$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1186cd3b-88e9-3a09-829c-d6b5208d026f.roa File: 1186cd3b-88e9-3a09-829c-d6b5208d026f.roa (raw, json) Hash identifier: 8V1vy5/WCsYxyR7sd1VzmcONKQhmP6N+ALLqe3OzwKk= Subject key identifier: 2C:35:B1:27:45:29:5F:EF:3B:E6:35:54:35:4A:04:A0:04:50:7B:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550C6B74E98C4D2C0173C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1186cd3b-88e9-3a09-829c-d6b5208d026f.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.126.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0c:6b:74:e9:8c:4d:2c:01:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=4d41219a-dacc-45e7-a1c9-f49185c09eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:ec:a9:27:96:ce:db:e4:58:34:12:30:25: 9c:a9:35:48:50:68:9a:44:51:7c:9e:fe:c3:33:ec: 99:4b:27:1e:c5:c0:68:1f:49:e3:ae:e9:14:a3:bb: 4f:76:2b:51:ce:48:c7:56:10:a8:d4:d1:5e:aa:2c: f6:bd:56:8e:e5:d3:b3:42:71:59:20:88:d2:ab:89: d9:d5:83:a4:2b:aa:0b:8d:13:f4:9a:2b:2b:8f:f6: c5:fa:d2:9a:75:ef:13:36:2d:e3:4a:c3:89:35:2c: e7:22:e1:89:62:8c:a0:5c:d2:9d:d9:cf:dd:6f:83: c3:7f:b7:8f:05:35:e6:dd:ad:b3:d8:78:fc:d5:29: 42:6e:6b:6c:ba:9c:70:45:00:62:96:b8:10:ac:c8: e3:db:46:bf:ff:6e:ba:a9:e7:09:58:2b:0c:3e:e0: 56:78:02:a5:02:53:a1:94:26:1d:e4:cd:c4:3f:3c: 4b:e4:82:84:ae:73:c4:b3:03:83:84:a6:9a:f1:7d: 09:dd:9d:98:6f:e4:a2:9f:8e:1c:8c:d1:e3:f4:1e: a0:93:07:38:4b:37:6e:fb:52:fc:bb:38:e1:75:98: 91:5c:71:84:9e:6b:f2:48:6c:ad:28:da:b0:d1:ae: ab:37:31:8f:81:34:18:ab:80:cb:dc:92:63:f6:f3: 92:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:B1:27:45:29:5F:EF:3B:E6:35:54:35:4A:04:A0:04:50:7B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1186cd3b-88e9-3a09-829c-d6b5208d026f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.126.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:18:f7:b0:d7:88:10:e3:1c:f1:30:5f:2c:38:29:30:65:eb: b8:5c:6c:63:59:e8:db:19:8c:71:a4:a8:be:7f:37:75:c8:af: 30:ff:76:5c:36:5c:ea:18:70:05:c5:2b:32:c2:71:3a:cf:e4: 7a:9d:a6:d7:0f:2e:2d:4c:f1:61:91:74:ec:73:ee:c0:93:fc: 18:08:4c:ff:f9:69:de:bb:35:74:67:6d:51:54:8e:f4:53:96: 1e:9a:90:c5:7f:51:46:9b:6b:dc:99:dc:f5:44:4b:74:20:85: 00:4c:41:7a:ab:82:a6:06:7e:90:cf:17:be:5d:1f:cb:6b:b1: 4a:f0:fb:d1:24:21:51:79:65:89:1d:b3:e7:67:7d:3f:28:1c: ec:e9:3f:b9:d3:e0:03:6b:9b:6e:b2:f2:f3:6d:9e:03:64:7e: 48:15:0c:42:16:7f:6c:99:ee:15:0b:7e:73:78:e0:f9:9e:cd: bd:cd:b0:df:6a:c5:31:7a:90:af:0f:e4:1f:f2:b2:61:b9:12: 99:f6:79:3d:08:77:ec:31:13:12:e8:24:7b:20:e4:c1:46:e3: 0d:07:5b:0e:e3:82:bd:56:15:13:46:75:ce:b2:d9:dc:a5:b3: 68:78:14:c4:48:95:9f:18:e9:ca:48:7c:7f:cc:d5:0e:53:b6: 23:c6:5a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQxrdOmMTSwBc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NGQ0MTIxOWEtZGFjYy00NWU3LWExYzktZjQ5MTg1YzA5ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7rsqSeWztvkWDQSMCWcqTVIUGiaRFF8nv7D M+yZSycexcBoH0njrukUo7tPditRzkjHVhCo1NFeqiz2vVaO5dOzQnFZIIjSq4nZ 1YOkK6oLjRP0misrj/bF+tKade8TNi3jSsOJNSznIuGJYoygXNKd2c/db4PDf7eP BTXm3a2z2Hj81SlCbmtsupxwRQBilrgQrMjj20a//266qecJWCsMPuBWeAKlAlOh lCYd5M3EPzxL5IKErnPEswODhKaa8X0J3Z2Yb+Sin44cjNHj9B6gkwc4Szdu+1L8 uzjhdZiRXHGEnmvySGytKNqw0a6rNzGPgTQYq4DL3JJj9vOSGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw1sSdFKV/vO+Y1VDVKBKAEUHv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE4NmNkM2ItODhlOS0z YTA5LTgyOWMtZDZiNTIwOGQwMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2H6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQY97DXiBDjHPEwXyw4KTBl67hcbGNZ6NsZjHGkqL5/N3XIrzD/dlw2 XOoYcAXFKzLCcTrP5HqdptcPLi1M8WGRdOxz7sCT/BgITP/5ad67NXRnbVFUjvRT lh6akMV/UUaba9yZ3PVES3QghQBMQXqrgqYGfpDPF75dH8trsUrw+9EkIVF5ZYkd s+dnfT8oHOzpP7nT4ANrm26y8vNtngNkfkgVDEIWf2yZ7hULfnN44Pmezb3NsN9q xTF6kK8P5B/ysmG5Epn2eT0Id+wxExLoJHsg5MFG4w0HWw7jgr1WFRNGdc6y2dyl s2h4FMRIlZ8Y6cpIfH/M1Q5TtiPGWhE= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:56 2024 by rpki-client on console-fra.rpki-client.org