$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/382860d7-2c64-3336-978b-b28f0909fe1e.roa File: 382860d7-2c64-3336-978b-b28f0909fe1e.roa (raw, json) Hash identifier: TW1c1esrnBl5NrOIDtovZiiHJylhIzIR+ClhTC/jpcQ= Subject key identifier: F6:F4:00:A0:DD:B9:9D:C2:F2:39:5D:EF:A5:51:7D:95:18:E3:8D:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154FEE621FEC3C39F942260 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/382860d7-2c64-3336-978b-b28f0909fe1e.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 75.117.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:fe:e6:21:fe:c3:c3:9f:94:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=f75537ff-1379-40db-b7b3-6cf14fe4c0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:97:22:41:92:a8:90:48:54:51:bc:0b:3b: 9e:f2:57:f5:25:94:f6:cd:2f:70:c5:18:a7:da:ac: 8c:39:fb:a2:4e:6f:c1:bb:bf:b0:e0:e0:bb:2e:54: e8:9f:a6:09:12:3a:2d:a5:62:d4:6e:b5:09:f3:80: 5d:43:7d:6c:c8:d5:93:cb:90:9d:96:da:97:13:f2: 4d:c2:3b:bb:43:1b:c9:12:33:c7:8c:6d:fd:1a:3a: 0f:0b:7e:a3:87:39:94:f5:e5:43:36:6b:51:75:4b: 87:6a:1f:83:00:5b:30:bf:f8:59:ae:e9:66:f8:45: d8:57:8a:68:4c:96:26:45:f4:c7:4c:7a:9c:b5:69: 74:1f:27:f0:aa:93:4c:ce:53:3a:62:30:ce:43:53: 82:ac:2c:a6:77:3a:78:83:30:fc:08:be:ba:0c:c1: ef:00:c8:b4:7b:aa:b2:49:83:a1:f7:06:98:ef:1e: 89:92:b6:6b:95:d8:2c:24:50:36:5b:b6:ed:90:f8: 00:bd:d6:55:02:e6:f3:a3:e3:0a:ce:a0:60:31:a7: 75:cb:d2:7d:3a:84:6d:9d:31:ce:ab:8f:9e:ad:59: 26:6d:90:d2:18:bd:b0:51:a1:7e:d9:75:eb:37:09: 1d:80:9b:04:68:3a:d1:d4:b3:9d:13:53:51:2b:d1: df:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F4:00:A0:DD:B9:9D:C2:F2:39:5D:EF:A5:51:7D:95:18:E3:8D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/382860d7-2c64-3336-978b-b28f0909fe1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b2:67:8f:69:13:3a:71:26:a5:5c:81:c8:2e:36:4c:d1:3b: e5:ae:05:70:e2:19:65:51:a5:04:13:78:a3:9b:b6:e4:41:c4: 31:d3:5c:35:16:36:91:31:a3:15:e6:70:cc:c1:c1:fb:ff:07: b4:71:4a:67:44:c2:2b:bd:a6:5c:58:a1:f5:62:da:fe:7b:d9: 73:32:be:d4:59:c4:c1:44:45:5e:f4:85:38:9b:bd:44:0c:90: 3e:31:75:e1:f3:cb:99:1b:4f:fc:f1:c1:82:f4:ce:fc:fa:89: 67:3e:8b:4d:57:86:2c:fe:27:05:90:a4:a3:9d:8d:55:2f:e6: 97:0e:c9:9f:22:eb:ac:4c:69:5b:12:ff:f0:42:7d:7f:f1:e6: ec:d4:8b:04:34:1f:a5:ed:a3:69:7c:7b:7c:52:8c:82:95:ac: 9c:45:09:0e:66:63:eb:9e:1d:c9:e2:31:01:49:c6:72:3e:bf: 08:71:31:74:2e:87:39:92:10:fd:46:7e:e5:cc:ca:f4:6e:1b: b9:38:10:02:01:d6:96:4e:19:20:6c:6c:bc:70:e8:fb:77:ec: cb:ef:47:27:50:03:16:f4:76:43:42:1a:50:0b:74:64:c1:02: d3:26:40:95:0f:25:9a:65:79:43:e1:4e:af:3f:0d:9b:fa:b9: da:a8:c5:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVP7mIf7Dw5+UImAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk Zjc1NTM3ZmYtMTM3OS00MGRiLWI3YjMtNmNmMTRmZTRjMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmymXIkGSqJBIVFG8Czue8lf1JZT2zS9wxRin 2qyMOfuiTm/Bu7+w4OC7LlTon6YJEjotpWLUbrUJ84BdQ31syNWTy5CdltqXE/JN wju7QxvJEjPHjG39GjoPC36jhzmU9eVDNmtRdUuHah+DAFswv/hZrulm+EXYV4po TJYmRfTHTHqctWl0HyfwqpNMzlM6YjDOQ1OCrCymdzp4gzD8CL66DMHvAMi0e6qy SYOh9waY7x6JkrZrldgsJFA2W7btkPgAvdZVAubzo+MKzqBgMad1y9J9OoRtnTHO q4+erVkmbZDSGL2wUaF+2XXrNwkdgJsEaDrR1LOdE1NRK9HfRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb0AKDduZ3C8jld76VRfZUY441lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzgyODYwZDctMmM2NC0z MzM2LTk3OGItYjI4ZjA5MDlmZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiyZ49pEzpxJqVcgcguNkzRO+WuBXDiGWVRpQQTeKObtuRBxDHTXDUW NpExoxXmcMzBwfv/B7RxSmdEwiu9plxYofVi2v572XMyvtRZxMFERV70hTibvUQM kD4xdeHzy5kbT/zxwYL0zvz6iWc+i01Xhiz+JwWQpKOdjVUv5pcOyZ8i66xMaVsS //BCfX/x5uzUiwQ0H6Xto2l8e3xSjIKVrJxFCQ5mY+ueHcniMQFJxnI+vwhxMXQu hzmSEP1GfuXMyvRuG7k4EAIB1pZOGSBsbLxw6Pt37MvvRydQAxb0dkNCGlALdGTB AtMmQJUPJZpleUPhTq8/DZv6udqoxaU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:57 2024 by rpki-client on console-fra.rpki-client.org