$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa File: 36ae05ca-1685-3b04-877b-765a67c8b22a.roa (raw, json) Hash identifier: FM0u1LT6jO8Dtxre5NrbkvAfC/Ssm5jzUllM8Q4e9ow= Subject key identifier: 3C:B2:F6:55:EB:44:51:48:6D:22:19:6E:D1:9D:B4:40:35:4B:29:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552CDE0E1C9674B8B63980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 66.148.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2c:de:0e:1c:96:74:b8:b6:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=f5cf4193-07ea-4518-830e-eeec9e2521be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:44:68:92:84:f4:8e:5f:7b:38:f2:18:b7: 07:ec:f0:5d:6e:fb:7c:52:b6:4b:1a:80:21:14:d7: c7:63:49:d6:bd:50:a8:c8:e0:54:d8:0a:41:5e:a9: 61:c0:95:1e:86:b5:2d:45:fb:8c:d1:7f:85:84:03: 29:d6:6a:91:dc:56:db:d4:79:28:87:e8:30:ae:25: 7d:4c:a2:5f:b7:f0:ff:e5:ab:0d:ea:cb:2c:b2:7c: 5e:34:4e:44:2f:7c:d1:94:4f:c9:cc:33:27:4c:2b: 1e:d1:89:57:6a:b5:52:c7:dc:1b:0c:fc:20:04:2c: 5e:cc:45:b9:d8:05:55:c7:f3:49:47:61:66:b7:70: f6:9a:01:94:ed:cc:68:d4:f0:1e:31:3c:c3:c9:15: 08:99:f9:34:37:cb:01:d4:5b:db:30:df:c5:37:f2: d7:63:85:e7:0d:7e:48:6a:be:70:32:60:81:70:3a: 56:09:56:c2:68:c9:01:4e:1c:9e:50:ee:97:33:69: 55:c0:fa:db:9f:af:d3:30:82:0c:28:af:7e:81:0a: c8:10:14:7c:cf:b7:61:14:9f:14:a7:e3:0b:90:dc: a6:29:cf:88:ad:e2:d0:fc:e8:dc:f4:44:c4:5e:95: 0f:ee:ba:2c:e1:24:03:cb:c2:bc:c4:4e:04:b6:a4: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B2:F6:55:EB:44:51:48:6D:22:19:6E:D1:9D:B4:40:35:4B:29:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.148.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5c:17:34:43:78:df:ae:ca:c9:bb:e5:47:58:c6:14:ff:8f: 53:bb:c7:54:a9:16:b8:88:2a:3e:dd:6b:e2:c1:e2:aa:69:87: fc:94:b7:50:1b:59:8d:1e:08:b8:5f:04:6b:c5:90:8a:74:a0: a4:fc:f9:2a:f6:18:ff:16:a4:ad:83:27:5a:6b:66:ca:5f:06: 9c:61:bf:69:ba:7e:0b:da:82:23:d0:f7:f4:e9:b4:91:6e:a8: 70:cf:d9:9c:08:72:e4:04:15:70:a2:56:8d:67:39:54:ca:ee: 96:7a:5c:a2:67:b0:25:2a:5c:a0:96:42:8d:1e:a4:dc:2b:a2: 01:3d:99:c8:a9:0c:d6:cb:43:7e:0d:6d:11:22:e4:ed:4e:d6: 77:41:d5:15:88:91:db:7b:81:46:2b:eb:49:b4:97:17:31:7e: fa:50:63:67:31:ee:ca:55:60:26:65:0c:ea:25:15:e7:2d:3d: 25:09:2e:47:0f:e0:48:1d:d7:5f:36:b9:91:03:cf:c8:5a:bf: 46:a6:f3:29:79:6c:a5:a9:db:0d:5d:fd:94:08:36:3c:b0:dd: ac:0c:d9:dd:21:11:3f:8f:b9:52:0a:0f:d6:e8:73:05:43:63: 0f:bd:72:18:53:10:8c:45:c9:34:eb:0e:02:c7:eb:79:07:29: 7d:45:52:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSzeDhyWdLi2OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZjVjZjQxOTMtMDdlYS00NTE4LTgzMGUtZWVlYzllMjUyMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRBEaJKE9I5fezjyGLcH7PBdbvt8UrZLGoAh FNfHY0nWvVCoyOBU2ApBXqlhwJUehrUtRfuM0X+FhAMp1mqR3Fbb1Hkoh+gwriV9 TKJft/D/5asN6ssssnxeNE5EL3zRlE/JzDMnTCse0YlXarVSx9wbDPwgBCxezEW5 2AVVx/NJR2Fmt3D2mgGU7cxo1PAeMTzDyRUImfk0N8sB1FvbMN/FN/LXY4XnDX5I ar5wMmCBcDpWCVbCaMkBThyeUO6XM2lVwPrbn6/TMIIMKK9+gQrIEBR8z7dhFJ8U p+MLkNymKc+IreLQ/Ojc9ETEXpUP7ros4SQDy8K8xE4EtqQEaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyy9lXrRFFIbSIZbtGdtEA1SynRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzZhZTA1Y2EtMTY4NS0z YjA0LTg3N2ItNzY1YTY3YzhiMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVcFzRDeN+uysm75UdYxhT/j1O7x1SpFriIKj7da+LB4qpph/yUt1Ab WY0eCLhfBGvFkIp0oKT8+Sr2GP8WpK2DJ1prZspfBpxhv2m6fgvagiPQ9/TptJFu qHDP2ZwIcuQEFXCiVo1nOVTK7pZ6XKJnsCUqXKCWQo0epNwrogE9mcipDNbLQ34N bREi5O1O1ndB1RWIkdt7gUYr60m0lxcxfvpQY2cx7spVYCZlDOolFectPSUJLkcP 4Egd1182uZEDz8hav0am8yl5bKWp2w1d/ZQINjyw3awM2d0hET+PuVIKD9bocwVD Yw+9chhTEIxFyTTrDgLH63kHKX1FUpM= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:03 2024 by rpki-client on console-fra.rpki-client.org