$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c09c026-57e7-38b4-a05a-0f8e34fe2a00.roa File: 3c09c026-57e7-38b4-a05a-0f8e34fe2a00.roa (raw, json) Hash identifier: Rkkcv0zSoQ5Pa7o+qTjERZFhv2U7Ihx2AePYw941EwA= Subject key identifier: EE:23:23:4F:BB:64:73:05:E4:7F:31:8A:BF:61:BA:AD:FA:10:95:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553B9EE727367AAC475D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c09c026-57e7-38b4-a05a-0f8e34fe2a00.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 209.131.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3b:9e:e7:27:36:7a:ac:47:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=842509e4-3c81-42ce-9e3d-a869bcc18b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:98:c9:aa:7c:35:71:ae:b5:f8:83:06:1b: 02:2f:95:1a:75:dd:34:19:a1:94:b3:79:bf:34:2c: bc:7f:d1:59:42:33:e7:7e:e6:ca:6d:87:da:d7:60: d1:17:64:cb:58:74:69:94:de:2d:45:09:73:11:70: d6:a4:d3:37:57:4c:a6:14:72:85:f2:74:5e:0a:c4: 9b:af:af:cd:aa:46:36:df:a2:d3:60:19:eb:fe:d2: f7:ad:4d:7b:c0:eb:c2:4d:f4:89:0a:45:08:6a:6b: a0:d9:51:2e:c4:c3:96:8a:e1:ef:83:f2:8f:d2:25: 1f:c3:e5:ce:51:c3:40:a2:a2:20:e7:44:8d:81:36: f7:d1:0e:d9:70:b5:56:2c:d5:b8:a1:4f:b3:75:36: 2b:e7:c1:17:35:69:66:57:53:52:94:2e:18:a0:62: 5d:79:e7:34:79:cd:5a:dd:84:6d:aa:d8:38:de:39: bf:d0:94:f9:e2:82:54:56:a3:f7:bb:d7:c7:8c:5a: e9:2d:8e:96:ec:32:87:54:ec:88:a2:79:b7:de:80: ef:f1:83:f0:82:d0:9e:02:bd:37:2f:1c:77:99:8a: 8e:8b:e0:04:e4:a4:a4:46:d7:cc:45:31:cf:1d:20: 98:e1:63:34:dd:4b:28:a2:e5:39:29:57:d7:8e:52: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:23:23:4F:BB:64:73:05:E4:7F:31:8A:BF:61:BA:AD:FA:10:95:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c09c026-57e7-38b4-a05a-0f8e34fe2a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.131.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fc:2a:2c:53:44:da:81:5d:30:37:ea:3e:d2:c4:d3:0e:d5: 52:2f:15:08:2c:84:30:73:c4:78:18:08:57:97:0a:5e:a9:37: d2:13:f5:98:c6:e7:60:d3:ef:64:2b:0d:39:4f:9a:99:55:57: df:99:b2:2d:05:25:ab:35:88:32:f2:9e:be:c1:a5:5c:a2:b4: e9:9d:77:39:38:d3:26:03:1a:51:e3:ad:29:4f:08:75:b1:88: 21:56:04:31:bb:5b:f5:60:3e:d6:dd:04:10:92:cf:83:63:d0: ba:fc:19:cb:85:f1:06:c8:c2:ef:49:82:51:04:df:2c:e3:ff: 6e:26:a2:90:cd:c4:d1:8e:19:ca:eb:9f:c1:30:2c:b7:77:86: bf:cc:32:1b:e1:b4:1f:fc:6d:91:90:ed:ae:8a:87:40:44:2c: b3:42:e5:eb:23:69:d4:24:00:7c:49:a9:e5:a9:74:ab:18:3b: f7:a0:aa:a2:ac:4d:8e:2f:fa:fb:d8:d2:32:56:aa:d4:1e:3a: 4e:03:2e:e4:88:99:cb:64:95:07:a3:13:12:5d:e2:57:46:c6: ca:da:62:6d:65:a2:85:fd:2b:0b:ef:e3:d8:96:b7:72:e8:e9: 12:18:45:44:74:2e:a1:4d:32:62:48:eb:de:58:aa:c0:74:a5: fd:2b:7a:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTue5yc2eqxHXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODQyNTA5ZTQtM2M4MS00MmNlLTllM2QtYTg2OWJjYzE4YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l+Yyap8NXGutfiDBhsCL5Uadd00GaGUs3m/ NCy8f9FZQjPnfubKbYfa12DRF2TLWHRplN4tRQlzEXDWpNM3V0ymFHKF8nReCsSb r6/NqkY236LTYBnr/tL3rU17wOvCTfSJCkUIamug2VEuxMOWiuHvg/KP0iUfw+XO UcNAoqIg50SNgTb30Q7ZcLVWLNW4oU+zdTYr58EXNWlmV1NSlC4YoGJdeec0ec1a 3YRtqtg43jm/0JT54oJUVqP3u9fHjFrpLY6W7DKHVOyIonm33oDv8YPwgtCeAr03 Lxx3mYqOi+AE5KSkRtfMRTHPHSCY4WM03UsoouU5KVfXjlLzZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4jI0+7ZHMF5H8xir9huq36EJW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2MwOWMwMjYtNTdlNy0z OGI0LWEwNWEtMGY4ZTM0ZmUyYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0YNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD8KixTRNqBXTA36j7SxNMO1VIvFQgshDBzxHgYCFeXCl6pN9IT9ZjG 52DT72QrDTlPmplVV9+Zsi0FJas1iDLynr7BpVyitOmddzk40yYDGlHjrSlPCHWx iCFWBDG7W/VgPtbdBBCSz4Nj0Lr8GcuF8QbIwu9JglEE3yzj/24mopDNxNGOGcrr n8EwLLd3hr/MMhvhtB/8bZGQ7a6Kh0BELLNC5esjadQkAHxJqeWpdKsYO/egqqKs TY4v+vvY0jJWqtQeOk4DLuSImctklQejExJd4ldGxsraYm1looX9Kwvv49iWt3Lo 6RIYRUR0LqFNMmJI695YqsB0pf0rekM= -----END CERTIFICATE-----Generated at Mon Nov 25 03:26:38 2024 by rpki-client on console-fra.rpki-client.org