$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/321a55d1-a932-3351-9408-848fa2563c26.roa File: 321a55d1-a932-3351-9408-848fa2563c26.roa (raw, json) Hash identifier: Gfv/SWEmzgEnGTmqJHJJaDt/6mX+8ZaxhwTxe58cAo8= Subject key identifier: 36:9B:0B:A7:CB:16:02:98:DB:25:F0:20:D1:C5:5F:98:CC:57:F4:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552ED49F5A38263D125D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/321a55d1-a932-3351-9408-848fa2563c26.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 71.28.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2e:d4:9f:5a:38:26:3d:12:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=3df26c48-cf27-4bdf-9fe9-41258d7253d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:b1:cd:e9:b2:ae:a1:54:5e:12:6d:8c:87: 9d:1f:a2:5f:c8:68:4d:ab:a9:17:90:91:33:69:86: 47:8e:8d:9b:ac:19:7d:04:5b:0b:fc:9e:b7:0a:41: e2:e4:99:4c:62:51:b5:9c:5d:eb:31:6a:e5:a1:e8: 41:89:3d:1a:0b:a1:7a:de:3e:d4:59:53:4c:19:91: 50:e9:ec:e3:25:95:f2:3c:7d:9e:92:cc:f6:78:a7: c7:7d:53:04:75:a2:2b:f5:2e:fc:c9:5c:b2:07:b0: 90:8a:48:46:4d:70:2f:81:b9:ef:0f:0d:b1:8d:13: 8e:7a:0a:1b:f5:b3:39:80:84:d5:44:ed:57:99:69: d5:35:4e:75:e0:ed:02:e3:79:c4:74:04:dd:8e:d3: 21:10:20:3a:3f:2e:d6:6f:1b:9f:df:ac:3d:30:59: a4:e9:47:63:0f:79:4f:bb:3a:b5:15:62:6f:83:9b: 97:7b:b9:28:2c:21:41:8a:f1:48:e0:a0:76:8d:d9: ca:2f:7d:6c:bd:a9:c9:c7:76:7d:a7:07:1f:3a:bc: 7f:50:50:d8:8f:a3:e8:6e:3e:08:10:7f:6c:9a:f9: c3:e4:1b:d7:2f:bb:b6:6b:e9:98:89:b6:26:4d:b6: b5:33:ae:52:bf:5c:92:f0:df:9f:8e:75:93:3d:b3: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9B:0B:A7:CB:16:02:98:DB:25:F0:20:D1:C5:5F:98:CC:57:F4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/321a55d1-a932-3351-9408-848fa2563c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:3c:8f:5a:a9:7a:9d:a3:a2:35:e1:37:ab:74:62:e6:d9:41: ca:4f:8d:c4:cb:ae:0e:54:e2:46:60:d5:30:05:54:f3:1f:e3: 03:4c:52:a1:da:9d:ed:2a:40:2a:78:84:51:96:3f:f3:aa:61: 33:b3:f9:7c:8a:6d:a4:4b:c1:62:d7:38:61:02:a3:de:28:f6: 14:8f:0f:cd:d9:82:49:ee:83:88:67:98:25:d3:77:e7:c1:d9: 18:b7:63:d4:17:82:b8:e1:c6:84:4c:0c:19:7f:55:6b:af:4c: 71:ed:7e:51:79:f0:4c:f6:d4:0a:4a:6b:27:dd:7b:77:e3:94: cd:14:11:c5:20:e8:17:f7:fd:52:2e:ea:f1:8d:2b:eb:0b:51: 54:7b:3b:92:81:ad:d5:45:4b:f6:3f:ae:ad:99:30:0f:a7:df: 01:dc:e3:6a:ac:8f:09:f6:6d:c9:0b:3e:f8:2d:59:6a:6d:19: c3:c7:02:2b:ce:33:23:fb:bc:59:57:19:07:71:5f:b1:71:45: c3:68:51:e8:d4:9a:80:e5:fd:7d:1f:d5:30:42:f8:2e:c0:e1: ab:7c:d0:eb:8e:98:7d:f0:42:e2:57:90:ac:55:3c:bf:d3:60: c9:6e:6f:2a:4b:c6:7f:65:e6:e9:37:87:98:4d:ab:5c:c1:7c: 96:c2:57:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVS7Un1o4Jj0SXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk M2RmMjZjNDgtY2YyNy00YmRmLTlmZTktNDEyNThkNzI1M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvCxzemyrqFUXhJtjIedH6JfyGhNq6kXkJEz aYZHjo2brBl9BFsL/J63CkHi5JlMYlG1nF3rMWrloehBiT0aC6F63j7UWVNMGZFQ 6ezjJZXyPH2eksz2eKfHfVMEdaIr9S78yVyyB7CQikhGTXAvgbnvDw2xjROOegob 9bM5gITVRO1XmWnVNU514O0C43nEdATdjtMhECA6Py7Wbxuf36w9MFmk6UdjD3lP uzq1FWJvg5uXe7koLCFBivFI4KB2jdnKL31svanJx3Z9pwcfOrx/UFDYj6Pobj4I EH9smvnD5BvXL7u2a+mYibYmTba1M65Sv1yS8N+fjnWTPbOFrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDabC6fLFgKY2yXwINHFX5jMV/SfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzIxYTU1ZDEtYTkzMi0z MzUxLTk0MDgtODQ4ZmEyNTYzYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw8j1qpep2jojXhN6t0YubZQcpPjcTLrg5U4kZg1TAFVPMf4wNMUqHa ne0qQCp4hFGWP/OqYTOz+XyKbaRLwWLXOGECo94o9hSPD83Zgknug4hnmCXTd+fB 2Ri3Y9QXgrjhxoRMDBl/VWuvTHHtflF58Ez21ApKayfde3fjlM0UEcUg6Bf3/VIu 6vGNK+sLUVR7O5KBrdVFS/Y/rq2ZMA+n3wHc42qsjwn2bckLPvgtWWptGcPHAivO MyP7vFlXGQdxX7FxRcNoUejUmoDl/X0f1TBC+C7A4at80OuOmH3wQuJXkKxVPL/T YMlubypLxn9l5uk3h5hNq1zBfJbCV/E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:37 2024 by rpki-client on console-ams.rpki-client.org