$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa File: 126c6742-4df7-3e16-966f-3b9c4b85cad9.roa (raw, json) Hash identifier: 0/CFEo43KC0RBCoryQyhktrbP5RCywPNLXAktT4chw8= Subject key identifier: 99:CC:86:79:AD:BC:CD:AE:98:88:A1:EB:C8:A6:F6:D7:E6:88:C4:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117D98D23A78A85C315C300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa Signing time: Thu 12 Sep 2024 17:22:37 +0000 ROA not before: Thu 12 Sep 2024 17:22:37 +0000 ROA not after: Wed 11 Dec 2024 18:22:37 +0000 asID: 7029 IP address blocks: 71.28.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:d9:8d:23:a7:8a:85:c3:15:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:37 2024 GMT Not After : Dec 11 18:22:37 2024 GMT Subject: CN=4df695b0-6dc4-47b0-b6d2-25122eea0a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:29:f0:99:0a:f3:5b:a7:ec:72:d7:8f:ee: 36:9b:89:95:c2:43:3f:9d:2b:37:af:dd:e3:64:5c: ed:4a:8d:bc:31:6d:29:69:45:e9:a9:91:6c:1f:db: be:c1:6c:bb:c9:06:d3:7d:13:28:c2:8e:31:cb:c7: 84:89:d0:33:f4:5a:b8:b0:09:36:60:2d:aa:a7:fe: 8c:15:bb:ac:ee:5d:9a:14:b6:ab:02:62:3b:63:0b: 39:4f:0e:6a:08:77:3a:9b:c3:66:14:b3:22:12:84: bb:11:f1:5f:fb:d9:9c:3f:0b:5d:e4:de:c9:b0:98: 95:45:82:ad:83:84:12:87:d1:c5:3e:ee:ca:1c:ef: 9f:67:aa:f1:2f:d7:d8:8c:b8:ae:e4:b0:81:46:21: 7c:f9:c3:24:90:4a:b6:4a:f5:b0:be:63:c9:00:be: 4a:42:0a:f2:10:be:b2:22:98:a8:07:fc:f6:0f:f3: 46:53:01:d2:04:c9:ab:aa:57:1c:8d:de:e2:31:85: d5:2f:3d:dc:d1:14:5a:d0:85:06:32:e2:75:db:06: 58:cc:a6:14:de:78:de:9b:6a:aa:5a:1d:ba:22:07: 31:c6:5a:42:db:44:dd:a9:51:3b:9c:ab:be:87:47: 2f:41:8b:47:a2:89:46:0d:bc:ba:d2:51:8b:bc:ae: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CC:86:79:AD:BC:CD:AE:98:88:A1:EB:C8:A6:F6:D7:E6:88:C4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f6:93:66:cb:3a:34:bb:52:9c:4f:8d:eb:e8:a7:0c:15:be: 9d:bf:5c:e5:76:cb:3e:33:89:91:64:2e:b2:47:e3:f4:da:b4: 73:71:12:00:7e:99:e3:ac:23:c1:5c:78:f3:bc:3e:7e:de:6b: e9:1b:c5:6c:b4:9c:5c:08:d9:a8:f1:f4:ba:19:e8:62:d6:f6: da:1a:22:7b:d3:59:d2:e1:4e:21:e1:8b:5c:a7:0d:e0:8c:5d: 6a:2b:b9:04:8b:1c:4a:25:56:d1:2f:75:5c:a8:68:35:46:d7: d4:1e:93:a4:a6:43:d6:e7:40:bd:5e:20:8d:70:b3:a4:a7:10: 0b:f2:19:93:ea:34:98:05:29:f5:22:f6:67:54:02:62:a8:5f: 5c:14:b7:47:77:8f:f0:e7:b7:36:04:14:1c:f6:26:96:7f:ee: d8:af:18:51:82:74:00:97:e4:f7:fe:97:8d:d2:ca:ac:b7:7c: 59:7e:c7:5f:e4:a2:d1:22:a2:6a:29:62:2f:81:6a:73:a3:8e: c9:f9:45:51:ac:95:42:d3:ba:d7:4e:16:8f:5e:77:82:55:12: a1:5f:1b:56:f7:5b:11:c3:2f:85:34:32:11:8a:08:54:fd:6a: ae:91:62:71:45:45:77:1e:ea:e2:a1:81:fb:41:0e:ce:e9:52: 9f:c9:e3:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF9mNI6eKhcMVwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIzN1oXDTI0MTIxMTE4MjIzN1owLzEtMCsGA1UEAxMk NGRmNjk1YjAtNmRjNC00N2IwLWI2ZDItMjUxMjJlZWEwYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm80p8JkK81un7HLXj+42m4mVwkM/nSs3r93j ZFztSo28MW0paUXpqZFsH9u+wWy7yQbTfRMowo4xy8eEidAz9Fq4sAk2YC2qp/6M Fbus7l2aFLarAmI7Yws5Tw5qCHc6m8NmFLMiEoS7EfFf+9mcPwtd5N7JsJiVRYKt g4QSh9HFPu7KHO+fZ6rxL9fYjLiu5LCBRiF8+cMkkEq2SvWwvmPJAL5KQgryEL6y IpioB/z2D/NGUwHSBMmrqlccjd7iMYXVLz3c0RRa0IUGMuJ12wZYzKYU3njem2qq Wh26IgcxxlpC20TdqVE7nKu+h0cvQYtHoolGDby60lGLvK5N7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnMhnmtvM2umIih68im9tfmiMShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI2YzY3NDItNGRmNy0z ZTE2LTk2NmYtM2I5YzRiODVjYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxxdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP2k2bLOjS7UpxPjevopwwVvp2/XOV2yz4ziZFkLrJH4/TatHNxEgB+ meOsI8FcePO8Pn7ea+kbxWy0nFwI2ajx9LoZ6GLW9toaInvTWdLhTiHhi1ynDeCM XWoruQSLHEolVtEvdVyoaDVG19Qek6SmQ9bnQL1eII1ws6SnEAvyGZPqNJgFKfUi 9mdUAmKoX1wUt0d3j/DntzYEFBz2JpZ/7tivGFGCdACX5Pf+l43Syqy3fFl+x1/k otEiomopYi+BanOjjsn5RVGslULTutdOFo9ed4JVEqFfG1b3WxHDL4U0MhGKCFT9 aq6RYnFFRXce6uKhgftBDs7pUp/J45k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:50 2024 by rpki-client on console-fra.rpki-client.org