$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa File: 3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa (raw, json) Hash identifier: 8p9g87ZtblpUx3gBRzH6k7LjauLUMz/67mK+zgFJ8kw= Subject key identifier: 31:DF:06:6E:E0:BA:58:2E:9A:AA:4D:EB:40:07:54:CF:BB:0F:70:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117BED22F1E704BE398A1C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa Signing time: Thu 12 Sep 2024 17:22:24 +0000 ROA not before: Thu 12 Sep 2024 17:22:24 +0000 ROA not after: Wed 11 Dec 2024 18:22:24 +0000 asID: 7029 IP address blocks: 67.141.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:be:d2:2f:1e:70:4b:e3:98:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:24 2024 GMT Not After : Dec 11 18:22:24 2024 GMT Subject: CN=7275b4e7-eb6d-4d88-808d-7b576efc7a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:9b:74:7b:d6:85:07:dd:9b:3a:76:68:55: ae:72:59:2d:33:b9:df:7a:86:1e:37:af:26:a7:19: 61:0e:65:54:c3:a0:82:1c:8d:7c:86:d6:f2:52:7d: f9:b9:c6:ac:54:d5:85:d2:c2:51:54:1b:91:ab:01: 95:00:88:85:15:60:71:0f:be:69:4c:70:03:08:16: f3:85:0b:d0:fc:42:79:7d:34:d0:c7:e9:11:d7:34: d0:f9:63:21:76:e2:45:f6:d8:ee:2d:5a:00:6c:98: d3:62:93:3f:ab:66:bb:f2:b4:d1:e9:80:e5:54:47: e6:a7:d4:41:cc:8a:98:66:3a:0c:dc:92:0c:55:d1: dd:97:cc:7b:f6:9b:3d:4b:b9:97:f2:37:96:c0:9c: c9:fe:72:02:31:19:26:3e:ee:41:fe:09:93:be:a7: 9b:1b:bd:5a:bd:21:62:85:a6:55:a4:c6:54:bf:b7: ff:18:84:49:b2:ce:14:e5:c6:6d:41:95:c6:06:26: 8c:93:50:74:ec:0d:61:70:49:75:c9:70:a1:ee:5e: ad:69:17:e7:72:57:17:1a:33:d2:6d:56:86:89:45: 21:0f:7a:31:63:60:de:6d:88:47:83:fc:8e:a4:18: e4:a0:b2:cb:63:1b:2e:c4:fb:cd:de:08:f5:ec:b6: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DF:06:6E:E0:BA:58:2E:9A:AA:4D:EB:40:07:54:CF:BB:0F:70:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a5:d4:81:08:a1:5f:f9:dc:fa:42:9d:a4:0f:a8:45:11:20: 8d:f9:0f:39:c8:7d:36:61:7f:a7:db:df:c9:f0:e2:b2:9d:5c: c6:22:3e:9e:30:3e:55:ae:63:bd:bc:20:b7:09:02:d9:55:d2: e6:ea:f3:b3:27:31:2b:cc:39:19:f5:8c:47:e7:30:60:8a:fd: 97:cf:b7:f8:2b:7a:cf:a3:f0:d4:80:a2:33:c3:e3:03:20:3a: e1:b8:5d:e1:a2:01:d2:9d:d0:51:99:95:0f:da:54:b8:77:ec: b8:eb:7f:47:8c:80:3e:9d:4d:fe:73:e7:0a:50:70:ca:f8:e3: e2:31:a1:6c:a2:1d:51:be:f1:81:21:16:03:4e:d7:7e:da:fd: cb:5f:de:f3:9a:a2:e5:33:77:63:b9:4c:1e:66:1d:de:6a:7b: 0b:b7:73:1e:d9:ad:11:15:65:b7:bc:d6:c7:0d:cb:8a:ef:91: 23:21:fa:f0:b1:dc:03:36:33:a4:72:73:60:84:8a:28:a5:f6: 65:00:9d:d3:73:76:81:8a:44:f8:ac:1d:92:60:b3:7c:4d:8a: f7:a3:9b:e7:90:93:33:3b:77:aa:6a:3c:30:e7:35:fb:d2:11: f3:f8:f9:6c:22:b3:fc:fc:83:2a:ec:d0:03:71:63:85:04:43: c6:5e:c4:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF77SLx5wS+OYocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIyNFoXDTI0MTIxMTE4MjIyNFowLzEtMCsGA1UEAxMk NzI3NWI0ZTctZWI2ZC00ZDg4LTgwOGQtN2I1NzZlZmM3YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk+bdHvWhQfdmzp2aFWuclktM7nfeoYeN68m pxlhDmVUw6CCHI18htbyUn35ucasVNWF0sJRVBuRqwGVAIiFFWBxD75pTHADCBbz hQvQ/EJ5fTTQx+kR1zTQ+WMhduJF9tjuLVoAbJjTYpM/q2a78rTR6YDlVEfmp9RB zIqYZjoM3JIMVdHdl8x79ps9S7mX8jeWwJzJ/nICMRkmPu5B/gmTvqebG71avSFi haZVpMZUv7f/GIRJss4U5cZtQZXGBiaMk1B07A1hcEl1yXCh7l6taRfnclcXGjPS bVaGiUUhD3oxY2DebYhHg/yOpBjkoLLLYxsuxPvN3gj17LbVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHfBm7gulgumqpN60AHVM+7D3BwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwNmJiMjEtMjYyNy0z YTJhLWE1Y2QtZThiOWQxMjI1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ43fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEal1IEIoV/53PpCnaQPqEURII35DznIfTZhf6fb38nw4rKdXMYiPp4w PlWuY728ILcJAtlV0ubq87MnMSvMORn1jEfnMGCK/ZfPt/gres+j8NSAojPD4wMg OuG4XeGiAdKd0FGZlQ/aVLh37Ljrf0eMgD6dTf5z5wpQcMr44+IxoWyiHVG+8YEh FgNO137a/ctf3vOaouUzd2O5TB5mHd5qewu3cx7ZrREVZbe81scNy4rvkSMh+vCx 3AM2M6Ryc2CEiiil9mUAndNzdoGKRPisHZJgs3xNivejm+eQkzM7d6pqPDDnNfvS EfP4+Wwis/z8gyrs0ANxY4UEQ8ZexLw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:38 2024 by rpki-client on console-ams.rpki-client.org