$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c4234dc-27b2-3697-a76c-8f97703fa49b.roa File: 0c4234dc-27b2-3697-a76c-8f97703fa49b.roa (raw, json) Hash identifier: a8iNX8afPXG8SuVxWOT8Heb7w0lBuL6CCd2p8chOQxU= Subject key identifier: 14:61:01:D2:C8:F3:7B:5E:56:09:7D:69:EF:9F:A6:5A:52:C6:02:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154FCD51470D7125EB10980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c4234dc-27b2-3697-a76c-8f97703fa49b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 71.30.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:fc:d5:14:70:d7:12:5e:b1:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=e9ace9e9-b503-43bd-a864-c48ebcb07a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:8a:52:74:4b:80:1a:20:a6:40:21:22:a4: c2:27:15:06:0c:f8:46:f3:3c:68:86:fb:24:8d:f4: 65:39:e5:13:63:8d:a7:ef:3b:5d:24:f1:f3:ef:bd: c8:11:d0:96:0e:0b:b9:9a:02:60:57:8b:79:01:11: 68:89:1f:33:36:c8:73:ef:b6:9e:06:47:90:2d:fb: a8:ba:aa:bf:63:1b:ea:29:74:5f:56:38:93:3f:5a: 32:bc:50:11:95:7f:73:2a:76:b0:e3:75:76:6b:02: 72:26:c2:29:dc:fa:c7:13:8d:62:b8:4d:2d:29:01: 7a:c4:c2:c5:0f:34:f6:23:dc:df:4b:3f:84:a3:f3: 38:4c:90:db:7c:0a:af:8b:c6:71:51:07:6a:a3:45: f2:6f:cc:95:7f:80:ae:b9:68:8a:ad:a1:51:e4:03: 1e:6a:0c:44:ff:98:3c:db:89:9a:ef:1e:23:07:b0: 2e:5d:3a:92:cc:4a:5e:e3:67:eb:f1:94:4a:76:ca: 82:cf:4d:5b:c3:80:b4:c9:45:62:16:76:0d:0d:6b: 30:55:4e:37:c3:d9:96:f9:44:f6:2c:d2:89:44:31: d6:33:e7:a0:3a:8b:72:3b:79:59:a9:94:4b:e5:f2: 09:ae:20:4b:9f:3c:19:3f:ac:e8:47:7a:2e:e0:ec: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:61:01:D2:C8:F3:7B:5E:56:09:7D:69:EF:9F:A6:5A:52:C6:02:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c4234dc-27b2-3697-a76c-8f97703fa49b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:10:2d:d8:bd:55:a1:81:d5:0a:68:f9:07:6f:e9:d7:93:ad: ca:3b:9e:21:35:65:17:a6:3a:6a:d9:4f:f4:fe:97:a3:c5:6f: c4:4c:4c:6c:8d:19:fe:4a:f1:45:31:0e:6a:5d:ab:a8:73:30: 51:76:6e:5d:f7:bc:e6:9f:32:7b:34:e5:14:0e:4d:fb:cc:a8: c1:cb:91:f0:92:c2:c2:0f:2d:4a:d0:ca:5d:49:6b:89:80:1e: ba:d8:da:be:c2:3a:81:dd:51:7d:bc:7c:62:ab:74:e2:6c:35: 95:1a:b1:72:d9:f4:bc:ab:7c:17:73:76:28:d7:54:22:d1:89: df:4a:58:cc:2d:9f:b8:19:57:78:3f:07:55:f6:a9:db:35:97: 49:e1:7c:62:e8:27:44:9e:f8:a7:52:4b:7f:66:8d:05:1a:a0: f9:7d:0c:e9:b0:b2:be:f7:7b:0a:a4:cf:65:46:2c:8e:2d:81: 40:92:15:c7:8b:71:ac:fe:81:c0:9c:1f:db:e5:1f:9a:56:dc: 27:64:b7:aa:78:62:88:30:5d:94:80:35:53:f2:21:3d:6b:5d: 52:47:e4:b5:a2:7c:1d:ea:ef:81:fd:68:d1:a6:f8:1d:6f:ab: 29:9d:b2:41:e8:96:a3:bc:48:31:9a:b3:d7:19:17:0c:3a:2d: 9b:c0:b8:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPzVFHDXEl6xCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZTlhY2U5ZTktYjUwMy00M2JkLWE4NjQtYzQ4ZWJjYjA3YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqquKUnRLgBogpkAhIqTCJxUGDPhG8zxohvsk jfRlOeUTY42n7ztdJPHz773IEdCWDgu5mgJgV4t5ARFoiR8zNshz77aeBkeQLfuo uqq/YxvqKXRfVjiTP1oyvFARlX9zKnaw43V2awJyJsIp3PrHE41iuE0tKQF6xMLF DzT2I9zfSz+Eo/M4TJDbfAqvi8ZxUQdqo0Xyb8yVf4CuuWiKraFR5AMeagxE/5g8 24ma7x4jB7AuXTqSzEpe42fr8ZRKdsqCz01bw4C0yUViFnYNDWswVU43w9mW+UT2 LNKJRDHWM+egOotyO3lZqZRL5fIJriBLnzwZP6zoR3ou4Oz4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRhAdLI83teVgl9ae+fplpSxgK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM0MjM0ZGMtMjdiMi0z Njk3LWE3NmMtOGY5NzcwM2ZhNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4QLdi9VaGB1Qpo+Qdv6deTrco7niE1ZRemOmrZT/T+l6PFb8RMTGyN Gf5K8UUxDmpdq6hzMFF2bl33vOafMns05RQOTfvMqMHLkfCSwsIPLUrQyl1Ja4mA HrrY2r7COoHdUX28fGKrdOJsNZUasXLZ9LyrfBdzdijXVCLRid9KWMwtn7gZV3g/ B1X2qds1l0nhfGLoJ0Se+KdSS39mjQUaoPl9DOmwsr73ewqkz2VGLI4tgUCSFceL caz+gcCcH9vlH5pW3Cdkt6p4YogwXZSANVPyIT1rXVJH5LWifB3q74H9aNGm+B1v qymdskHolqO8SDGas9cZFww6LZvAuLU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:25 2024 by rpki-client on console-ams.rpki-client.org