$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa File: 21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa (raw, json) Hash identifier: YB2BTGjlCjtnMZ1PxV0vMk0EiW/18HjsCPi2xwTofRg= Subject key identifier: 6B:26:33:C4:D5:A4:D0:8F:D6:B8:6A:83:05:95:D8:DB:9D:89:C0:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553ACA5EAF1484A60D4A60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 209.41.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3a:ca:5e:af:14:84:a6:0d:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=7e525a61-3827-445b-bac9-647e034c98d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:c0:2e:30:02:e6:fd:50:d7:3c:30:23:14: 6c:36:56:2d:6b:45:13:e7:30:28:ca:3a:3e:b8:53: 11:50:19:27:e3:80:e4:bd:a0:78:8d:fc:d4:69:41: ba:b8:57:da:cb:95:20:aa:7f:36:dd:d0:dc:2c:1f: cf:17:86:71:4c:8a:d5:01:78:d6:e9:42:c3:c1:9a: bc:55:c2:3f:b3:c0:46:8e:3f:e1:c9:97:fa:96:ea: 4f:c8:a2:c3:22:f6:b3:5b:3a:50:84:7f:4a:39:39: 5e:2f:3a:58:17:35:ab:c3:3b:27:22:19:af:34:10: be:57:10:81:92:a0:06:ef:0a:10:7f:65:5f:5f:10: db:c8:37:40:25:25:0a:e8:4d:6c:41:72:bd:cc:a9: 84:4e:65:5c:fc:38:35:d8:0d:36:eb:90:4d:00:87: f5:6a:57:d9:43:9b:bc:eb:9a:c4:66:76:3b:77:89: c6:d3:67:82:3b:4f:f4:47:93:e0:e8:28:62:c7:b6: 27:6d:89:b1:1e:12:26:22:ac:08:b1:0b:be:d6:57: 3d:e1:f2:5b:14:0d:8a:ec:5d:22:f8:e3:aa:40:b1: 19:91:b5:12:2a:16:2a:c9:cb:0e:b2:22:7a:8d:4c: 47:b1:52:9d:4e:b3:6c:9d:d5:dd:6c:c6:8a:5b:ad: c4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:26:33:C4:D5:A4:D0:8F:D6:B8:6A:83:05:95:D8:DB:9D:89:C0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21714d28-b747-3c29-9653-4fb0ffa3a6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.41.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:64:e8:4d:dc:86:fb:a1:1c:35:eb:1d:b3:76:83:8b:f9:3b: e5:9f:3f:41:2c:48:00:97:4a:cb:ff:8e:ba:12:d3:10:15:ba: c7:b6:18:99:10:e3:77:67:5d:5b:80:03:81:7e:63:15:38:06: e0:45:34:d2:e5:0e:c5:91:ea:09:fc:51:89:1b:fa:04:76:21: b3:d6:de:ca:83:64:5c:15:cf:33:97:4e:f8:21:0f:71:af:55: b7:5e:2f:c1:65:28:7c:2c:01:c4:41:0a:9d:4b:95:b0:ed:64: 2d:54:8d:34:9d:cb:fd:3b:04:26:6e:56:14:9d:ee:e1:fb:a6: 2a:3a:ef:ec:9b:b4:ca:46:37:b3:fe:0e:0c:b6:b6:a3:be:c4: 59:fc:e5:61:bb:5d:38:08:a4:da:85:26:bf:be:60:7d:de:05: 67:e3:9a:ca:9e:d1:d4:bc:a0:9a:3d:48:a9:f6:a3:bf:ad:e9: e5:2e:73:50:5a:37:59:e9:93:13:a8:57:0e:c5:b9:59:19:cb: 6e:64:80:f5:97:6c:d0:eb:e3:6d:41:c9:92:aa:42:d3:2b:46: 0e:7d:db:1e:f2:25:d1:4e:5c:f2:fd:aa:f1:80:a6:13:c0:81: 6d:06:be:6c:66:fd:2b:27:85:2f:bb:fd:fe:d2:63:ff:4c:b3: 95:d7:a9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTrKXq8UhKYNSmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk N2U1MjVhNjEtMzgyNy00NDViLWJhYzktNjQ3ZTAzNGM5OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFzALjAC5v1Q1zwwIxRsNlYta0UT5zAoyjo+ uFMRUBkn44DkvaB4jfzUaUG6uFfay5Ugqn823dDcLB/PF4ZxTIrVAXjW6ULDwZq8 VcI/s8BGjj/hyZf6lupPyKLDIvazWzpQhH9KOTleLzpYFzWrwzsnIhmvNBC+VxCB kqAG7woQf2VfXxDbyDdAJSUK6E1sQXK9zKmETmVc/Dg12A0265BNAIf1alfZQ5u8 65rEZnY7d4nG02eCO0/0R5Pg6Chix7YnbYmxHhImIqwIsQu+1lc94fJbFA2K7F0i +OOqQLEZkbUSKhYqycsOsiJ6jUxHsVKdTrNsndXdbMaKW63ElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsmM8TVpNCP1rhqgwWV2NudicACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE3MTRkMjgtYjc0Ny0z YzI5LTk2NTMtNGZiMGZmYTNhNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNk6E3chvuhHDXrHbN2g4v5O+WfP0EsSACXSsv/jroS0xAVuse2GJkQ 43dnXVuAA4F+YxU4BuBFNNLlDsWR6gn8UYkb+gR2IbPW3sqDZFwVzzOXTvghD3Gv VbdeL8FlKHwsAcRBCp1LlbDtZC1UjTSdy/07BCZuVhSd7uH7pio67+ybtMpGN7P+ Dgy2tqO+xFn85WG7XTgIpNqFJr++YH3eBWfjmsqe0dS8oJo9SKn2o7+t6eUuc1Ba N1npkxOoVw7FuVkZy25kgPWXbNDr421ByZKqQtMrRg592x7yJdFOXPL9qvGAphPA gW0Gvmxm/SsnhS+7/f7SY/9Ms5XXqfs= -----END CERTIFICATE-----Generated at Mon Nov 25 03:26:28 2024 by rpki-client on console-fra.rpki-client.org