$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa File: 1ab2ff41-368d-30f9-a16d-be1479704501.roa (raw, json) Hash identifier: iwwqmlySAPCuWBm0cl8YV4NGZ6P1Pf6bHIpOIQ2YYSA= Subject key identifier: CF:82:88:CE:4E:88:53:D3:C3:A9:89:A9:A5:FF:C4:B4:48:8D:35:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F4BF53B4ED42B0974B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 6983 IP address blocks: 209.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f4:bf:53:b4:ed:42:b0:97:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=c04aa3e0-abbe-4ee3-bc0b-baccfa136c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:92:b0:0f:95:dd:74:73:ed:99:ff:5a:a2: 1b:b5:db:41:d0:79:5f:75:a5:51:69:1a:75:d1:3c: c3:f2:0a:b7:29:74:25:6e:6a:a7:82:5c:a3:3a:87: 97:8c:e9:1b:a7:c8:0a:bf:b2:db:4e:e3:f3:a6:0a: 83:43:a4:ee:33:1d:81:4c:93:5f:ab:2f:98:cd:c5: 8b:b8:13:f9:67:8f:76:85:51:d3:65:eb:59:14:8e: 01:37:f8:ee:d1:0a:35:70:f5:24:88:eb:ad:57:c5: b6:3d:e8:5e:5b:01:d8:46:0f:e5:f7:7f:b6:6f:f8: 9b:f0:58:04:08:bb:53:b9:16:53:81:c8:be:07:91: 7f:99:b4:fc:7f:d3:07:b8:e3:7c:45:40:0b:42:2a: f2:42:9c:57:da:9d:c7:09:f5:70:2e:ab:ed:6e:ad: 40:36:44:f7:dd:e8:9a:53:7c:74:06:66:db:a3:c2: a3:8c:c7:07:0d:5a:c1:76:dc:6b:1c:33:25:a4:1e: 8e:80:0c:29:db:d7:43:e3:5a:74:89:9f:95:a0:0e: 3e:25:52:24:c7:a8:cf:0c:60:f6:d3:ca:d0:85:9b: 87:88:14:2c:8c:ba:ee:42:08:a3:23:ee:4d:64:e7: de:78:36:df:99:dc:35:92:fd:b4:5a:36:68:d2:16: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:82:88:CE:4E:88:53:D3:C3:A9:89:A9:A5:FF:C4:B4:48:8D:35:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3f:32:56:ee:98:d9:82:f4:ce:da:3d:d0:90:35:f3:5a:c9: be:ef:b7:bd:27:df:57:3e:87:e9:0f:17:8c:12:89:89:f0:09: 19:ba:16:8b:e4:e7:b0:c7:85:fd:a7:40:9f:50:8b:7e:08:84: 24:82:05:47:2a:70:3b:75:c9:26:02:1d:cd:4c:02:d7:22:7b: ae:0a:ed:a6:36:0d:d8:c3:40:f9:1c:f3:c2:36:ce:51:9c:b8: c1:c7:80:38:45:fc:75:e4:4a:d7:a5:d8:61:81:bf:44:51:69: f4:83:9a:a7:a5:22:1f:eb:dc:dc:af:de:4a:7a:e9:54:ec:3e: 7e:d0:67:4d:8b:6d:07:2c:6c:94:28:b0:60:4c:6e:08:07:e6: b4:17:64:a7:46:aa:89:26:06:61:3a:f8:f3:11:df:f5:e3:1f: 36:52:22:4d:df:12:96:67:4a:fc:1a:a8:87:eb:b5:be:8d:25: 0c:eb:9b:76:14:f8:e8:f5:f1:dd:64:2b:02:72:02:62:31:48: aa:f5:29:0d:45:0f:3d:ca:05:0b:bc:87:01:c3:e0:2e:d2:f8: a3:03:56:00:36:27:29:81:96:c0:64:1e:9c:e3:55:53:56:66: 9d:c0:26:e8:91:cb:f9:1f:d6:e3:24:14:52:94:fe:8b:74:72: f0:94:04:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPS/U7TtQrCXS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YzA0YWEzZTAtYWJiZS00ZWUzLWJjMGItYmFjY2ZhMTM2Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOOSsA+V3XRz7Zn/WqIbtdtB0HlfdaVRaRp1 0TzD8gq3KXQlbmqnglyjOoeXjOkbp8gKv7LbTuPzpgqDQ6TuMx2BTJNfqy+YzcWL uBP5Z492hVHTZetZFI4BN/ju0Qo1cPUkiOutV8W2PeheWwHYRg/l93+2b/ib8FgE CLtTuRZTgci+B5F/mbT8f9MHuON8RUALQiryQpxX2p3HCfVwLqvtbq1ANkT33eia U3x0Bmbbo8KjjMcHDVrBdtxrHDMlpB6OgAwp29dD41p0iZ+VoA4+JVIkx6jPDGD2 08rQhZuHiBQsjLruQgijI+5NZOfeeDbfmdw1kv20WjZo0hYz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+CiM5OiFPTw6mJqaX/xLRIjTVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFiMmZmNDEtMzY4ZC0z MGY5LWExNmQtYmUxNDc5NzA0NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU/MlbumNmC9M7aPdCQNfNayb7vt70n31c+h+kPF4wSiYnwCRm6Fovk 57DHhf2nQJ9Qi34IhCSCBUcqcDt1ySYCHc1MAtcie64K7aY2DdjDQPkc88I2zlGc uMHHgDhF/HXkStel2GGBv0RRafSDmqelIh/r3Nyv3kp66VTsPn7QZ02LbQcsbJQo sGBMbggH5rQXZKdGqokmBmE6+PMR3/XjHzZSIk3fEpZnSvwaqIfrtb6NJQzrm3YU +Oj18d1kKwJyAmIxSKr1KQ1FDz3KBQu8hwHD4C7S+KMDVgA2JymBlsBkHpzjVVNW Zp3AJuiRy/kf1uMkFFKU/ot0cvCUBGk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:21:06 2024 by rpki-client on console-fra.rpki-client.org