$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07520975-b84f-3eb7-a1aa-c2201a0d6580.roa File: 07520975-b84f-3eb7-a1aa-c2201a0d6580.roa (raw, json) Hash identifier: 5FnjrDUiPFZJYDSWkE4EvrzjZpFeXO2MsuO0b9bSMH4= Subject key identifier: AC:4F:EF:49:09:65:A6:73:F1:02:DE:7C:97:F1:CA:98:42:E2:A1:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552B7FE135E84FBDB498C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07520975-b84f-3eb7-a1aa-c2201a0d6580.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 64.178.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2b:7f:e1:35:e8:4f:bd:b4:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=8e9d8b56-8d8b-4fa7-b38e-11759edd7a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:8a:5c:11:8e:7f:4f:2c:a9:9a:c9:7f:e1: 3a:92:8c:9a:95:f6:53:e5:c7:b9:89:76:9c:05:ce: 25:09:d9:64:19:48:5d:23:d6:5d:bb:ae:a8:10:e9: c2:ba:ca:81:f7:f5:db:db:09:1c:c4:8a:0a:55:54: c7:e8:79:a9:cc:df:7e:f7:c9:f1:ae:dd:27:99:94: 63:f9:db:88:54:10:a2:2d:e4:65:2d:84:db:13:48: 60:36:82:33:7c:49:65:59:ef:c9:64:b4:2b:f9:13: 26:6b:1f:dd:31:8b:dc:5d:18:e7:8e:e9:46:df:22: fb:f0:c2:bd:ce:95:52:3c:e6:a2:ac:36:1c:3e:dc: 35:4c:14:aa:98:96:85:63:e0:89:c7:aa:aa:87:ea: 85:76:77:10:c4:f5:25:f3:6c:a3:00:8c:4a:2c:c1: 44:de:37:59:11:96:02:34:30:e2:2b:91:ef:eb:2c: 6b:6a:39:20:d9:78:22:8f:8f:23:14:57:fd:46:36: 2b:27:f9:0c:35:10:9c:04:f6:11:80:80:bd:57:5e: de:c5:bc:b5:08:c8:00:83:74:fe:1d:4b:4d:4c:10: 82:25:3f:c5:55:76:b3:10:d9:e3:71:33:b1:87:c4: 0b:c6:91:68:5c:04:a2:8e:db:7d:8e:e8:6e:3b:ab: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:EF:49:09:65:A6:73:F1:02:DE:7C:97:F1:CA:98:42:E2:A1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07520975-b84f-3eb7-a1aa-c2201a0d6580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.178.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0b:74:45:ba:24:5e:62:38:d5:6a:48:64:08:0d:8d:d7:76: d8:31:78:28:dd:7a:40:3f:ee:a1:81:e0:27:54:45:73:13:80: 94:fe:95:73:d2:a6:ba:bc:e1:28:3d:31:cc:b7:a0:50:50:6f: 41:27:14:d9:5d:65:a2:6b:6d:ee:31:51:5e:82:1d:56:23:ff: f7:7b:c6:cc:e1:6e:f5:26:89:45:52:b3:76:e7:30:b7:c0:e3: 66:3c:05:ad:8f:f8:4c:e9:8d:eb:73:c1:ba:11:29:82:d9:77: 3f:3d:d7:0c:dc:3c:82:ce:3b:6e:fb:ef:17:08:5b:2c:31:34: 7d:62:d3:4b:fe:05:b3:8b:03:c9:3d:34:bb:4c:84:e7:ca:99: e8:75:8c:64:d3:42:40:a1:b8:bf:84:32:fa:07:75:4e:44:3f: 62:af:2c:16:24:b0:b1:2a:a4:ac:1d:7c:9a:3f:ac:c8:70:53: 2b:a8:75:49:0f:90:bc:92:6c:2a:a6:ed:5d:0e:3e:f1:34:8e: c5:22:f9:e8:a3:47:82:f8:ba:db:49:b3:8b:17:6a:0b:be:15: 58:cf:e2:ca:78:51:c2:67:06:ec:c6:e8:a6:eb:f9:a1:d3:a9: 53:e6:36:0f:67:5f:d5:71:69:2b:e9:e8:ec:88:41:e1:1b:ff: 00:6c:df:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSt/4TXoT720mMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OGU5ZDhiNTYtOGQ4Yi00ZmE3LWIzOGUtMTE3NTllZGQ3YTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4SKXBGOf08sqZrJf+E6koyalfZT5ce5iXac Bc4lCdlkGUhdI9Zdu66oEOnCusqB9/Xb2wkcxIoKVVTH6HmpzN9+98nxrt0nmZRj +duIVBCiLeRlLYTbE0hgNoIzfEllWe/JZLQr+RMmax/dMYvcXRjnjulG3yL78MK9 zpVSPOairDYcPtw1TBSqmJaFY+CJx6qqh+qFdncQxPUl82yjAIxKLMFE3jdZEZYC NDDiK5Hv6yxrajkg2Xgij48jFFf9RjYrJ/kMNRCcBPYRgIC9V17exby1CMgAg3T+ HUtNTBCCJT/FVXazENnjcTOxh8QLxpFoXASijtt9juhuO6u2HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxP70kJZaZz8QLefJfxyphC4qFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDc1MjA5NzUtYjg0Zi0z ZWI3LWExYWEtYzIyMDFhMGQ2NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQLJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkLdEW6JF5iONVqSGQIDY3XdtgxeCjdekA/7qGB4CdURXMTgJT+lXPS prq84Sg9Mcy3oFBQb0EnFNldZaJrbe4xUV6CHVYj//d7xszhbvUmiUVSs3bnMLfA 42Y8Ba2P+EzpjetzwboRKYLZdz891wzcPILOO2777xcIWywxNH1i00v+BbOLA8k9 NLtMhOfKmeh1jGTTQkChuL+EMvoHdU5EP2KvLBYksLEqpKwdfJo/rMhwUyuodUkP kLySbCqm7V0OPvE0jsUi+eijR4L4uttJs4sXagu+FVjP4sp4UcJnBuzG6Kbr+aHT qVPmNg9nX9VxaSvp6OyIQeEb/wBs3/c= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:48 2024 by rpki-client on console-fra.rpki-client.org