$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa File: 06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa (raw, json) Hash identifier: b1H95x+3CdO28JCtxe0plvCsykEB83/2e8TRkH/nOio= Subject key identifier: C8:92:4A:A6:E8:09:53:67:31:82:63:95:8F:11:B1:62:5E:42:E9:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847B96163D92C86FE9DC05A3248 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.90.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:63:d9:2c:86:fe:9d:c0:5a:32:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=4da50164-e0f7-4cf1-a583-c4b3e3b22c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:ec:23:b4:26:04:0e:b4:3f:99:c5:ea:b6: 9a:08:f0:3e:51:2b:44:a6:9b:67:a0:fa:27:b3:8a: 92:5b:74:a3:b3:c2:ec:8a:3c:8c:3c:44:38:5b:1e: 20:25:e4:29:14:50:02:ae:87:a5:76:f9:d2:17:46: e4:9d:4a:b7:1e:ec:da:7c:cc:d4:78:c8:64:13:3c: f9:4c:c3:de:d6:bc:65:d4:b0:43:db:a2:a6:c5:7f: 85:0e:d9:e6:a7:40:8a:75:90:06:68:36:34:72:dd: 75:1b:da:7e:53:21:70:5f:39:25:9e:c1:9a:5b:a9: 9e:1e:29:0f:6b:ab:0e:79:df:1a:54:eb:c7:fe:27: b4:3a:0d:e5:74:76:0b:a3:00:e9:28:72:d5:2d:dd: 5f:b0:09:91:e4:ba:cd:37:2a:7c:32:3e:73:58:52: 1a:63:3d:38:bf:20:d2:2c:0a:53:b9:55:3a:13:9d: 8a:42:23:a5:32:e8:62:5f:cd:94:c4:a4:0c:96:37: 28:76:fb:f4:26:37:1b:a0:ab:fc:a9:46:e0:4d:46: a6:da:2f:11:9d:17:0a:d8:f7:af:79:fb:79:05:99: 33:d5:e4:66:33:88:75:96:4e:72:18:87:d2:1b:87: 3d:15:d6:05:77:83:1f:d0:c7:75:86:82:0b:dc:3f: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:92:4A:A6:E8:09:53:67:31:82:63:95:8F:11:B1:62:5E:42:E9:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5e:ab:f5:22:dc:2e:75:c5:db:6e:65:cf:f6:23:6d:13:45: 4f:fa:33:61:a7:37:f8:12:49:f3:d2:21:97:78:14:6b:92:5b: 41:fe:01:02:6f:76:1a:62:ac:56:7b:57:79:cd:6c:33:a5:3f: 96:67:82:e9:9f:02:0c:92:ad:9f:9f:cb:ae:28:62:da:e4:4c: ae:be:87:db:ab:cf:f0:f5:cd:56:af:d9:75:00:2e:0f:69:28: d8:d5:6b:50:fb:98:59:ac:30:f9:da:a2:21:d4:8c:d8:24:f2: 43:40:cd:29:33:68:c1:08:73:13:56:41:e5:76:a7:65:bf:01: 66:a3:03:5c:35:9f:57:35:e9:02:fc:eb:00:88:d9:4e:a7:6b: 14:fa:c3:c2:31:cf:b1:b2:b4:7d:10:8b:17:0f:70:a2:05:96: 6f:e1:53:2a:12:6c:6b:82:e6:0b:b5:14:18:cd:41:cc:1a:68: db:92:3f:95:c7:68:d8:eb:6c:c2:69:a9:02:df:64:85:2f:75: d9:79:90:60:f7:fc:b4:1a:24:4d:8e:64:3a:a9:c6:01:a1:48: 99:78:16:ef:0e:08:88:4d:e9:2a:28:30:ff:16:51:e6:c7:3a: 7e:75:d2:14:4e:fd:80:e0:e1:58:bc:e8:94:b0:94:3e:25:54: ed:d5:31:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YWPZLIb+ncBaMkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk NGRhNTAxNjQtZTBmNy00Y2YxLWE1ODMtYzRiM2UzYjIyYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll/sI7QmBA60P5nF6raaCPA+UStEpptnoPon s4qSW3Sjs8LsijyMPEQ4Wx4gJeQpFFACroeldvnSF0bknUq3HuzafMzUeMhkEzz5 TMPe1rxl1LBD26KmxX+FDtnmp0CKdZAGaDY0ct11G9p+UyFwXzklnsGaW6meHikP a6sOed8aVOvH/ie0Og3ldHYLowDpKHLVLd1fsAmR5LrNNyp8Mj5zWFIaYz04vyDS LApTuVU6E52KQiOlMuhiX82UxKQMljcodvv0JjcboKv8qUbgTUam2i8RnRcK2Pev eft5BZkz1eRmM4h1lk5yGIfSG4c9FdYFd4Mf0Md1hoIL3D8anwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiSSqboCVNnMYJjlY8RsWJeQulRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDZjYjlhMDEtNmFhYy0z ZDMwLWE4MzktNjBjYjNlNjM4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9eq/Ui3C51xdtuZc/2I20TRU/6M2GnN/gSSfPSIZd4FGuSW0H+AQJv dhpirFZ7V3nNbDOlP5ZngumfAgySrZ+fy64oYtrkTK6+h9urz/D1zVav2XUALg9p KNjVa1D7mFmsMPnaoiHUjNgk8kNAzSkzaMEIcxNWQeV2p2W/AWajA1w1n1c16QL8 6wCI2U6naxT6w8Ixz7GytH0QixcPcKIFlm/hUyoSbGuC5gu1FBjNQcwaaNuSP5XH aNjrbMJpqQLfZIUvddl5kGD3/LQaJE2OZDqpxgGhSJl4Fu8OCIhN6SooMP8WUebH On510hRO/YDg4Vi86JSwlD4lVO3VMe0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:48 2024 by rpki-client on console-fra.rpki-client.org