$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa File: 21ef65b0-89b3-3b33-8192-e464535e916c.roa (raw, json) Hash identifier: pfGdzJsC9C3cP7cwt9b1YfIJnCcskfJ+hKBp9pTmNdA= Subject key identifier: E0:AA:88:1C:5E:27:23:8F:79:4B:63:25:39:2B:0B:6B:1D:7B:32:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15508AD0579465030B35440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 207.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:08:ad:05:79:46:50:30:b3:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=824dd0cb-dece-4f52-902f-f4cd6144c75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:72:1b:c3:3f:a0:2c:62:ee:93:96:fe:4e: 9e:da:9d:2b:e9:d7:0b:b8:ae:e1:24:7a:13:28:75: c3:4f:6b:ae:c6:1b:f5:a2:90:86:5f:b3:fd:c0:fa: 35:72:71:f1:02:a3:62:76:fd:f5:86:78:25:12:f2: b1:e3:86:1a:12:18:19:59:ea:17:51:c1:fb:b4:8d: 26:ba:54:48:2f:41:22:d7:13:2c:7b:69:e0:e5:df: cc:f4:46:77:dc:41:1d:fa:8f:ac:c1:b5:46:de:0b: 5c:90:44:72:ec:6b:62:c6:81:47:32:ce:f5:a1:d3: e6:c1:48:4a:f3:ed:e4:7d:e5:6e:14:57:5c:55:cd: da:2f:4b:60:ec:6e:7a:40:a5:13:e6:b0:57:1b:6a: 9d:ad:e0:90:c9:bf:7a:ca:6c:c7:6f:12:51:ba:c8: bc:d4:19:d9:cf:27:ae:c7:3e:31:c4:fd:16:08:6d: 17:c1:59:b2:06:e5:3e:7f:7b:17:c2:53:0d:83:e1: 4c:28:11:f3:c6:9b:93:08:12:b1:cf:03:c1:7a:a1: 36:ac:8b:33:e3:87:6b:f7:af:25:16:4d:02:f7:be: e2:c8:53:dd:b3:9b:16:a3:12:c1:53:1e:30:3c:35: 79:5a:2f:8f:3b:2e:a3:93:1e:47:ba:d9:1d:da:28: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:88:1C:5E:27:23:8F:79:4B:63:25:39:2B:0B:6B:1D:7B:32:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fc:ca:e6:48:d9:c0:71:a8:1d:d8:5f:46:3f:3c:ec:40:44: 08:5b:93:b3:a1:90:9d:25:32:55:11:00:6a:b6:45:86:8a:94: 0a:93:ac:50:ed:78:d4:82:ac:eb:9f:4f:02:2c:54:88:13:3e: 39:6a:f3:c3:31:58:02:ca:22:9c:53:fb:d4:e8:f9:65:4e:e5: 41:d2:93:dd:15:f1:32:94:68:7e:e8:13:73:55:82:e0:3a:27: 83:b9:f3:19:1a:a3:49:50:84:54:99:87:7a:f4:5b:49:8d:85: ab:f9:e5:3a:02:f1:96:08:b9:ea:c1:71:75:6c:63:fc:f4:8b: 14:d0:1c:d6:84:eb:ca:2b:5d:92:8d:41:13:5e:ff:b7:f0:dd: 1f:84:4b:fc:1a:8b:06:c5:50:11:01:ec:d7:9f:e2:5f:04:76: bb:08:2b:16:b6:1a:bc:d6:7d:49:47:e6:58:bf:ce:74:f1:54: 86:16:4b:a8:f1:52:08:44:94:ca:34:1a:f7:2d:4c:8e:2e:8d: 70:0a:53:e6:a8:94:28:6b:66:ee:c7:b2:c4:4f:e5:fe:8f:2c: 04:39:27:ff:f0:e7:eb:c2:5d:40:8e:ce:d1:10:c0:89:15:e5: 5f:31:98:9d:e9:6d:ca:db:d4:62:0c:7d:5d:8f:2b:79:e0:a0: 59:14:93:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQitBXlGUDCzVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODI0ZGQwY2ItZGVjZS00ZjUyLTkwMmYtZjRjZDYxNDRjNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrlyG8M/oCxi7pOW/k6e2p0r6dcLuK7hJHoT KHXDT2uuxhv1opCGX7P9wPo1cnHxAqNidv31hnglEvKx44YaEhgZWeoXUcH7tI0m ulRIL0Ei1xMse2ng5d/M9EZ33EEd+o+swbVG3gtckERy7GtixoFHMs71odPmwUhK 8+3kfeVuFFdcVc3aL0tg7G56QKUT5rBXG2qdreCQyb96ymzHbxJRusi81BnZzyeu xz4xxP0WCG0XwVmyBuU+f3sXwlMNg+FMKBHzxpuTCBKxzwPBeqE2rIsz44dr968l Fk0C977iyFPds5sWoxLBUx4wPDV5Wi+POy6jkx5Hutkd2iiZzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCqiBxeJyOPeUtjJTkrC2sdezLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlZjY1YjAtODliMy0z YjMzLTgxOTItZTQ2NDUzNWU5MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG78yuZI2cBxqB3YX0Y/POxARAhbk7OhkJ0lMlURAGq2RYaKlAqTrFDt eNSCrOufTwIsVIgTPjlq88MxWALKIpxT+9To+WVO5UHSk90V8TKUaH7oE3NVguA6 J4O58xkao0lQhFSZh3r0W0mNhav55ToC8ZYIuerBcXVsY/z0ixTQHNaE68orXZKN QRNe/7fw3R+ES/waiwbFUBEB7Nef4l8EdrsIKxa2GrzWfUlH5li/znTxVIYWS6jx UghElMo0GvctTI4ujXAKU+aolChrZu7HssRP5f6PLAQ5J//w5+vCXUCOztEQwIkV 5V8xmJ3pbcrb1GIMfV2PK3ngoFkUk5M= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:25 2024 by rpki-client on console-ams.rpki-client.org