$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3921e06b-a0d4-3c8e-89f2-ca07e311f41f.roa File: 3921e06b-a0d4-3c8e-89f2-ca07e311f41f.roa (raw, json) Hash identifier: mMzP9Tulcrpg63HkBXQIjuUB17OSMYLRR65FgHMA9VE= Subject key identifier: 10:D7:C1:08:93:D5:06:15:D9:E4:E0:45:B6:9F:DC:41:B8:2B:5E:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F69805528BE847CA3000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3921e06b-a0d4-3c8e-89f2-ca07e311f41f.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 50.96.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f6:98:05:52:8b:e8:47:ca:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=871f2e73-dca1-4a31-bc25-cde3da58e628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:e5:da:b8:79:5c:5f:90:68:ba:de:09:b0: 19:04:7a:11:bc:00:dd:94:03:72:15:53:e8:dc:aa: f8:f7:f2:17:48:a0:e6:ec:cf:09:17:14:e3:82:2d: aa:f9:f2:a2:8e:05:53:5e:65:15:a2:60:c4:5d:1b: db:09:24:ab:75:b8:52:99:fb:47:6c:c8:2c:41:cd: 2b:18:06:b7:99:41:a1:6e:42:c1:59:e8:92:99:1e: 2c:52:d2:18:c3:46:36:33:4d:c9:bb:c5:7d:b6:4f: 95:7a:f7:e2:2b:a9:6b:12:9c:5c:c6:ec:fa:04:52: 8c:2a:5c:df:17:33:4e:63:ae:85:b6:d8:a6:ab:63: 99:7d:c1:c1:27:86:43:24:dd:44:fa:69:31:ed:17: 65:8d:0b:2e:bf:9b:c7:24:9d:9a:84:22:cf:54:0f: 72:11:3b:d1:9c:83:e4:bc:09:71:99:f0:38:fa:3b: 5e:8c:75:2c:0f:f6:12:57:77:45:bf:f5:1b:7e:c0: 5c:22:32:10:ee:b9:b1:f2:25:17:a9:52:a0:b6:21: e5:36:b5:ad:9a:07:58:32:1b:b3:94:61:00:90:72: ba:73:1d:50:6c:6d:c5:12:dd:a7:69:36:a8:56:be: 39:10:a0:47:4e:3f:1b:8a:35:db:e6:67:21:0b:b1: 33:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D7:C1:08:93:D5:06:15:D9:E4:E0:45:B6:9F:DC:41:B8:2B:5E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3921e06b-a0d4-3c8e-89f2-ca07e311f41f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c6:5d:1f:a3:16:26:07:0b:fe:62:aa:67:95:58:56:85:46: c1:70:0d:c5:db:77:8e:cb:9c:bc:c8:c4:07:0b:8b:39:22:ea: 2e:51:08:55:fc:c8:15:b4:3e:f9:8c:d7:3e:93:db:e2:d2:d0: 66:8e:d3:ca:64:4d:c1:61:ff:0a:cf:cb:ba:03:02:6b:60:54: e1:40:0f:38:ce:1b:ab:e0:4d:ba:69:b8:0a:0e:38:df:94:6c: 91:aa:1f:0c:08:43:8d:70:b0:42:44:24:98:b3:b2:2b:dd:7c: ef:38:07:a8:f5:7c:c3:d2:82:43:57:61:96:1f:9e:0a:42:ee: 37:2f:52:99:fc:c3:74:ae:7a:39:af:95:75:82:44:dd:e4:f9: 66:13:35:83:f6:f3:58:a8:a9:af:7f:bb:37:b4:b9:95:f6:13: 2c:d8:2b:b3:ac:73:7b:45:de:e0:63:26:c4:f5:3f:51:8e:91: f1:af:d5:c5:16:5a:d3:b4:a2:73:0a:a1:fc:ce:49:ae:69:64: b1:36:8d:e9:15:13:20:98:3e:ea:29:c7:97:d3:7b:2f:d9:c8: ca:34:7e:96:28:81:1e:77:4c:2e:d5:c8:46:11:a2:90:51:dc: e0:ae:af:aa:c1:1c:3b:27:8c:f0:70:a8:7f:92:38:2c:4f:49: 7c:c4:9d:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPaYBVKL6EfKMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODcxZjJlNzMtZGNhMS00YTMxLWJjMjUtY2RlM2RhNThlNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwbl2rh5XF+QaLreCbAZBHoRvADdlANyFVPo 3Kr49/IXSKDm7M8JFxTjgi2q+fKijgVTXmUVomDEXRvbCSSrdbhSmftHbMgsQc0r GAa3mUGhbkLBWeiSmR4sUtIYw0Y2M03Ju8V9tk+VevfiK6lrEpxcxuz6BFKMKlzf FzNOY66Fttimq2OZfcHBJ4ZDJN1E+mkx7RdljQsuv5vHJJ2ahCLPVA9yETvRnIPk vAlxmfA4+jtejHUsD/YSV3dFv/UbfsBcIjIQ7rmx8iUXqVKgtiHlNrWtmgdYMhuz lGEAkHK6cx1QbG3FEt2naTaoVr45EKBHTj8bijXb5mchC7EzjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDXwQiT1QYV2eTgRbaf3EG4K16YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzkyMWUwNmItYTBkNC0z YzhlLTg5ZjItY2EwN2UzMTFmNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDGXR+jFiYHC/5iqmeVWFaFRsFwDcXbd47LnLzIxAcLizki6i5RCFX8 yBW0PvmM1z6T2+LS0GaO08pkTcFh/wrPy7oDAmtgVOFADzjOG6vgTbppuAoOON+U bJGqHwwIQ41wsEJEJJizsivdfO84B6j1fMPSgkNXYZYfngpC7jcvUpn8w3Suejmv lXWCRN3k+WYTNYP281ioqa9/uze0uZX2EyzYK7Osc3tF3uBjJsT1P1GOkfGv1cUW WtO0onMKofzOSa5pZLE2jekVEyCYPuopx5fTey/ZyMo0fpYogR53TC7VyEYRopBR 3OCur6rBHDsnjPBwqH+SOCxPSXzEnYo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:39 2024 by rpki-client on console-ams.rpki-client.org