$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa File: 0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa (raw, json) Hash identifier: 8vyZKCnGyQBTtERqSxDFLMhXhqFM4rRDhkri53Zwoc8= Subject key identifier: E6:08:B3:A2:33:53:75:53:DF:58:8E:43:1A:77:90:45:46:55:CC:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553CA0F179D92DA35D3580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.204.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3c:a0:f1:79:d9:2d:a3:5d:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=40a8fe6d-50d2-47dc-ae31-76ef877779a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:d1:5c:27:26:ec:90:00:bb:3a:52:6c:b6: 4c:f0:aa:13:bd:48:17:f1:14:f1:30:1c:86:85:30: a9:f5:0d:20:28:48:cd:d0:81:94:5b:ea:b6:54:39: 3c:71:98:5d:99:fe:6f:b5:64:ab:4c:19:1a:de:41: cb:6e:6c:11:ec:dd:79:2f:25:a3:ec:7a:6a:97:6b: b4:7a:ad:bc:68:cd:f5:18:2e:60:3b:69:1d:19:f1: a6:b2:15:c5:71:c4:81:7b:df:c0:9c:3a:3b:b7:b6: a4:54:7e:91:df:62:d9:4d:1a:7d:8a:22:35:bb:05: 3d:32:91:e8:4b:f8:fb:fb:5f:aa:ea:e7:86:50:30: c7:15:21:fd:11:15:1f:8f:b4:9a:fb:f6:15:30:2f: 6f:4b:2e:d5:cd:ea:c8:09:5e:25:3f:5f:e0:2c:c1: 27:ae:d1:1d:b0:1b:dd:68:e8:aa:e0:bd:62:98:4f: 8b:5f:10:9c:4f:f6:e2:fb:68:44:8d:78:42:cd:f5: d6:5e:af:53:ae:20:87:3b:f7:e5:1e:83:2e:2f:17: 8c:52:f2:05:bf:22:0a:ec:48:36:4a:06:d2:03:2e: 33:95:4e:39:0c:2c:07:2d:92:5d:db:ac:c7:1b:e7: 55:5e:71:37:e8:7e:b5:fc:b6:69:83:e0:7b:26:84: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:08:B3:A2:33:53:75:53:DF:58:8E:43:1A:77:90:45:46:55:CC:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2e:93:51:81:93:3e:8a:76:13:ee:50:1a:b7:87:d6:e6:8f: b6:16:e2:a0:6f:e1:ee:62:d9:97:bf:34:bc:a1:7a:78:cc:82: 8e:a5:3c:e6:96:84:d8:cc:93:cf:ba:14:52:75:f4:1e:71:5d: e5:98:93:26:15:40:f9:46:1f:51:d0:5d:f7:7e:b1:03:70:97: 73:93:fd:20:a2:df:74:3e:c3:71:6c:c5:99:c4:93:81:cc:43: f5:bb:df:58:e8:7e:dc:24:96:e2:60:af:1c:a0:c3:40:65:bb: d8:f0:7e:31:b4:95:f4:15:5e:5d:62:f1:51:6e:9d:da:ad:d1: dd:ce:df:da:d9:cb:db:cd:40:b5:95:66:c4:c6:33:81:92:d1: d9:3a:0b:12:7c:53:9c:4d:4f:ea:41:23:ff:38:55:62:72:ff: 33:be:67:f1:9f:fe:67:74:7f:ca:8f:5c:fa:dd:44:aa:ff:e4: d2:45:e3:d9:3c:c9:c7:25:bd:c6:63:15:c0:b6:11:ad:49:4a: 3e:c1:d6:09:ab:4e:a3:02:42:18:b2:ba:55:db:96:57:4e:d6: 56:dc:c6:c3:04:f7:6d:65:f7:66:ce:7a:7c:1d:8f:fd:56:3e: 50:98:87:6f:37:80:55:eb:03:a3:12:bf:52:0a:4a:38:3b:38: 5a:e5:4b:9b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVTyg8XnZLaNdNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NDBhOGZlNmQtNTBkMi00N2RjLWFlMzEtNzZlZjg3Nzc3OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6nRXCcm7JAAuzpSbLZM8KoTvUgX8RTxMByG hTCp9Q0gKEjN0IGUW+q2VDk8cZhdmf5vtWSrTBka3kHLbmwR7N15LyWj7Hpql2u0 eq28aM31GC5gO2kdGfGmshXFccSBe9/AnDo7t7akVH6R32LZTRp9iiI1uwU9MpHo S/j7+1+q6ueGUDDHFSH9ERUfj7Sa+/YVMC9vSy7VzerICV4lP1/gLMEnrtEdsBvd aOiq4L1imE+LXxCcT/bi+2hEjXhCzfXWXq9TriCHO/flHoMuLxeMUvIFvyIK7Eg2 SgbSAy4zlU45DCwHLZJd26zHG+dVXnE36H61/LZpg+B7JoTDawIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOYIs6IzU3VT31iOQxp3kEVGVcwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY5ZDEzNDYtY2U2Mi0z NmJhLWEzZTAtOTVjYTJjMzgxOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2MwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhy6TUYGTPop2E+5QGreH1uaPthbioG/h7mLZl780vKF6eMyCjqU85paE 2MyTz7oUUnX0HnFd5ZiTJhVA+UYfUdBd936xA3CXc5P9IKLfdD7DcWzFmcSTgcxD 9bvfWOh+3CSW4mCvHKDDQGW72PB+MbSV9BVeXWLxUW6d2q3R3c7f2tnL281AtZVm xMYzgZLR2ToLEnxTnE1P6kEj/zhVYnL/M75n8Z/+Z3R/yo9c+t1Eqv/k0kXj2TzJ xyW9xmMVwLYRrUlKPsHWCatOowJCGLK6VduWV07WVtzGwwT3bWX3Zs56fB2P/VY+ UJiHbzeAVesDoxK/UgpKODs4WuVLmw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:50 2024 by rpki-client on console-fra.rpki-client.org