$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24149d29-6bee-3682-9e16-9dcdd2f2e4d2.roa File: 24149d29-6bee-3682-9e16-9dcdd2f2e4d2.roa (raw, json) Hash identifier: DXLEVLWTZNItFeCd7/Inrmh8e9X68esSuc+YYLj6ywA= Subject key identifier: A5:27:48:02:87:89:F9:D1:A4:1B:5D:39:06:19:85:A4:5D:A8:39:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553AD5C4D35D63F41C8540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24149d29-6bee-3682-9e16-9dcdd2f2e4d2.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 209.50.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3a:d5:c4:d3:5d:63:f4:1c:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=9cacf33d-9655-44de-8ef2-ffd823457fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:f3:80:1f:13:fe:8f:1f:77:20:e9:28:97: 0f:1e:89:8e:25:1f:f1:13:f2:b6:da:e2:14:ca:57: 33:d7:82:27:b2:4b:16:6e:82:76:78:98:5c:bc:ee: 2b:38:62:96:ac:57:bf:c9:04:1d:14:fa:9e:8d:d8: 81:b4:01:b4:a4:83:7f:c3:0c:ce:a1:39:f1:23:ed: a3:66:47:42:88:25:67:c6:b5:95:f2:da:d1:bc:a1: 0e:20:ae:11:79:ed:b8:38:12:6e:48:fc:16:9f:d9: f9:5d:e3:db:8a:9e:e0:3c:2e:0d:7f:97:33:10:b6: 6d:fe:6e:04:64:5b:40:72:92:05:06:4d:b4:c2:e8: 74:96:c2:ff:d3:c0:b9:86:67:40:ea:8e:9d:e5:22: 40:df:54:80:cb:4f:d8:45:de:1e:1c:c3:59:53:f2: 9f:96:7d:2e:b5:3d:12:0d:cd:b4:1f:e2:48:bf:ab: a8:42:26:6e:d9:f5:de:8f:7b:01:38:46:3f:e6:94: fe:00:32:7f:6d:55:21:7c:82:4a:6d:b5:dd:fd:a8: a1:91:e1:07:33:7b:db:5e:64:cc:0b:07:c7:ef:0d: b9:57:b6:ad:b3:da:68:6b:96:1c:6c:fd:f9:f6:10: 1a:5b:d9:0d:70:07:a6:62:17:b4:c0:81:7b:fe:01: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:27:48:02:87:89:F9:D1:A4:1B:5D:39:06:19:85:A4:5D:A8:39:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24149d29-6bee-3682-9e16-9dcdd2f2e4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.50.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ac:de:6e:11:3d:17:25:57:a2:ff:4a:1a:b0:b0:67:c7:93: d1:1e:02:a0:4e:08:34:d9:a6:3b:a7:08:d8:77:0c:6f:b8:52: 38:71:97:66:51:69:18:c0:0d:ec:1b:fc:47:48:36:b4:9c:28: fd:04:a6:33:41:70:99:7d:05:be:1a:17:b8:3f:23:2d:6b:5d: f8:1f:57:7f:34:ad:29:bb:10:cb:97:c0:d1:5e:a4:ef:9d:82: 41:35:d4:c7:53:dc:3b:70:06:af:19:7c:d8:48:d0:18:7a:00: 6a:ef:ad:e8:12:ac:42:2f:12:e4:f9:19:15:ca:3b:9d:a7:43: e8:89:92:a5:65:7e:4f:4b:5d:9e:46:a7:21:43:62:9d:f7:41: 7a:10:1b:b7:13:8f:a5:a6:5f:fe:c2:03:ad:f3:e6:43:24:41: 1f:69:32:2b:77:4f:17:be:bc:59:0b:4a:3f:bb:b7:a9:e0:27: 4e:67:49:fb:59:3a:bf:d0:0b:21:a6:c2:3c:01:82:aa:de:ba: f7:1c:61:66:3f:a3:d6:69:1b:d9:b1:e2:f2:30:6f:67:05:87: d3:f4:24:f7:88:86:9d:40:3d:ac:90:c9:7e:5f:86:5a:cc:9b: 9c:85:c2:14:ad:a2:e0:d7:c6:70:1a:ca:8f:89:93:f2:b9:95: 46:30:e3:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTrVxNNdY/QchUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OWNhY2YzM2QtOTY1NS00NGRlLThlZjItZmZkODIzNDU3ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiXzgB8T/o8fdyDpKJcPHomOJR/xE/K22uIU ylcz14InsksWboJ2eJhcvO4rOGKWrFe/yQQdFPqejdiBtAG0pIN/wwzOoTnxI+2j ZkdCiCVnxrWV8trRvKEOIK4Ree24OBJuSPwWn9n5XePbip7gPC4Nf5czELZt/m4E ZFtAcpIFBk20wuh0lsL/08C5hmdA6o6d5SJA31SAy0/YRd4eHMNZU/Kfln0utT0S Dc20H+JIv6uoQiZu2fXej3sBOEY/5pT+ADJ/bVUhfIJKbbXd/aihkeEHM3vbXmTM CwfH7w25V7ats9poa5YcbP359hAaW9kNcAemYhe0wIF7/gEr/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUnSAKHifnRpBtdOQYZhaRdqDk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQxNDlkMjktNmJlZS0z NjgyLTllMTYtOWRjZGQyZjJlNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2s3m4RPRclV6L/ShqwsGfHk9EeAqBOCDTZpjunCNh3DG+4Ujhxl2ZR aRjADewb/EdINrScKP0EpjNBcJl9Bb4aF7g/Iy1rXfgfV380rSm7EMuXwNFepO+d gkE11MdT3DtwBq8ZfNhI0Bh6AGrvregSrEIvEuT5GRXKO52nQ+iJkqVlfk9LXZ5G pyFDYp33QXoQG7cTj6WmX/7CA63z5kMkQR9pMit3Txe+vFkLSj+7t6ngJ05nSftZ Or/QCyGmwjwBgqreuvccYWY/o9ZpG9mx4vIwb2cFh9P0JPeIhp1APayQyX5fhlrM m5yFwhStouDXxnAayo+Jk/K5lUYw4/Y= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:35 2024 by rpki-client on console-ams.rpki-client.org