$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/390db6c1-d4e0-370e-8d74-59676799011e.roa File: 390db6c1-d4e0-370e-8d74-59676799011e.roa (raw, json) Hash identifier: YHGoMl9KT6OZQkmjLeVHtcFgk+4lXJG1A+DAXLk6nXA= Subject key identifier: 98:FB:57:7B:D1:09:E5:5E:E9:3F:20:A0:1C:BF:70:84:F2:8C:62:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847ACD138C8CE932A979A4CC680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/390db6c1-d4e0-370e-8d74-59676799011e.roa Signing time: Sun 27 Oct 2024 01:00:31 +0000 ROA not before: Sun 27 Oct 2024 01:00:31 +0000 ROA not after: Sat 25 Jan 2025 02:00:31 +0000 asID: 27338 IP address blocks: 74.9.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ac:d1:38:c8:ce:93:2a:97:9a:4c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 27 01:00:31 2024 GMT Not After : Jan 25 02:00:31 2025 GMT Subject: CN=1a2f6cd4-39e7-4bbd-88a1-8351c81043e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:4d:d4:f2:cb:e0:ca:d7:57:e5:d2:44:f2: 60:2d:fe:26:07:09:d9:fc:ab:e1:30:6a:f8:d0:20: 2c:f7:df:4f:f3:96:ef:33:68:fc:2e:0c:32:a9:b3: 0a:45:4b:df:30:0e:4b:ed:92:6e:aa:37:71:3b:7b: b6:ec:15:ef:1e:2a:84:91:44:39:e0:d9:0d:4a:80: c0:77:e1:fb:4e:6e:6d:8f:2c:69:74:f4:67:b6:e2: 2d:a7:c4:90:fd:4d:8e:a1:be:a6:f1:ec:7c:a5:92: 62:6e:1a:d1:b7:60:8f:8a:81:40:c7:9a:1b:60:53: b4:6b:ce:f9:73:e8:de:b6:b2:77:b0:58:f9:1c:44: 65:25:b1:f4:60:48:68:40:71:02:bd:c8:9c:ab:6e: 5f:52:c6:43:b6:8a:5d:32:ba:a8:94:2b:05:80:e9: 36:2d:ea:9a:1e:4e:61:43:7b:18:b8:9c:12:3c:b0: 4b:b7:8a:d2:d2:88:02:da:89:97:ec:45:36:83:c0: ae:a4:aa:ea:e4:8c:e9:42:6a:fb:80:19:82:e7:b0: aa:2b:42:b4:a2:bc:77:a2:b8:12:d2:de:17:09:0b: 11:06:79:37:37:b6:84:1b:42:0a:ee:5c:d8:b4:76: 14:bb:e2:e4:d9:e5:99:9a:e9:83:b6:9e:4d:65:a1: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FB:57:7B:D1:09:E5:5E:E9:3F:20:A0:1C:BF:70:84:F2:8C:62:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/390db6c1-d4e0-370e-8d74-59676799011e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.9.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3d:bd:cd:fa:cf:9f:4f:e0:e0:cc:71:63:45:3f:d8:cb:de: ad:90:cb:37:85:a4:12:74:ec:75:74:9e:99:ea:d7:9c:7a:a5: 73:6a:e1:16:da:79:23:ff:3c:2a:db:70:d5:4f:50:3d:a6:b8: 5c:f8:5f:11:49:c9:50:82:d3:96:29:94:77:01:1d:5c:23:ad: c3:16:48:bf:c6:c5:fe:5d:35:ef:d1:02:4c:ba:0c:f0:16:2a: 77:09:55:85:25:a8:fd:50:4a:69:45:b9:64:5f:71:fd:5a:af: 68:97:fb:ad:57:db:87:93:72:0c:93:52:c9:20:38:9b:8c:c6: 44:9c:33:a0:8b:ef:c7:3f:f5:9a:51:ce:4e:c7:ff:16:01:d4: 7b:41:4a:74:9f:a7:7c:03:7f:29:bc:29:02:b4:87:88:d7:76: 80:54:87:11:16:5e:ed:c0:32:e1:cf:77:f5:94:ad:84:c9:90: b9:fd:9f:55:61:f9:ac:15:ae:4c:bf:60:ee:52:30:53:e4:e7: df:d6:20:f3:b3:a8:2f:8a:65:3e:bd:0f:22:42:27:41:48:33: 97:7d:e1:b2:e8:36:5f:62:11:f6:53:11:c4:96:d3:c8:df:82: 69:9b:a4:c8:89:45:d0:42:6c:3f:c9:07:46:26:6b:34:85:ed: 99:96:40:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEes0TjIzpMql5pMxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNzAxMDAzMVoXDTI1MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MWEyZjZjZDQtMzllNy00YmJkLTg4YTEtODM1MWM4MTA0M2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYpN1PLL4MrXV+XSRPJgLf4mBwnZ/KvhMGr4 0CAs999P85bvM2j8LgwyqbMKRUvfMA5L7ZJuqjdxO3u27BXvHiqEkUQ54NkNSoDA d+H7Tm5tjyxpdPRntuItp8SQ/U2Oob6m8ex8pZJibhrRt2CPioFAx5obYFO0a875 c+jetrJ3sFj5HERlJbH0YEhoQHECvcicq25fUsZDtopdMrqolCsFgOk2LeqaHk5h Q3sYuJwSPLBLt4rS0ogC2omX7EU2g8CupKrq5IzpQmr7gBmC57CqK0K0orx3orgS 0t4XCQsRBnk3N7aEG0IK7lzYtHYUu+Lk2eWZmumDtp5NZaGQNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJj7V3vRCeVe6T8goBy/cITyjGKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzkwZGI2YzEtZDRlMC0z NzBlLThkNzQtNTk2NzY3OTkwMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY9vc36z59P4ODMcWNFP9jL3q2QyzeFpBJ07HV0npnq15x6pXNq4Rba eSP/PCrbcNVPUD2muFz4XxFJyVCC05YplHcBHVwjrcMWSL/Gxf5dNe/RAky6DPAW KncJVYUlqP1QSmlFuWRfcf1ar2iX+61X24eTcgyTUskgOJuMxkScM6CL78c/9ZpR zk7H/xYB1HtBSnSfp3wDfym8KQK0h4jXdoBUhxEWXu3AMuHPd/WUrYTJkLn9n1Vh +awVrky/YO5SMFPk59/WIPOzqC+KZT69DyJCJ0FIM5d94bLoNl9iEfZTEcSW08jf gmmbpMiJRdBCbD/JB0YmazSF7ZmWQJU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:55 2024 by rpki-client on console-ams.rpki-client.org