$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa File: fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa (raw, json) Hash identifier: MC/VWOSe40zrGxQY/tilSsFVaY/4qlmzj598zcjNbY4= Subject key identifier: 08:B3:55:D9:E6:21:0C:14:3D:67:2B:CD:75:AC:30:91:F8:F4:3E:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15519B414FC248E9ED07B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 395567 IP address blocks: 97.67.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:19:b4:14:fc:24:8e:9e:d0:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=80b1f71f-895a-4f90-ac5a-1e4406e03894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:04:d0:ba:f5:b0:33:49:16:32:ec:f9:6e: 1f:94:47:b4:20:e9:dc:3d:be:a6:70:ad:26:c0:8e: 51:4a:1f:5e:21:fb:9b:3a:4e:f3:a5:17:ea:d6:f6: a2:c6:7b:67:c3:56:2e:40:c2:37:f0:aa:3e:3e:a3: 64:ae:a3:9f:d2:b8:c5:5e:b4:75:a5:ee:90:40:4c: d3:11:67:7b:28:60:36:d4:2f:e8:fb:07:ea:33:80: cc:c1:90:0b:09:ec:43:1c:01:f4:fc:f2:2a:18:f2: 34:84:a6:53:de:99:08:69:e3:0e:17:39:1c:93:8a: 9c:57:df:b4:00:6d:72:1a:41:15:02:3b:06:c5:c8: 28:62:b8:ee:d8:03:29:b5:0b:0a:01:a0:1d:9c:81: 59:40:36:b5:3f:3f:53:a2:1a:02:52:16:c5:c3:43: f7:03:a3:fe:05:f4:3e:2b:c3:a3:e5:63:9b:c1:e4: 5a:c0:1b:b7:a5:a4:c2:7f:a6:b3:01:b7:7b:47:93: 93:ff:a9:cb:27:9b:cf:4f:bc:97:9c:c1:56:9b:ec: 83:4c:92:87:bb:09:97:0f:90:1d:62:bd:a8:5f:6d: 44:aa:5a:e9:12:aa:87:f7:41:c3:ad:e0:26:e9:be: fb:af:cd:f7:30:8d:ed:7a:2c:6b:39:e5:3e:c5:69: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B3:55:D9:E6:21:0C:14:3D:67:2B:CD:75:AC:30:91:F8:F4:3E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.67.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:02:bb:df:16:ee:c1:6e:9f:fc:b0:b3:e2:61:15:2a:9f:3a: bb:1b:e0:81:a4:dc:a0:82:59:a6:85:d8:ee:b5:3f:12:2a:b1: 11:49:7c:28:ae:ff:a1:38:99:a2:79:b2:ca:ff:02:6a:8f:b4: 09:5c:88:51:1b:b9:f4:55:7d:7d:c2:5c:be:4d:d8:67:ef:5a: b4:c8:0f:a6:b7:2c:5f:ab:c6:b4:1a:39:10:3d:12:31:58:5d: 55:b8:6b:e4:81:41:4b:ee:a2:e0:37:39:21:f7:8a:af:ea:a2: 69:fd:90:cf:5b:ab:2d:0c:bb:4c:5d:71:a8:19:90:31:96:dc: c8:ce:ef:3c:11:28:1e:14:f8:6a:e3:99:b3:df:a7:5a:2d:0d: a0:b9:a3:5c:de:40:81:b4:88:15:ab:d5:13:43:a2:87:89:3e: 64:d2:74:39:7d:fa:db:bc:94:d4:f2:b9:a2:67:15:a0:54:7e: 34:8a:a2:5e:3f:ce:e2:cf:ee:a1:0a:56:2b:ca:bc:69:b2:f7: 62:e9:20:2e:6a:5d:32:c2:68:b0:1f:48:56:5b:d1:23:07:0a: 29:8e:70:db:df:95:ee:e7:0e:8b:2c:db:1b:85:87:12:40:3d: 36:5c:a6:54:56:55:b0:2b:a0:9a:88:c0:a0:5f:b2:ab:3f:ab: 90:16:57:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRm0FPwkjp7QewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODBiMWY3MWYtODk1YS00ZjkwLWFjNWEtMWU0NDA2ZTAzODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNoE0Lr1sDNJFjLs+W4flEe0IOncPb6mcK0m wI5RSh9eIfubOk7zpRfq1vaixntnw1YuQMI38Ko+PqNkrqOf0rjFXrR1pe6QQEzT EWd7KGA21C/o+wfqM4DMwZALCexDHAH0/PIqGPI0hKZT3pkIaeMOFzkck4qcV9+0 AG1yGkEVAjsGxcgoYrju2AMptQsKAaAdnIFZQDa1Pz9TohoCUhbFw0P3A6P+BfQ+ K8Oj5WObweRawBu3paTCf6azAbd7R5OT/6nLJ5vPT7yXnMFWm+yDTJKHuwmXD5Ad Yr2oX21EqlrpEqqH90HDreAm6b77r833MI3teixrOeU+xWnO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAizVdnmIQwUPWcrzXWsMJH49D44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI4YWU1MTUtNWFlOS0z NTJhLWJlMDYtMDJhZTA0OWRmZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAICu98W7sFun/yws+JhFSqfOrsb4IGk3KCCWaaF2O61PxIqsRFJfCiu /6E4maJ5ssr/AmqPtAlciFEbufRVfX3CXL5N2GfvWrTID6a3LF+rxrQaORA9EjFY XVW4a+SBQUvuouA3OSH3iq/qomn9kM9bqy0Mu0xdcagZkDGW3MjO7zwRKB4U+Grj mbPfp1otDaC5o1zeQIG0iBWr1RNDooeJPmTSdDl9+tu8lNTyuaJnFaBUfjSKol4/ zuLP7qEKVivKvGmy92LpIC5qXTLCaLAfSFZb0SMHCimOcNvfle7nDoss2xuFhxJA PTZcplRWVbAroJqIwKBfsqs/q5AWV3U= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:02 2024 by rpki-client on console-ams.rpki-client.org