$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35abf998-7c3a-35d1-8c46-3257de1a0880.roa File: 35abf998-7c3a-35d1-8c46-3257de1a0880.roa (raw, json) Hash identifier: nw3GujVCNo7dFVqWF4lbBQixh9t9tKU0xdmONwnXBZA= Subject key identifier: 31:CE:B6:42:4F:F5:AF:2B:87:98:74:F2:D6:07:97:31:CD:B1:AC:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154FDF5FC7C28C7274BC980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35abf998-7c3a-35d1-8c46-3257de1a0880.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 75.88.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:fd:f5:fc:7c:28:c7:27:4b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=36349d1b-d139-426e-9a5c-bba0ebe74cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:4e:11:53:48:98:01:80:d0:40:f6:ec:93: 9e:97:0e:33:77:ee:37:6c:61:70:0c:67:31:46:13: 63:dc:dd:69:3e:4d:a0:c2:f7:54:2f:10:2b:69:84: 48:7c:3a:d5:00:db:4b:91:fa:fd:06:32:30:f2:2a: a0:27:e1:6b:4e:57:9f:58:1f:57:48:4a:75:d9:ed: 44:55:e3:9b:0d:83:94:87:65:cb:ca:f6:d8:75:b2: 84:23:3b:f8:19:8e:85:a8:29:ac:67:f4:a0:16:69: 9e:6f:da:7c:e5:f5:fc:b9:c5:1e:04:31:8f:e1:2e: 8e:17:76:07:55:b1:82:77:43:1d:f5:47:52:ea:b9: 6c:66:d0:c7:39:b4:0e:81:da:8a:af:3c:71:08:a3: 53:f8:af:7a:ae:85:5d:fe:fb:9d:cd:94:98:33:76: 4c:3f:eb:f6:59:5f:d1:fb:12:7f:64:a4:e9:93:a3: 00:f7:4e:dd:c1:c4:75:2a:1d:9e:09:4f:75:ac:d3: 06:a5:b8:fd:c2:b0:47:bb:73:24:02:34:fb:90:e2: 5e:92:43:1a:70:50:8c:cf:17:2e:e1:f7:75:09:cd: 23:b6:29:07:f9:dd:23:38:de:60:18:d2:27:0a:fe: 81:48:bd:4a:ef:1a:3b:12:e8:1c:be:c1:59:d7:eb: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CE:B6:42:4F:F5:AF:2B:87:98:74:F2:D6:07:97:31:CD:B1:AC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35abf998-7c3a-35d1-8c46-3257de1a0880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:21:f2:6b:27:ce:25:03:1e:dc:76:89:f7:85:72:b2:18:a8: 50:cd:04:47:80:96:68:b4:ad:ee:27:4e:3a:bd:a5:5f:bf:ce: 47:67:c3:c7:16:5e:07:68:f5:68:9e:d2:fe:4c:3f:6f:72:76: 65:7d:35:68:b5:8d:4b:53:83:aa:51:df:a6:47:bc:19:eb:15: ab:e4:8a:fb:63:60:ff:67:99:1d:c4:72:1f:fc:06:5a:af:75: e7:99:d0:2d:1d:40:b4:79:ec:29:ca:8b:ff:96:82:9b:12:09: 56:fe:16:1c:77:62:dc:29:cd:fd:e0:32:a7:6b:f3:2a:85:26: 8c:da:0e:19:2a:38:b3:84:3c:50:e1:f9:19:d0:17:f5:78:11: a7:be:48:9f:03:a5:53:c3:de:48:8e:c8:4f:b0:1d:12:e5:cf: cb:9d:af:f1:89:3f:81:81:8d:f0:fe:90:08:51:8e:5d:14:5f: cc:79:7f:f8:ac:5b:ae:b7:ca:c4:f2:4c:71:fc:42:99:11:42: cd:e7:9b:54:7b:52:a7:15:90:ee:a2:3a:7e:90:87:9c:46:2b: 5c:4d:87:8c:0e:a5:bc:25:34:3b:81:eb:96:ce:40:51:f4:b8: 11:f3:6d:fb:fa:c5:98:41:5a:40:33:30:b6:f5:51:6b:29:59: 67:3e:a2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVP31/HwoxydLyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MzYzNDlkMWItZDEzOS00MjZlLTlhNWMtYmJhMGViZTc0Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKVOEVNImAGA0ED27JOelw4zd+43bGFwDGcx RhNj3N1pPk2gwvdULxAraYRIfDrVANtLkfr9BjIw8iqgJ+FrTlefWB9XSEp12e1E VeObDYOUh2XLyvbYdbKEIzv4GY6FqCmsZ/SgFmmeb9p85fX8ucUeBDGP4S6OF3YH VbGCd0Md9UdS6rlsZtDHObQOgdqKrzxxCKNT+K96roVd/vudzZSYM3ZMP+v2WV/R +xJ/ZKTpk6MA907dwcR1Kh2eCU91rNMGpbj9wrBHu3MkAjT7kOJekkMacFCMzxcu 4fd1Cc0jtikH+d0jON5gGNInCv6BSL1K7xo7EugcvsFZ1+uc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHOtkJP9a8rh5h08tYHlzHNsaxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVhYmY5OTgtN2MzYS0z NWQxLThjNDYtMzI1N2RlMWEwODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEh8msnziUDHtx2ifeFcrIYqFDNBEeAlmi0re4nTjq9pV+/zkdnw8cW Xgdo9Wie0v5MP29ydmV9NWi1jUtTg6pR36ZHvBnrFavkivtjYP9nmR3Ech/8Blqv deeZ0C0dQLR57CnKi/+WgpsSCVb+Fhx3Ytwpzf3gMqdr8yqFJozaDhkqOLOEPFDh +RnQF/V4Eae+SJ8DpVPD3kiOyE+wHRLlz8udr/GJP4GBjfD+kAhRjl0UX8x5f/is W663ysTyTHH8QpkRQs3nm1R7UqcVkO6iOn6Qh5xGK1xNh4wOpbwlNDuB65bOQFH0 uBHzbfv6xZhBWkAzMLb1UWspWWc+on0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:57 2024 by rpki-client on console-fra.rpki-client.org