$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa File: fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa (raw, json) Hash identifier: KRD5Fi/aFM97vqDc51Q592HbUFL9RcApx2eFr7i0Ffw= Subject key identifier: 6F:B2:C2:DF:9C:C2:92:35:1D:0C:33:AC:DD:F8:98:F1:21:73:28:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15514DF8AA4CE56A817C080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 27338 IP address blocks: 209.192.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:14:df:8a:a4:ce:56:a8:17:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=06bf533a-6df6-4a2a-874a-d0bfec9a190c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:ec:f9:4a:18:46:c2:b1:2e:92:c4:68:85: a3:70:e8:a7:c8:3c:0a:00:7a:74:99:f7:a4:9a:d8: 43:6c:3f:99:ea:1f:88:ec:54:95:91:c9:0f:d1:aa: 09:f8:63:8e:64:38:89:72:f2:06:d7:be:dc:49:b5: 4f:4e:2b:3a:72:37:19:5f:57:81:64:36:4b:0c:ee: a6:a2:48:c8:f3:f6:b7:96:01:6b:28:4f:b3:95:e2: f6:5f:78:ed:32:03:06:94:57:27:95:2f:8c:cd:02: 26:ff:d8:e5:c2:9e:71:4b:bc:bf:22:46:17:c4:ce: a1:04:57:df:ff:2c:c6:d3:b1:b2:11:e3:82:be:12: 23:56:a6:c0:de:83:96:ac:f9:c6:cd:95:25:93:b1: ee:d1:d1:6e:79:9d:65:0f:7e:c7:77:9f:69:37:10: 88:ea:fa:8e:21:ba:b3:f9:30:9f:09:0c:c7:ee:27: 26:a9:26:02:9e:d9:5c:66:60:40:77:c7:f7:77:c1: 5a:37:1e:15:ce:02:b7:4e:50:2a:f4:fa:42:e7:92: 76:7c:5f:69:e2:a6:5b:bd:64:3b:2c:6c:b2:11:4b: 6f:33:bc:17:ed:43:7b:60:e2:57:43:54:a4:89:e5: 0a:9b:a5:fa:32:49:04:62:c6:aa:63:59:94:36:d9: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B2:C2:DF:9C:C2:92:35:1D:0C:33:AC:DD:F8:98:F1:21:73:28:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe13a870-125a-333b-aa1c-7e5a5d7f7ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:97:dd:91:22:b4:3d:ef:80:f4:b6:ba:a4:89:0b:22:b9:dc: 99:2e:7c:16:c7:03:8d:cd:b4:fc:07:0b:50:bf:39:09:47:63: 66:e7:b8:73:21:ee:54:43:a5:f8:85:9c:11:55:b3:1b:8c:db: 16:45:9c:66:41:d7:91:34:a0:ec:9c:59:01:cb:60:35:bb:e0: 1c:1e:b0:c6:f2:c9:fd:46:54:50:52:a6:0f:4a:77:58:b2:fb: 50:de:8c:eb:66:91:c3:81:a2:b7:65:71:b1:bc:6e:6f:ad:45: 33:eb:65:eb:ff:29:8c:4c:46:3e:24:e6:36:ab:7f:39:64:21: f4:13:eb:9e:e5:8f:2b:64:95:f3:df:b3:ab:58:ea:e5:41:08: bf:4b:db:ec:3a:d9:67:f0:b7:ff:f1:19:77:22:c5:31:2b:a5: b9:56:96:c3:8f:1a:56:be:d0:3a:10:e4:69:4c:af:69:2b:57: 17:e9:a6:da:93:c7:2d:a9:71:0a:c7:3b:6d:51:eb:82:70:fa: a7:5c:df:0f:10:f9:e2:ce:fc:61:ff:78:37:44:04:e5:79:ee: 60:8b:20:1f:eb:81:76:6c:91:09:b9:76:ba:e9:1b:24:cd:c8: 08:c7:0b:97:7a:0f:3e:48:43:4c:3f:d2:8c:a7:b0:eb:af:bb: e8:ac:b7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRTfiqTOVqgXwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MDZiZjUzM2EtNmRmNi00YTJhLTg3NGEtZDBiZmVjOWExOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dLs+UoYRsKxLpLEaIWjcOinyDwKAHp0mfek mthDbD+Z6h+I7FSVkckP0aoJ+GOOZDiJcvIG177cSbVPTis6cjcZX1eBZDZLDO6m okjI8/a3lgFrKE+zleL2X3jtMgMGlFcnlS+MzQIm/9jlwp5xS7y/IkYXxM6hBFff /yzG07GyEeOCvhIjVqbA3oOWrPnGzZUlk7Hu0dFueZ1lD37Hd59pNxCI6vqOIbqz +TCfCQzH7icmqSYCntlcZmBAd8f3d8FaNx4VzgK3TlAq9PpC55J2fF9p4qZbvWQ7 LGyyEUtvM7wX7UN7YOJXQ1SkieUKm6X6MkkEYsaqY1mUNtlYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+ywt+cwpI1HQwzrN34mPEhcyhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmUxM2E4NzAtMTI1YS0z MzNiLWFhMWMtN2U1YTVkN2Y3ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyX3ZEitD3vgPS2uqSJCyK53JkufBbHA43NtPwHC1C/OQlHY2bnuHMh 7lRDpfiFnBFVsxuM2xZFnGZB15E0oOycWQHLYDW74BwesMbyyf1GVFBSpg9Kd1iy +1DejOtmkcOBordlcbG8bm+tRTPrZev/KYxMRj4k5jarfzlkIfQT657ljytklfPf s6tY6uVBCL9L2+w62Wfwt//xGXcixTErpblWlsOPGla+0DoQ5GlMr2krVxfpptqT xy2pcQrHO21R64Jw+qdc3w8Q+eLO/GH/eDdEBOV57mCLIB/rgXZskQm5drrpGyTN yAjHC5d6Dz5IQ0w/0oynsOuvu+ist/A= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:04 2024 by rpki-client on console-ams.rpki-client.org