$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa File: 09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa (raw, json) Hash identifier: gH30XV4VzLT4lkjVIGgrbExyKfCXo/5i2LW20kzosZc= Subject key identifier: 33:58:88:BD:AF:AA:69:9B:19:87:78:27:44:B5:2B:E2:76:D2:9E:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117D6A195DF6E69FEE52F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa Signing time: Thu 12 Sep 2024 17:22:35 +0000 ROA not before: Thu 12 Sep 2024 17:22:35 +0000 ROA not after: Wed 11 Dec 2024 18:22:35 +0000 asID: 7029 IP address blocks: 71.28.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:d6:a1:95:df:6e:69:fe:e5:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:35 2024 GMT Not After : Dec 11 18:22:35 2024 GMT Subject: CN=77c37a4a-be69-457c-a8a5-09038d155dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:8f:93:00:da:38:2c:d5:b5:7e:f8:e6:0e: 49:59:3b:66:c2:08:46:44:b8:bf:26:62:af:74:da: 09:93:fd:87:4c:31:90:dc:3d:73:28:f3:f1:d8:7d: 45:40:69:b4:ff:5f:0d:aa:40:f4:6a:32:8f:a9:a7: eb:12:0f:3f:ce:eb:0d:85:08:77:c4:98:4e:0e:ab: 2c:24:af:b9:8a:04:89:7f:b5:9a:91:54:64:da:c0: 57:82:26:3b:1d:82:42:3a:15:b3:76:cd:43:20:98: d4:33:00:4c:6d:e9:31:56:e5:bb:13:6b:63:14:b1: 75:ba:b2:9c:22:ac:e6:1c:7b:4e:7f:69:de:4f:ef: a2:80:fa:6b:ea:4a:74:60:60:dd:10:4b:86:42:f4: b4:df:f9:c9:4a:10:12:8a:1b:e4:cc:4b:34:1b:a3: f8:93:0e:cd:8e:82:53:a4:ff:e0:67:25:be:00:09: b1:cd:4b:b8:ee:dd:dd:3a:6c:c0:43:b7:35:8c:3f: eb:7a:dd:d9:4a:bf:7c:f8:20:58:55:cd:a8:1a:09: 04:0f:d2:31:b9:23:a3:bb:ec:93:26:65:77:f5:4b: 21:4a:6e:11:43:79:71:23:03:79:23:6a:65:3c:21: 3b:ec:d0:fa:54:65:76:0d:5d:25:6f:fa:9f:b8:2a: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:58:88:BD:AF:AA:69:9B:19:87:78:27:44:B5:2B:E2:76:D2:9E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c4:a8:9e:6e:e6:b0:26:d9:57:7c:4d:9a:ea:ba:24:0e:d7: 3b:1f:94:93:96:c2:e3:12:36:cf:9b:ae:81:4b:1e:aa:b1:ce: d9:03:d3:f1:fe:04:6e:22:c2:fb:da:8c:01:ea:75:25:9a:a6: d5:00:70:8e:15:ea:c0:c6:30:b9:e7:65:34:44:dd:aa:63:11: 97:10:d4:c6:c3:f2:99:dd:6c:a9:4f:d7:a2:f4:e5:74:59:0d: 75:55:4c:99:4a:21:62:93:0f:2d:86:7f:e3:27:07:6d:0d:08: 3f:63:f2:e1:73:8b:63:69:85:e7:a8:2e:b6:6b:1e:e9:3c:22: 66:1b:b2:27:61:1e:5c:5c:a4:19:5a:91:a7:95:54:d6:47:2d: 0b:24:fd:4f:e8:96:22:06:1d:ef:26:bb:4c:2b:67:a0:c6:b2: cc:3d:61:5b:73:58:84:d1:2b:56:85:61:6a:0d:c4:0d:03:8d: 8c:0c:81:1b:b8:cc:e2:41:2e:14:3e:b2:a9:35:bc:d6:09:9b: 09:19:f7:8e:12:fb:40:a6:b0:91:10:f9:3b:10:b3:cc:0f:a1: fd:1e:56:2a:db:58:16:c1:5c:1e:49:ea:c9:67:4e:38:ca:14: 9b:0b:23:07:16:e3:c3:a4:0f:b7:7c:fa:c7:e7:27:a3:da:87: e6:f9:77:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF9ahld9uaf7lL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIzNVoXDTI0MTIxMTE4MjIzNVowLzEtMCsGA1UEAxMk NzdjMzdhNGEtYmU2OS00NTdjLWE4YTUtMDkwMzhkMTU1ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaSPkwDaOCzVtX745g5JWTtmwghGRLi/JmKv dNoJk/2HTDGQ3D1zKPPx2H1FQGm0/18NqkD0ajKPqafrEg8/zusNhQh3xJhODqss JK+5igSJf7WakVRk2sBXgiY7HYJCOhWzds1DIJjUMwBMbekxVuW7E2tjFLF1urKc IqzmHHtOf2neT++igPpr6kp0YGDdEEuGQvS03/nJShASihvkzEs0G6P4kw7NjoJT pP/gZyW+AAmxzUu47t3dOmzAQ7c1jD/ret3ZSr98+CBYVc2oGgkED9IxuSOju+yT JmV39UshSm4RQ3lxIwN5I2plPCE77ND6VGV2DV0lb/qfuCpfuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNYiL2vqmmbGYd4J0S1K+J20p73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDlhNmEyZDUtNDFmMC0z NGVkLWE5NmQtYjc1MWYwYzg5ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHEqJ5u5rAm2Vd8TZrquiQO1zsflJOWwuMSNs+broFLHqqxztkD0/H+ BG4iwvvajAHqdSWaptUAcI4V6sDGMLnnZTRE3apjEZcQ1MbD8pndbKlP16L05XRZ DXVVTJlKIWKTDy2Gf+MnB20NCD9j8uFzi2NpheeoLrZrHuk8ImYbsidhHlxcpBla kaeVVNZHLQsk/U/oliIGHe8mu0wrZ6DGssw9YVtzWITRK1aFYWoNxA0DjYwMgRu4 zOJBLhQ+sqk1vNYJmwkZ944S+0CmsJEQ+TsQs8wPof0eVirbWBbBXB5J6slnTjjK FJsLIwcW48OkD7d8+sfnJ6Pah+b5d34= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:49 2024 by rpki-client on console-fra.rpki-client.org