$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa File: f642a687-a386-3ce5-8205-1067458f0238.roa (raw, json) Hash identifier: Fu2QwlvHBWnRR87GMqwP14IjlobfabzCLGf1nP8zTsg= Subject key identifier: 8A:F8:2E:B2:B2:39:3B:95:46:AE:AB:88:13:07:72:FB:E5:06:80:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584731178A4006BD5AA690605500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa Signing time: Thu 12 Sep 2024 17:21:59 +0000 ROA not before: Thu 12 Sep 2024 17:21:59 +0000 ROA not after: Wed 11 Dec 2024 18:21:59 +0000 asID: 7029 IP address blocks: 40.142.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:8a:40:06:bd:5a:a6:90:60:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:21:59 2024 GMT Not After : Dec 11 18:21:59 2024 GMT Subject: CN=5c6663fc-5451-4b9d-ae93-24e386bd2620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:4e:02:a9:f3:55:78:d0:a0:85:64:81:39: 0d:24:51:af:7b:43:db:2e:4a:5d:ac:ad:fc:b0:dd: c2:be:fa:bc:06:52:24:ff:cb:db:4a:d6:de:ca:45: 82:dc:91:bc:2e:4b:80:ca:95:ee:14:e1:86:92:96: 0c:4a:7d:a7:0b:92:61:ac:a1:c3:5d:b7:bd:f6:8b: ac:8a:84:5a:2f:4a:d0:3e:aa:f4:09:51:a4:d0:31: c9:32:3d:02:75:a7:d6:78:be:ed:39:0d:2f:97:2f: e5:a8:95:e6:9f:14:87:24:a2:32:a2:89:ab:6e:08: 1f:dc:ca:4c:9e:b2:a9:20:f3:81:2e:cd:72:33:3a: 25:ab:62:a8:0f:40:5e:d0:d1:ce:f3:b1:82:5d:d8: 51:3e:e7:d0:9e:c0:d4:ad:11:52:a3:e7:a0:d7:52: 71:b2:56:ea:f1:52:93:35:c1:a7:6c:59:12:eb:37: cc:dd:dd:b6:eb:60:3d:ac:63:04:55:a7:7d:e9:72: 0d:d3:af:80:7b:12:d4:ee:b6:56:9d:4c:70:25:4e: 86:cc:22:97:ab:89:34:b1:21:29:d4:3b:7f:94:17: 60:f5:f4:a6:0e:92:90:12:94:25:77:a4:b7:81:f7: 0e:10:8e:59:f1:2e:18:32:32:02:1c:ed:7a:f8:20: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F8:2E:B2:B2:39:3B:95:46:AE:AB:88:13:07:72:FB:E5:06:80:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a1:5f:49:70:db:9a:07:6a:ce:05:46:21:b3:c1:30:e6:35: 96:39:38:ad:36:3d:26:0f:6d:b3:aa:97:56:2c:56:18:04:69: 44:42:66:26:5f:eb:62:b5:0e:5d:3c:e9:dd:8b:e9:ef:ab:09: dd:df:75:3d:65:3c:35:cb:f2:86:6c:1a:ac:ed:18:23:fd:8f: ea:b3:e9:b9:fc:32:0b:74:35:f0:a5:ed:67:45:31:be:9b:62: c5:3d:d9:f9:78:ad:11:10:c9:90:b9:da:43:39:5a:23:42:14: 25:f9:c9:ae:a7:61:58:54:d1:4a:cb:74:74:85:89:ed:5d:f1: 5b:e2:ca:60:c9:74:c5:44:72:c8:59:0a:68:05:f9:c4:b5:fd: f7:4c:73:d4:01:7c:56:5f:a7:f6:8a:ff:b1:4a:75:b1:36:13: b6:12:d8:39:e3:dd:80:08:e8:ab:e9:df:43:0c:c6:4b:8c:c8: 08:8b:d0:95:8a:5b:d0:3e:22:be:b5:b6:4f:6c:79:9d:22:cd: 53:87:e8:b3:b3:9d:75:78:d2:4c:82:ca:9e:c2:16:c0:0f:a9: cf:7f:51:f6:33:43:d2:c0:a1:96:d4:ac:b0:d5:a8:a8:78:d1: 62:bb:f0:83:e0:5b:ce:f3:9b:99:5d:31:3c:c8:85:58:c8:00: df:01:b7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF4pABr1appBgVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjE1OVoXDTI0MTIxMTE4MjE1OVowLzEtMCsGA1UEAxMk NWM2NjYzZmMtNTQ1MS00YjlkLWFlOTMtMjRlMzg2YmQyNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ1OAqnzVXjQoIVkgTkNJFGve0PbLkpdrK38 sN3Cvvq8BlIk/8vbStbeykWC3JG8LkuAypXuFOGGkpYMSn2nC5JhrKHDXbe99ous ioRaL0rQPqr0CVGk0DHJMj0CdafWeL7tOQ0vly/lqJXmnxSHJKIyoomrbggf3MpM nrKpIPOBLs1yMzolq2KoD0Be0NHO87GCXdhRPufQnsDUrRFSo+eg11Jxslbq8VKT NcGnbFkS6zfM3d2262A9rGMEVad96XIN06+AexLU7rZWnUxwJU6GzCKXq4k0sSEp 1Dt/lBdg9fSmDpKQEpQld6S3gfcOEI5Z8S4YMjICHO16+CDvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr4LrKyOTuVRq6riBMHcvvlBoDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY0MmE2ODctYTM4Ni0z Y2U1LTgyMDUtMTA2NzQ1OGYwMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIShX0lw25oHas4FRiGzwTDmNZY5OK02PSYPbbOql1YsVhgEaURCZiZf 62K1Dl086d2L6e+rCd3fdT1lPDXL8oZsGqztGCP9j+qz6bn8Mgt0NfCl7WdFMb6b YsU92fl4rREQyZC52kM5WiNCFCX5ya6nYVhU0UrLdHSFie1d8VviymDJdMVEcshZ CmgF+cS1/fdMc9QBfFZfp/aK/7FKdbE2E7YS2Dnj3YAI6Kvp30MMxkuMyAiL0JWK W9A+Ir61tk9seZ0izVOH6LOznXV40kyCyp7CFsAPqc9/UfYzQ9LAoZbUrLDVqKh4 0WK78IPgW87zm5ldMTzIhVjIAN8Bt3U= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:39 2024 by rpki-client on console-fra.rpki-client.org