$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2c4f5c7d-8eb9-300e-9a78-7d077e76d650.roa File: 2c4f5c7d-8eb9-300e-9a78-7d077e76d650.roa (raw, json) Hash identifier: WKKJie1Gh3747WnvMK6O7fJHqBYP3A/SyjjcHDZfl7o= Subject key identifier: 94:DB:B0:80:84:21:B8:DE:D9:2D:8F:0F:15:21:CF:0F:F2:C8:FB:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553A543B11340088879900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2c4f5c7d-8eb9-300e-9a78-7d077e76d650.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 207.230.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3a:54:3b:11:34:00:88:87:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=8a4ac6b7-c10b-49fb-962a-9b6622d5895a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:57:ff:3c:42:48:c2:41:cf:ff:4e:f8:35: 0f:62:26:38:57:ed:30:d1:30:86:c3:c5:dd:9d:41: 64:fb:ab:86:dd:35:01:17:e4:e2:18:c4:49:fe:ff: b2:1c:49:3b:a9:28:00:ec:f3:66:f4:f3:0d:51:50: df:98:0d:b8:d5:ca:bd:61:9c:94:15:b9:8f:f7:04: cb:cb:1f:83:ff:a1:7c:87:f6:59:a2:72:0c:0a:34: 01:f0:4e:7c:0c:44:08:85:76:ca:9a:da:ba:92:12: 74:8a:d5:3b:ac:47:81:06:e0:a3:73:d7:46:c9:42: 9b:c1:8c:33:c8:05:9b:fb:43:08:b5:5b:4b:a6:62: 02:fb:55:c6:d4:63:a8:32:67:17:c9:58:1c:96:92: 1d:d0:4f:f0:1d:dc:35:78:64:cf:d8:6c:88:4a:38: 9e:55:c8:94:4b:b4:32:be:f2:cd:f0:9d:7d:35:62: 65:d2:56:81:b4:d6:b2:13:29:f8:3a:7b:8c:91:f8: b6:4e:43:69:29:d7:b9:49:85:c2:fc:21:08:54:af: 18:78:83:ad:0a:5f:2b:b8:ae:e9:cd:a1:11:93:8b: 92:df:22:41:8f:e3:d5:74:ee:af:2e:3a:37:d3:4b: 68:34:bc:b1:4b:b9:7c:be:e5:65:13:fe:a6:f7:a2: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:B0:80:84:21:B8:DE:D9:2D:8F:0F:15:21:CF:0F:F2:C8:FB:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2c4f5c7d-8eb9-300e-9a78-7d077e76d650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.230.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c7:34:d5:9d:f5:bf:89:8d:39:6b:01:a1:cb:34:d2:fc:f5: ad:fa:ef:1f:c1:fd:53:03:cf:bd:56:37:ef:d8:0d:c5:d2:fd: 35:03:81:dd:0d:99:c4:30:75:30:0b:a1:d0:b1:19:b9:f0:08: bc:f1:36:fd:68:99:fc:8f:e2:46:82:bc:4d:f6:13:ea:b2:29: f0:82:d0:0c:7e:4b:34:a6:e6:1f:d5:90:be:68:48:f7:87:91: 32:2e:6a:c0:37:61:44:8d:51:06:4a:f0:00:72:e2:2b:f0:62: 84:01:1d:49:bd:71:21:f9:ad:2a:e4:aa:70:7b:9f:32:1b:c7: 2d:b4:b7:6e:96:62:cd:f8:4b:77:48:0c:c2:2c:70:9f:f6:00: f1:a9:49:69:7b:9d:c0:f3:02:41:87:81:2c:0f:58:73:26:71: e5:d9:95:de:b6:87:66:d4:77:b2:fd:82:81:10:1d:1a:d2:cd: 01:b7:93:21:4f:ee:59:7c:1e:5f:51:b6:14:b4:2e:43:a1:66: 03:26:37:93:3e:36:1c:86:0f:f0:e4:73:76:1d:0e:a2:c4:78: f1:b6:23:e1:a3:3d:93:e8:59:a1:85:3e:d8:23:91:d6:7e:bf: 42:03:a7:58:9b:6e:a9:cf:2b:96:7c:c7:27:58:2e:95:e6:f8: a5:91:d8:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTpUOxE0AIiHmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OGE0YWM2YjctYzEwYi00OWZiLTk2MmEtOWI2NjIyZDU4OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG5X/zxCSMJBz/9O+DUPYiY4V+0w0TCGw8Xd nUFk+6uG3TUBF+TiGMRJ/v+yHEk7qSgA7PNm9PMNUVDfmA241cq9YZyUFbmP9wTL yx+D/6F8h/ZZonIMCjQB8E58DEQIhXbKmtq6khJ0itU7rEeBBuCjc9dGyUKbwYwz yAWb+0MItVtLpmIC+1XG1GOoMmcXyVgclpId0E/wHdw1eGTP2GyISjieVciUS7Qy vvLN8J19NWJl0laBtNayEyn4OnuMkfi2TkNpKde5SYXC/CEIVK8YeIOtCl8ruK7p zaERk4uS3yJBj+PVdO6vLjo300toNLyxS7l8vuVlE/6m96LCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTbsICEIbje2S2PDxUhzw/yyPtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmM0ZjVjN2QtOGViOS0z MDBlLTlhNzgtN2QwNzdlNzZkNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz+ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7HNNWd9b+JjTlrAaHLNNL89a367x/B/VMDz71WN+/YDcXS/TUDgd0N mcQwdTALodCxGbnwCLzxNv1omfyP4kaCvE32E+qyKfCC0Ax+SzSm5h/VkL5oSPeH kTIuasA3YUSNUQZK8ABy4ivwYoQBHUm9cSH5rSrkqnB7nzIbxy20t26WYs34S3dI DMIscJ/2APGpSWl7ncDzAkGHgSwPWHMmceXZld62h2bUd7L9goEQHRrSzQG3kyFP 7ll8Hl9RthS0LkOhZgMmN5M+NhyGD/Dkc3YdDqLEePG2I+GjPZPoWaGFPtgjkdZ+ v0IDp1ibbqnPK5Z8xydYLpXm+KWR2DA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:55 2024 by rpki-client on console-fra.rpki-client.org