$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa File: 1fa4d735-21ff-3fab-860f-e2f02e2af107.roa (raw, json) Hash identifier: ogUxAVB6dtbkV9IyFJ+hVvRRHQotO1NoYbPe45hwwDk= Subject key identifier: B4:7C:8C:0D:C6:69:CA:20:D7:76:4F:E5:37:F6:1F:17:5B:E1:A1:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40D0CA762EE2412A36F680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 69.66.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d0:ca:76:2e:e2:41:2a:36:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=bf589448-a0f3-48a1-80f3-a0d72d5df125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:11:ef:38:0f:0b:0c:6c:a7:ae:24:82:9d: 85:3e:ba:79:a1:eb:df:34:38:04:f4:37:72:53:ae: a4:b8:59:c4:ff:55:c7:7a:19:ec:2e:43:80:eb:86: 1c:5e:b9:61:a3:c6:fa:ff:6a:25:af:e0:b7:09:bb: ec:23:e0:33:6e:43:c4:4d:34:cd:ff:e6:1e:79:47: 28:45:a5:44:b3:c0:28:12:51:36:dd:b9:03:29:f9: fe:09:06:15:e9:25:bc:43:a5:5a:36:58:87:7d:7d: 7b:2a:b0:38:4c:e2:1d:e5:d4:3a:5a:84:b7:b2:bb: 2f:4a:22:39:9c:cc:a6:f0:08:cb:11:70:43:ff:f9: 5a:2b:4d:a9:1c:2a:58:3b:1e:4a:63:b0:06:ff:b6: fb:41:41:03:c8:bc:a5:d4:cf:c1:17:49:43:b5:40: 52:d3:09:ef:02:5a:7f:aa:80:22:f6:e4:a8:3b:4f: a0:0e:b1:b1:24:dc:a5:02:82:50:42:26:8d:ae:91: 5a:44:21:2e:34:ac:c7:d0:27:f3:01:c4:02:39:a7: 52:a3:89:35:4a:e3:42:8d:82:60:75:ab:50:09:ae: e3:2f:86:48:a1:de:00:53:29:3f:b1:8a:f1:36:bf: e5:6c:a9:4a:f7:2f:5a:71:db:0b:23:e5:ed:c9:a0: 35:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7C:8C:0D:C6:69:CA:20:D7:76:4F:E5:37:F6:1F:17:5B:E1:A1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fa4d735-21ff-3fab-860f-e2f02e2af107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:96:db:e9:b8:d4:4c:36:95:a8:35:3d:aa:63:cb:3d:46:73: e0:df:3b:40:30:b9:63:d5:4b:69:b7:f2:7d:9c:da:2e:1c:30: 1d:39:3c:a5:3c:94:85:68:c9:28:01:50:67:77:78:ad:8a:bc: 67:7b:00:87:22:2b:2e:4b:d0:29:3c:34:39:9d:37:37:6a:ac: 13:58:51:7f:55:72:f4:99:60:65:df:fe:ac:d0:62:6e:d7:42: 8b:c5:9c:04:a6:33:6e:1b:27:07:17:69:78:90:f5:a1:eb:cc: a7:30:8d:6d:41:2b:b6:17:8b:e0:b9:5b:62:25:2d:7d:05:51: ef:bf:e4:49:75:f3:2f:97:0f:49:64:4c:cf:4d:43:fb:0b:c1: b6:8d:8d:e4:1f:9d:c0:78:0b:22:18:5f:6a:68:87:c6:8a:7f: e3:96:2a:d1:b3:44:03:1f:fc:17:13:9a:ca:61:36:e2:db:e9: 34:d6:52:2a:97:71:c4:cb:bd:98:c5:ed:da:13:d5:78:e0:60: 1a:7a:f1:be:b3:d4:0b:0a:fa:e3:fe:81:7c:93:ee:c0:7c:1d: 2a:fe:b9:93:0e:f4:d4:c2:ef:73:27:8d:04:9d:97:b9:8d:de: e5:49:5f:73:a4:92:ad:40:2b:81:6c:2c:9d:d7:17:e3:6f:d6: 28:46:3f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNDKdi7iQSo29oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YmY1ODk0NDgtYTBmMy00OGExLTgwZjMtYTBkNzJkNWRmMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGwR7zgPCwxsp64kgp2FPrp5oevfNDgE9Ddy U66kuFnE/1XHehnsLkOA64YcXrlho8b6/2olr+C3CbvsI+AzbkPETTTN/+YeeUco RaVEs8AoElE23bkDKfn+CQYV6SW8Q6VaNliHfX17KrA4TOId5dQ6WoS3srsvSiI5 nMym8AjLEXBD//laK02pHCpYOx5KY7AG/7b7QUEDyLyl1M/BF0lDtUBS0wnvAlp/ qoAi9uSoO0+gDrGxJNylAoJQQiaNrpFaRCEuNKzH0CfzAcQCOadSo4k1SuNCjYJg datQCa7jL4ZIod4AUyk/sYrxNr/lbKlK9y9acdsLI+XtyaA17wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR8jA3Gacog13ZP5Tf2Hxdb4aFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZhNGQ3MzUtMjFmZi0z ZmFiLTg2MGYtZTJmMDJlMmFmMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2W2+m41Ew2lag1Papjyz1Gc+DfO0AwuWPVS2m38n2c2i4cMB05PKU8 lIVoySgBUGd3eK2KvGd7AIciKy5L0Ck8NDmdNzdqrBNYUX9VcvSZYGXf/qzQYm7X QovFnASmM24bJwcXaXiQ9aHrzKcwjW1BK7YXi+C5W2IlLX0FUe+/5El18y+XD0lk TM9NQ/sLwbaNjeQfncB4CyIYX2poh8aKf+OWKtGzRAMf/BcTmsphNuLb6TTWUiqX ccTLvZjF7doT1XjgYBp68b6z1AsK+uP+gXyT7sB8HSr+uZMO9NTC73MnjQSdl7mN 3uVJX3Okkq1AK4FsLJ3XF+Nv1ihGPxc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:34 2024 by rpki-client on console-ams.rpki-client.org