$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa File: 08ef01a4-f6bc-372e-94e6-7036094f5449.roa (raw, json) Hash identifier: Av908ch+9sNfWdnRGzCfDTlbSW4CTWl7ZhXVyLmhG6A= Subject key identifier: AC:CB:9A:F6:5A:5B:A3:A4:85:FD:3F:BB:5D:6D:1A:BB:70:9B:EE:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553053D905603F534020E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 72.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:30:53:d9:05:60:3f:53:40:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0cb0174f-4c02-4c46-b039-122faba2486b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:71:d8:6b:47:b8:ab:9d:d5:b0:bc:a7:51: 18:65:ba:55:6a:39:f9:75:4d:17:8b:21:e4:af:08: 5e:7a:d7:13:15:ec:bf:41:b5:4b:88:5b:00:5a:eb: 93:f4:14:40:9b:6b:db:60:4c:c6:cf:7e:f0:14:08: 1a:25:82:fb:ad:89:0c:9b:4e:b4:66:71:32:3c:27: cf:0f:7a:b6:f9:7a:35:8a:cc:cc:79:cf:73:13:4e: 01:4a:59:dc:d0:a0:a2:3f:1a:89:ae:8c:8c:2c:98: 4d:d5:4d:88:f5:2b:c7:a3:c3:be:3f:7a:cf:59:5f: c0:65:7b:4e:d3:24:f5:28:45:91:0f:8f:97:ed:ab: 19:96:f8:56:a7:65:e2:09:ae:57:f8:93:b3:49:8a: 04:62:88:a5:56:3b:34:cd:4b:72:bf:4c:94:da:be: ab:1f:4c:89:32:5e:55:00:3e:a4:6e:83:7d:31:c4: 95:18:09:0a:d3:20:f9:ff:06:4f:55:9b:23:32:2e: 0d:73:5e:57:89:68:44:b3:70:f8:0c:5f:64:1e:59: c4:05:f2:65:f2:81:f6:d5:6d:7c:d5:a4:99:5c:2b: cd:1b:85:b4:25:8f:04:ce:8c:61:69:8a:f8:a7:ca: 22:60:6a:9c:3b:16:51:45:5f:ff:18:96:ed:59:ce: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CB:9A:F6:5A:5B:A3:A4:85:FD:3F:BB:5D:6D:1A:BB:70:9B:EE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ef01a4-f6bc-372e-94e6-7036094f5449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.248.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:88:79:0c:95:c2:41:64:0b:f8:68:9c:75:b6:5a:4d:5d:28: 8e:44:c2:29:99:cc:bd:a7:85:af:09:a4:71:8d:e0:1b:e5:33: 18:25:6e:16:93:ce:3a:24:83:83:cf:f8:1c:ef:1c:90:d5:36: d4:8b:f6:a9:90:bc:1e:20:da:24:70:a2:44:2f:18:98:39:e3: 0d:76:20:47:94:f0:60:bc:77:55:6a:46:32:a7:1c:8c:88:ad: 27:82:90:2c:1f:5e:43:05:bb:af:d9:d2:14:c5:7b:48:77:96: 8f:67:17:b2:de:d7:40:9a:68:92:86:20:04:e2:83:5d:42:2e: 81:a5:82:17:1b:fd:99:48:85:78:ca:d6:1f:9e:a0:55:3b:e3: 30:1b:9a:c5:8a:38:f5:0b:13:8c:4a:dc:42:c1:a7:9b:3d:ab: 99:06:2a:9d:ae:b0:bc:e6:fc:1b:81:bb:d6:14:20:1d:2f:27: eb:a8:90:59:f3:40:db:79:ae:49:70:c5:95:81:c0:4f:92:34: 8e:62:89:4e:dd:f6:a7:a1:e6:fe:90:34:5e:66:b0:b8:93:61: 4e:88:bf:d3:4e:cd:63:32:4d:22:77:54:b9:ce:dc:a9:f8:2d: b5:53:27:2c:af:6a:99:81:6d:0a:f0:62:22:7f:5a:14:3e:37: c7:c2:fc:c8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVTBT2QVgP1NAIOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MGNiMDE3NGYtNGMwMi00YzQ2LWIwMzktMTIyZmFiYTI0ODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU1x2GtHuKud1bC8p1EYZbpVajn5dU0XiyHk rwheetcTFey/QbVLiFsAWuuT9BRAm2vbYEzGz37wFAgaJYL7rYkMm060ZnEyPCfP D3q2+Xo1iszMec9zE04BSlnc0KCiPxqJroyMLJhN1U2I9SvHo8O+P3rPWV/AZXtO 0yT1KEWRD4+X7asZlvhWp2XiCa5X+JOzSYoEYoilVjs0zUtyv0yU2r6rH0yJMl5V AD6kboN9McSVGAkK0yD5/wZPVZsjMi4Nc15XiWhEs3D4DF9kHlnEBfJl8oH21W18 1aSZXCvNG4W0JY8EzoxhaYr4p8oiYGqcOxZRRV//GJbtWc4AtwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKzLmvZaW6Okhf0/u11tGrtwm+6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhlZjAxYTQtZjZiYy0z NzJlLTk0ZTYtNzAzNjA5NGY1NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASPgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjYh5DJXCQWQL+GicdbZaTV0ojkTCKZnMvaeFrwmkcY3gG+UzGCVuFpPO OiSDg8/4HO8ckNU21Iv2qZC8HiDaJHCiRC8YmDnjDXYgR5TwYLx3VWpGMqccjIit J4KQLB9eQwW7r9nSFMV7SHeWj2cXst7XQJpokoYgBOKDXUIugaWCFxv9mUiFeMrW H56gVTvjMBuaxYo49QsTjErcQsGnmz2rmQYqna6wvOb8G4G71hQgHS8n66iQWfNA 23muSXDFlYHAT5I0jmKJTt32p6Hm/pA0XmawuJNhToi/007NYzJNIndUuc7cqfgt tVMnLK9qmYFtCvBiIn9aFD43x8L8yA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:25 2024 by rpki-client on console-ams.rpki-client.org