$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa File: 17cce6f7-9337-3edc-a1b4-9c3479a36078.roa (raw, json) Hash identifier: laBzJ3TnzTG7PpxN7xDQhpW7BVwp+LTHH4hdGVEKH+Q= Subject key identifier: C5:D4:3A:43:C0:9D:51:72:D6:CA:5A:38:ED:76:7F:E2:F2:F9:D2:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117A77B2B6CB6B90F256140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa Signing time: Thu 12 Sep 2024 17:22:13 +0000 ROA not before: Thu 12 Sep 2024 17:22:13 +0000 ROA not after: Wed 11 Dec 2024 18:22:13 +0000 asID: 7029 IP address blocks: 67.141.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:a7:7b:2b:6c:b6:b9:0f:25:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:13 2024 GMT Not After : Dec 11 18:22:13 2024 GMT Subject: CN=9ca21164-e209-4e5d-932e-f332b2a406e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:1b:4c:f7:46:56:72:22:c2:8e:a6:09:f4: a8:54:40:51:c2:de:31:e9:a9:75:5c:65:78:c9:29: c5:3a:2c:29:a8:bb:c0:83:64:e0:5f:b9:60:03:c6: 6a:6f:24:2a:e3:aa:6f:17:3d:f2:74:47:46:9d:52: 01:9c:4f:3b:3b:82:11:de:00:43:61:28:ce:54:96: 3d:1a:25:cb:97:b5:9a:22:f1:ac:a6:87:1b:45:0f: 9f:c4:fd:4d:7b:4d:73:5c:5f:15:a2:76:6e:ff:0c: db:4b:50:59:20:dc:e4:1f:2b:3b:10:89:80:67:d4: 18:83:c3:3f:07:08:ad:bf:f3:1c:c4:4b:03:97:96: cd:cd:5f:bd:64:3f:91:36:d5:4e:83:27:bc:00:8a: 92:d9:3d:87:17:08:0b:b8:e2:a2:85:8b:a2:9b:b2: d4:d1:50:d7:be:27:d5:84:c3:dd:1a:ce:f5:a4:bd: fa:9c:5b:50:ac:e6:1a:c8:c4:14:59:b1:22:e0:41: 0a:21:95:ef:7b:16:43:ef:c7:0b:45:59:cd:16:f0: f7:e6:32:be:66:6a:25:ea:b5:c1:23:7c:a3:bf:b1: 88:c5:ce:0e:51:9c:41:a7:8c:ed:d2:2b:9b:53:6f: 59:b7:a2:b0:37:8d:f1:7f:c8:4a:b5:29:f5:ed:fb: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:3A:43:C0:9D:51:72:D6:CA:5A:38:ED:76:7F:E2:F2:F9:D2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17cce6f7-9337-3edc-a1b4-9c3479a36078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ff:37:d7:3a:73:c3:75:47:a8:a6:ab:01:26:20:ec:0c:56: b5:cc:d8:e4:91:84:54:27:56:76:c6:39:77:76:d3:fe:75:57: f0:1e:b2:37:4b:66:cc:e0:ea:15:95:d0:bc:11:3b:8d:2f:49: 63:e9:52:e1:d0:73:10:71:d3:54:90:59:80:9e:66:42:45:0a: 7a:e5:4c:83:dc:9f:6b:ec:09:dc:69:58:76:1d:ae:ef:22:51: e3:06:76:a1:de:56:34:73:7c:33:33:c6:6e:b2:b2:ec:0f:56: 3c:72:4c:2e:53:98:f5:8d:c7:1e:1b:0e:3e:2b:e2:f8:25:37: f0:27:c3:32:ed:ba:77:a1:1f:4d:ce:52:f3:9a:bc:ac:33:0e: d9:15:54:e1:c4:6b:1a:98:f4:cc:bd:c1:a4:e6:33:6d:d7:51: 5e:77:06:72:ab:ab:13:da:f3:11:85:52:66:75:82:61:b1:a1: f3:8a:28:27:e0:e2:41:9b:40:72:3e:f1:1f:fc:16:9d:7a:07: f0:5d:32:5e:af:e1:db:2b:c3:25:cf:6b:53:5c:7d:73:97:2b: b1:aa:17:eb:1d:78:d2:7a:a9:8d:5a:e4:e0:16:d7:36:86:e1: 2a:98:09:c6:21:4e:f5:a8:4b:9e:ca:cd:2c:28:96:46:06:5d: 9a:50:8f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF6d7K2y2uQ8lYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIxM1oXDTI0MTIxMTE4MjIxM1owLzEtMCsGA1UEAxMk OWNhMjExNjQtZTIwOS00ZTVkLTkzMmUtZjMzMmIyYTQwNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzcbTPdGVnIiwo6mCfSoVEBRwt4x6al1XGV4 ySnFOiwpqLvAg2TgX7lgA8ZqbyQq46pvFz3ydEdGnVIBnE87O4IR3gBDYSjOVJY9 GiXLl7WaIvGspocbRQ+fxP1Ne01zXF8VonZu/wzbS1BZINzkHys7EImAZ9QYg8M/ Bwitv/McxEsDl5bNzV+9ZD+RNtVOgye8AIqS2T2HFwgLuOKihYuim7LU0VDXvifV hMPdGs71pL36nFtQrOYayMQUWbEi4EEKIZXvexZD78cLRVnNFvD35jK+Zmol6rXB I3yjv7GIxc4OUZxBp4zt0iubU29Zt6KwN43xf8hKtSn17fsBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXUOkPAnVFy1spaOO12f+Ly+dIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdjY2U2ZjctOTMzNy0z ZWRjLWExYjQtOWMzNDc5YTM2MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ41mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb/N9c6c8N1R6imqwEmIOwMVrXM2OSRhFQnVnbGOXd20/51V/AesjdL Zszg6hWV0LwRO40vSWPpUuHQcxBx01SQWYCeZkJFCnrlTIPcn2vsCdxpWHYdru8i UeMGdqHeVjRzfDMzxm6ysuwPVjxyTC5TmPWNxx4bDj4r4vglN/AnwzLtunehH03O UvOavKwzDtkVVOHEaxqY9My9waTmM23XUV53BnKrqxPa8xGFUmZ1gmGxofOKKCfg 4kGbQHI+8R/8Fp16B/BdMl6v4dsrwyXPa1NcfXOXK7GqF+sdeNJ6qY1a5OAW1zaG 4SqYCcYhTvWoS57KzSwolkYGXZpQj/Y= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:33 2024 by rpki-client on console-ams.rpki-client.org