$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa File: 1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa (raw, json) Hash identifier: cCgSd14mElo98puDpDcT3LQ2BTGNKSLOwKtYO6jYpB8= Subject key identifier: DA:BA:E5:8F:49:2D:39:A9:05:E7:13:9B:54:04:03:EF:66:A4:2C:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117CE42AE4F078CC25DB000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa Signing time: Thu 12 Sep 2024 17:22:31 +0000 ROA not before: Thu 12 Sep 2024 17:22:31 +0000 ROA not after: Wed 11 Dec 2024 18:22:31 +0000 asID: 7029 IP address blocks: 71.28.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:ce:42:ae:4f:07:8c:c2:5d:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:31 2024 GMT Not After : Dec 11 18:22:31 2024 GMT Subject: CN=24cb58be-4f0d-4137-91e3-c7e87977d918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:a0:a1:48:b0:8c:c4:1f:e0:ea:d8:df:71: 27:47:93:dd:e8:15:04:1c:0d:63:80:d1:0d:a7:3a: c9:71:91:4d:c3:81:f7:ac:4c:5c:2c:b6:d5:e0:8a: e5:33:c3:83:24:92:10:03:ca:80:ab:e1:ce:d9:5b: 71:61:23:0c:5d:37:27:82:2e:64:8f:c1:ea:5d:2d: 4b:6a:db:d9:70:a4:e7:07:12:ee:55:32:1b:e7:50: 40:c8:0a:e7:d6:00:d5:6c:97:e1:db:ac:70:26:e6: 32:0f:1e:ef:3d:71:e7:05:d7:ca:fd:e2:5f:c7:45: dc:f6:87:f0:34:b8:93:5e:6e:65:c9:de:59:ce:0f: d6:a9:ad:ff:55:4d:26:0c:cf:5d:36:43:4f:33:74: 9a:19:71:e4:97:01:4b:b7:fc:1f:ce:a5:8a:59:d9: 5c:96:77:8b:03:39:75:4e:1a:e1:b4:8a:8c:75:e9: 53:f6:f4:dd:1d:00:ce:b3:8a:3c:c9:8f:15:3e:e2: e5:5b:b1:cd:35:62:86:33:a4:89:57:88:03:3f:1d: 0f:cc:65:64:78:39:1a:c5:3c:c3:6e:8a:38:98:c3: d2:76:0d:a1:50:bc:32:3a:38:db:61:a4:6f:2e:be: 49:e0:49:d4:51:38:a6:8c:14:a2:d0:04:06:22:ec: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BA:E5:8F:49:2D:39:A9:05:E7:13:9B:54:04:03:EF:66:A4:2C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:af:c4:2c:fa:ce:28:25:63:34:54:89:98:72:08:48:0e:af: c9:c0:c6:9d:87:1e:38:f1:04:5d:0c:3d:d2:57:da:cf:8e:cf: 91:e1:7d:27:7b:04:8d:5f:52:a0:f9:32:e3:e7:b8:32:a9:99: a6:10:cd:9f:82:74:ba:c6:a1:6b:94:f3:07:61:dd:54:b4:a9: c5:54:df:b2:1e:ab:fb:4c:9a:a3:ba:50:ed:6f:48:ea:08:2f: a8:df:4f:9b:04:4d:a5:72:d1:66:d3:dc:ed:50:69:fa:fa:7d: 49:41:23:3f:db:81:fd:16:b1:09:00:06:52:c3:77:10:38:3f: 98:ba:bb:5d:e1:0f:ac:a8:87:5e:8b:08:80:da:85:b4:b2:06: 29:1d:8c:c9:32:85:9b:b1:5b:2f:ce:a7:75:4a:5e:08:af:92: a6:e0:64:a4:36:1f:33:eb:c2:7a:c5:13:a6:38:7b:b2:26:bf: 82:2f:da:fa:ba:64:ca:5f:97:2e:83:c1:51:da:e8:bf:64:75: 9c:77:55:d9:84:e7:d2:69:f7:d4:0f:74:79:be:a2:98:8e:59: 0a:7d:98:13:4e:3d:e7:1d:df:9e:48:87:7a:b0:d3:59:ec:68: 86:ac:e2:2a:2a:55:fc:81:dd:ed:2a:41:39:9b:49:44:b1:de: 9c:59:01:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF85Crk8HjMJdsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIzMVoXDTI0MTIxMTE4MjIzMVowLzEtMCsGA1UEAxMk MjRjYjU4YmUtNGYwZC00MTM3LTkxZTMtYzdlODc5NzdkOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQagoUiwjMQf4OrY33EnR5Pd6BUEHA1jgNEN pzrJcZFNw4H3rExcLLbV4IrlM8ODJJIQA8qAq+HO2VtxYSMMXTcngi5kj8HqXS1L atvZcKTnBxLuVTIb51BAyArn1gDVbJfh26xwJuYyDx7vPXHnBdfK/eJfx0Xc9ofw NLiTXm5lyd5Zzg/Wqa3/VU0mDM9dNkNPM3SaGXHklwFLt/wfzqWKWdlclneLAzl1 ThrhtIqMdelT9vTdHQDOs4o8yY8VPuLlW7HNNWKGM6SJV4gDPx0PzGVkeDkaxTzD boo4mMPSdg2hULwyOjjbYaRvLr5J4EnUUTimjBSi0AQGIuzu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq65Y9JLTmpBecTm1QEA+9mpCyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWU0OWEyZjktMDhhZS0z OGQ1LWFhY2MtNTgxMDZmYzllM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmvxCz6ziglYzRUiZhyCEgOr8nAxp2HHjjxBF0MPdJX2s+Oz5HhfSd7 BI1fUqD5MuPnuDKpmaYQzZ+CdLrGoWuU8wdh3VS0qcVU37Ieq/tMmqO6UO1vSOoI L6jfT5sETaVy0WbT3O1Qafr6fUlBIz/bgf0WsQkABlLDdxA4P5i6u13hD6yoh16L CIDahbSyBikdjMkyhZuxWy/Op3VKXgivkqbgZKQ2HzPrwnrFE6Y4e7Imv4Iv2vq6 ZMpfly6DwVHa6L9kdZx3VdmE59Jp99QPdHm+opiOWQp9mBNOPecd355Ih3qw01ns aIas4ioqVfyB3e0qQTmbSUSx3pxZATo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:52 2024 by rpki-client on console-fra.rpki-client.org