:c8:9e:ff:b2:8f:a9:1b:18:5e:13:10:df: 68:03:3c:a8:b2:77:5a:81:72:4c:33:c5:c0:91:69:a0:b8:a7: 70:e1:2f:f5:e7:f7:7f:83:2f:5e:32:ad:40:44:0d:90:ab:2c: 57:08:dc:a5:b1:3c:be:68:18:fd:75:0d:b6:75:11:8c:1a:ab: 03:fb:52:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRX8Hrr+0UutywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MzViMzZlNGMtMDFmYi00YzY3LWIwZjctMGFmNTRjNjFjNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhANXrFMKSXy3Yo/R3DUp/ZGXqQFIxp0mH3H lhyn2AJGCooWfWSdROcgqaWAMxTbfhP+HqpmcoFHLdKKLPMUVLb2FyQ0Q6etCo6o Rjb3j314C3lXdG5h9wfRNUiamLhKHSif6dn8wlIJc/fQArPWFAs3g6iXkbq1Zt6I hPfGbNRgOeY9BCOCtxwUaimAyBlYoSnaH4abnfM7zW8IvzwpWg9hKjNPkCXoB/Kv ElE2DRTzGUQ80qMPW+4Wy72FXeK3ncaCphdNOguLxg7ILzHREUclnAphE6/Ar+kf Ie2q8Z4algMzHb78yDWaVuCFRnenY9AmSA4bb1mzWZC8uzPK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4qdGM4rD2tXgTFCzR4HM6QWJkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQwNjRmZDgtNDJiZS0z YTEyLTgwZmEtY2Q0NGY0MjcyMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvW2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMcOL2K6RuWN01Rf18ssEf05ByV0c1ft2fVFOw7U6ICQP8j8cy0w/t1 BHihLNPVo8SQmuePOS3ANZHjhFXM+tZdgi2b/p9BbhG17bOEEJ8k3rVpWUVUbnTP dRX79IiPt+USoFWQCKBZOaZj4yED9UYp7930dbfCy5UQcFLu4gkvvCJZK9zaYnPg uY6pZcRwNttZvX7F41nayzW2kGKtN4jXU2A5QwDFeOPXsmsCrc934Z943gTQ6O6C T8ie/7KPqRsYXhMQ32gDPKiyd1qBckwzxcCRaaC4p3DhL/Xn93+DL14yrUBEDZCr LFcI3KWxPL5oGP11DbZ1EYwaqwP7Ukc= -----END CERTIFICATE-----Generated at Mon Nov 25 16:23:09 2024 by rpki-client on console-ams.rpki-client.org