$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa File: 0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa (raw, json) Hash identifier: DgzLfjOxk2ZxZdV5GPk252awSqxSG/F5syz9bPCFq2A= Subject key identifier: CD:DE:DF:93:9F:AB:1A:83:0A:23:82:CD:EB:16:C6:27:B2:71:AC:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552981C028F1E6B53BFEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 50.96.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:29:81:c0:28:f1:e6:b5:3b:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=7f11ac2e-c08e-427b-8e09-a6ea15c1755e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:5c:fc:e3:17:55:60:0b:a2:1a:45:dd:66: 1f:bd:2e:88:1a:79:27:d8:88:57:e1:21:a8:17:74: 1c:70:a8:38:63:65:71:d8:da:37:e3:a5:02:37:f6: 9a:9a:0e:cf:c2:53:75:e3:e2:29:44:f1:73:f7:9f: d9:e3:f4:b5:32:f8:a2:8d:3b:6f:f5:b2:3e:e4:a1: 4c:62:5f:c6:cc:bd:70:3e:1a:79:79:08:c5:f7:2d: 7c:69:b7:91:0d:ff:ee:7f:06:cc:de:2f:32:4b:73: 27:13:c4:7d:39:c0:5b:10:2e:94:5b:36:f7:a9:c0: be:a7:1f:35:38:82:e5:2d:ea:94:8b:b6:b8:5c:e6: 60:07:bd:14:2e:88:34:c5:83:7c:01:e0:7d:24:75: 84:41:ec:a0:e0:88:64:40:32:71:a1:5d:74:83:22: 49:75:e4:56:a3:ea:49:40:71:f0:26:b7:30:ca:28: 3f:60:38:09:36:d1:76:ac:44:73:7a:67:82:54:65: b8:e6:27:75:72:05:04:cc:f7:59:71:81:11:e7:a1: 2d:27:1d:0b:4a:d1:61:8d:7b:96:d4:cb:f7:41:e4: 09:37:56:18:e1:e6:c6:72:c8:5d:60:6e:f2:0c:39: 77:cc:f2:b5:1b:da:a6:4b:e9:a1:8f:5f:15:93:f1: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DE:DF:93:9F:AB:1A:83:0A:23:82:CD:EB:16:C6:27:B2:71:AC:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:81:b7:c8:9d:19:10:67:c9:9a:96:7d:fa:03:46:e4:59:17: 78:a9:69:f5:1a:da:17:f6:e4:9b:74:78:a4:d9:b8:ea:f8:6e: 2d:7a:e7:ae:b1:bf:9e:75:70:03:12:07:66:19:76:ff:0a:ac: 3d:cd:68:77:68:39:d2:67:7b:6b:f8:3e:ee:5b:56:dd:89:0a: b5:25:86:35:10:0f:4d:19:7c:6e:df:71:4b:aa:c8:9a:66:cc: 85:d7:a7:58:f4:e0:0f:c8:52:36:56:3a:fa:90:98:91:f6:8d: 45:82:4d:80:86:59:3b:44:f9:11:b8:85:82:16:ea:9e:51:b8: f7:2a:0a:a4:bf:f0:a7:97:04:0a:f1:13:36:e5:34:3d:99:c3: 7e:13:80:90:65:81:cc:cc:b7:02:2d:4a:f6:b3:64:a8:0f:be: 13:c7:0c:5f:4f:f8:2b:03:88:17:be:35:0d:8d:09:57:42:f0: 91:72:d7:50:35:ee:79:fc:cd:cd:35:c7:e9:57:15:0a:23:dd: af:4f:0e:16:48:5c:1b:c4:fd:f1:0f:19:f5:92:25:b2:41:93: 0c:9c:85:96:e9:35:2d:96:ed:85:09:a0:ab:d6:9d:23:08:40: 6d:8a:9f:9c:44:07:db:ef:0b:e3:35:f3:6e:89:37:2c:6c:81: 95:61:aa:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSmBwCjx5rU7/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk N2YxMWFjMmUtYzA4ZS00MjdiLThlMDktYTZlYTE1YzE3NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMRc/OMXVWALohpF3WYfvS6IGnkn2IhX4SGo F3QccKg4Y2Vx2No346UCN/aamg7PwlN14+IpRPFz95/Z4/S1MviijTtv9bI+5KFM Yl/GzL1wPhp5eQjF9y18abeRDf/ufwbM3i8yS3MnE8R9OcBbEC6UWzb3qcC+px81 OILlLeqUi7a4XOZgB70ULog0xYN8AeB9JHWEQeyg4IhkQDJxoV10gyJJdeRWo+pJ QHHwJrcwyig/YDgJNtF2rERzemeCVGW45id1cgUEzPdZcYER56EtJx0LStFhjXuW 1Mv3QeQJN1YY4ebGcshdYG7yDDl3zPK1G9qmS+mhj18Vk/EekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3e35OfqxqDCiOCzesWxieycaweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI5ZDhlZjYtODczYy0z M2UzLWE2NzItMGRlZDBmNzBkODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeBt8idGRBnyZqWffoDRuRZF3ipafUa2hf25Jt0eKTZuOr4bi16566x v551cAMSB2YZdv8KrD3NaHdoOdJne2v4Pu5bVt2JCrUlhjUQD00ZfG7fcUuqyJpm zIXXp1j04A/IUjZWOvqQmJH2jUWCTYCGWTtE+RG4hYIW6p5RuPcqCqS/8KeXBArx EzblND2Zw34TgJBlgczMtwItSvazZKgPvhPHDF9P+CsDiBe+NQ2NCVdC8JFy11A1 7nn8zc01x+lXFQoj3a9PDhZIXBvE/fEPGfWSJbJBkwychZbpNS2W7YUJoKvWnSMI QG2Kn5xEB9vvC+M1826JNyxsgZVhquU= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:54 2024 by rpki-client on console-fra.rpki-client.org