$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1562bc18-2e54-3d70-bd9a-03f232d4cf04.roa File: 1562bc18-2e54-3d70-bd9a-03f232d4cf04.roa (raw, json) Hash identifier: JZMWR4vW2VFXen0OL9nzPRJTOdYe36BpgHCVNye+ywo= Subject key identifier: 17:79:17:F3:86:AB:64:B3:56:29:21:1C:C7:C1:94:9F:9E:9A:B4:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F9DD991E5627B4D51A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1562bc18-2e54-3d70-bd9a-03f232d4cf04.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 67.158.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f9:dd:99:1e:56:27:b4:d5:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0a49de6b-deea-4388-b956-40a168c33b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:58:6c:98:77:ae:c4:ed:c9:57:65:75:ef: 07:1b:fd:e4:6a:04:da:51:cf:f2:bc:f6:eb:03:59: 45:d9:54:e1:f7:64:8c:ec:c8:59:4e:2f:95:9d:c8: 4a:b8:1c:f9:6c:1c:8e:bc:1e:09:d7:85:23:11:f7: 38:97:3c:9d:10:6e:db:20:5b:99:cb:d8:fc:6f:6c: 21:5d:9d:c3:47:89:fc:bf:00:bd:90:d2:11:8b:65: d1:19:7d:5d:40:dc:df:76:c4:70:85:9e:47:4e:c6: 00:17:99:8d:1b:a6:f0:1e:c9:84:0b:f5:4c:7a:2e: 97:05:2a:53:8f:b8:25:46:65:08:7f:a4:36:2d:1f: e3:80:fa:90:a5:22:03:cb:15:95:d9:00:2a:01:38: 0e:d0:13:2d:bb:bd:28:11:fa:7e:59:d7:20:0e:35: 5d:20:1f:f2:3a:7b:a3:e7:ae:a4:0a:88:a0:01:0d: 42:80:5b:fc:38:97:60:29:69:87:28:37:f9:39:74: b3:7f:4f:fb:b8:68:79:7d:04:c6:37:38:b5:3f:e7: c4:65:69:0b:01:2a:5f:ec:f2:6e:e1:51:e3:db:1e: 90:bf:3c:0f:1a:2e:76:0c:a9:a5:ca:01:92:1d:0e: f2:49:96:b9:66:4f:f3:37:d6:5c:c4:59:ba:b4:56: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:79:17:F3:86:AB:64:B3:56:29:21:1C:C7:C1:94:9F:9E:9A:B4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1562bc18-2e54-3d70-bd9a-03f232d4cf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.158.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:dc:5a:70:c9:ea:f4:a7:00:82:d4:59:c7:35:01:31:e1:70: 2c:0c:84:80:64:dd:17:81:24:13:a8:ac:a6:87:4b:fa:25:17: ba:27:a4:b6:05:72:e5:9f:c2:27:d6:95:b8:8b:7d:05:1f:02: 01:b3:dd:7a:39:37:cb:c2:f6:86:06:58:8c:6a:c6:86:b0:c1: 42:41:c9:00:f9:0c:8c:20:8d:f4:34:5d:f3:76:30:af:b3:6c: 66:ca:30:2f:b6:57:17:3d:87:85:e0:41:95:fa:3e:4e:03:97: 9c:6f:a0:e2:0b:7c:90:61:ec:4f:ab:36:5a:58:3c:c8:1f:fd: 92:2b:c1:2d:98:c0:05:2b:c9:f8:27:fb:a6:88:52:f3:d7:56: bc:90:99:b9:df:4a:e8:50:1b:c6:56:44:b2:2c:4d:59:7e:f7: c0:54:f2:68:97:ef:48:7e:69:0b:17:0b:df:aa:52:f2:ba:6d: 32:2d:f0:4d:99:6a:ee:bf:1a:fd:b6:6d:fd:ce:d9:9d:ca:eb: 18:82:91:58:fa:f1:07:d5:0e:51:07:fc:8a:08:5f:c7:ea:24: 8b:2f:14:9e:16:75:45:d6:54:7e:5f:94:56:3f:03:5c:86:e1: 3f:fb:f4:7d:f6:8c:76:7f:18:2c:67:41:83:11:08:d4:0d:46: 51:2d:63:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPndmR5WJ7TVGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MGE0OWRlNmItZGVlYS00Mzg4LWI5NTYtNDBhMTY4YzMzYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1YbJh3rsTtyVdlde8HG/3kagTaUc/yvPbr A1lF2VTh92SM7MhZTi+VnchKuBz5bByOvB4J14UjEfc4lzydEG7bIFuZy9j8b2wh XZ3DR4n8vwC9kNIRi2XRGX1dQNzfdsRwhZ5HTsYAF5mNG6bwHsmEC/VMei6XBSpT j7glRmUIf6Q2LR/jgPqQpSIDyxWV2QAqATgO0BMtu70oEfp+WdcgDjVdIB/yOnuj 566kCoigAQ1CgFv8OJdgKWmHKDf5OXSzf0/7uGh5fQTGNzi1P+fEZWkLASpf7PJu 4VHj2x6QvzwPGi52DKmlygGSHQ7ySZa5Zk/zN9ZcxFm6tFb2+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd5F/OGq2SzVikhHMfBlJ+emrQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU2MmJjMTgtMmU1NC0z ZDcwLWJkOWEtMDNmMjMyZDRjZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ55gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbcWnDJ6vSnAILUWcc1ATHhcCwMhIBk3ReBJBOorKaHS/olF7onpLYF cuWfwifWlbiLfQUfAgGz3Xo5N8vC9oYGWIxqxoawwUJByQD5DIwgjfQ0XfN2MK+z bGbKMC+2Vxc9h4XgQZX6Pk4Dl5xvoOILfJBh7E+rNlpYPMgf/ZIrwS2YwAUryfgn +6aIUvPXVryQmbnfSuhQG8ZWRLIsTVl+98BU8miX70h+aQsXC9+qUvK6bTIt8E2Z au6/Gv22bf3O2Z3K6xiCkVj68QfVDlEH/IoIX8fqJIsvFJ4WdUXWVH5flFY/A1yG 4T/79H32jHZ/GCxnQYMRCNQNRlEtY78= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:23 2024 by rpki-client on console-ams.rpki-client.org