$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa File: 4193fa81-f8ac-363a-9704-2c5c108fed13.roa (raw, json) Hash identifier: BzA+wWSobYztERt3/cK0A5nIGbgacrXMTZuxXt+c890= Subject key identifier: 3D:82:03:00:FF:AC:AD:7B:28:59:7D:03:D6:23:3F:69:FC:85:40:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858478886550F7FE7D5D6FB0C5F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa Signing time: Mon 14 Oct 2024 01:00:31 +0000 ROA not before: Mon 14 Oct 2024 01:00:31 +0000 ROA not after: Sun 12 Jan 2025 02:00:31 +0000 asID: 7029 IP address blocks: 71.30.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:88:86:55:0f:7f:e7:d5:d6:fb:0c:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 14 01:00:31 2024 GMT Not After : Jan 12 02:00:31 2025 GMT Subject: CN=d01f830e-4732-4b81-a24b-6729271a2c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:ef:49:9c:af:62:c4:d9:68:4c:c1:da:0d: bf:1d:ce:cf:d0:c5:72:f6:65:09:27:23:16:8f:e4: 12:c4:5f:c6:54:9e:63:98:d6:09:88:16:d3:14:f4: f4:57:42:16:53:9e:af:ce:c4:8a:bd:c0:90:c2:a9: 2c:3a:94:bc:b2:33:1d:6e:b5:a3:c5:37:9e:31:14: f0:d8:45:e7:f0:87:e2:96:6e:cc:dd:62:1e:bb:10: 25:4c:e4:2f:46:31:13:09:02:8b:4e:c9:12:0c:e0: 4a:b9:5f:75:1e:26:1b:a4:fe:69:c4:e1:be:0e:54: d9:fa:e5:d0:a8:28:fc:8e:f6:0f:65:f6:98:cd:07: ef:76:ad:17:e0:c1:56:6b:f0:8f:df:a7:de:32:5b: 7d:62:26:07:4d:01:87:d9:f9:2b:6c:d9:cf:8a:64: 1e:8c:55:04:42:b7:fa:cc:a2:85:41:47:ec:0d:64: ef:af:df:67:71:82:7f:d9:3a:be:de:51:0d:00:4b: 88:8c:0b:c2:5e:10:cf:94:c2:b9:1f:31:72:e6:f5: 26:c8:3f:87:91:9a:b9:04:e7:f0:c2:cf:3c:3a:44: 95:ea:3c:b8:90:11:9e:79:d6:5f:e9:cc:5a:e0:65: 7e:a8:cc:f8:d9:c6:da:33:52:63:9d:0c:4f:ea:d3: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:82:03:00:FF:AC:AD:7B:28:59:7D:03:D6:23:3F:69:FC:85:40:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ee:e0:cd:c1:a7:cc:ef:ea:56:3b:3d:08:6d:1f:3d:9c:cb: 5f:e0:ae:c2:ab:53:3c:51:24:bc:2f:24:51:1d:36:f4:a9:c6: 9e:d6:17:ee:07:69:db:e6:f1:7c:0c:2d:b1:d7:e4:4b:a0:ea: e6:b9:a0:6c:ba:62:c7:66:5b:44:bc:11:07:b3:be:dc:41:58: cf:fb:48:e1:4b:89:2b:1b:67:e1:8c:00:7e:51:0d:42:8f:18: bb:5a:5c:ea:15:e9:33:d6:d9:5f:7c:3e:cd:a6:31:3f:45:2c: 61:f6:d6:7a:bd:ff:d6:a7:75:bd:64:66:7d:13:5e:e5:d7:1c: ce:43:f7:a5:41:18:bd:b0:68:6e:e1:90:ed:b6:51:22:8e:b9: a3:b9:ae:94:54:e4:96:01:73:40:d8:4d:ed:70:5c:9f:6c:b7: a6:18:b4:c0:6b:02:fa:a4:20:31:99:3e:d2:7e:44:40:e1:0e: 1a:db:ef:f5:89:96:74:fd:eb:5c:b0:86:ba:39:dd:75:d0:45: ea:71:2e:72:bc:20:d2:d9:d0:43:f1:44:fb:92:a1:37:de:f5: 8b:68:3b:c2:5f:ad:24:31:6b:36:f1:a7:01:34:11:81:b0:54: 2c:43:06:07:d7:64:29:9a:5b:8f:60:d4:c5:28:ef:82:f7:33: cd:49:6c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeIhlUPf+fV1vsMX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAxNDAxMDAzMVoXDTI1MDExMjAyMDAzMVowLzEtMCsGA1UEAxMk ZDAxZjgzMGUtNDczMi00YjgxLWEyNGItNjcyOTI3MWEyYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1/vSZyvYsTZaEzB2g2/Hc7P0MVy9mUJJyMW j+QSxF/GVJ5jmNYJiBbTFPT0V0IWU56vzsSKvcCQwqksOpS8sjMdbrWjxTeeMRTw 2EXn8Ifilm7M3WIeuxAlTOQvRjETCQKLTskSDOBKuV91HiYbpP5pxOG+DlTZ+uXQ qCj8jvYPZfaYzQfvdq0X4MFWa/CP36feMlt9YiYHTQGH2fkrbNnPimQejFUEQrf6 zKKFQUfsDWTvr99ncYJ/2Tq+3lENAEuIjAvCXhDPlMK5HzFy5vUmyD+HkZq5BOfw ws88OkSV6jy4kBGeedZf6cxa4GV+qMz42cbaM1JjnQxP6tM8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2CAwD/rK17KFl9A9YjP2n8hUD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDE5M2ZhODEtZjhhYy0z NjNhLTk3MDQtMmM1YzEwOGZlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbu4M3Bp8zv6lY7PQhtHz2cy1/grsKrUzxRJLwvJFEdNvSpxp7WF+4H advm8XwMLbHX5Eug6ua5oGy6YsdmW0S8EQezvtxBWM/7SOFLiSsbZ+GMAH5RDUKP GLtaXOoV6TPW2V98Ps2mMT9FLGH21nq9/9andb1kZn0TXuXXHM5D96VBGL2waG7h kO22USKOuaO5rpRU5JYBc0DYTe1wXJ9st6YYtMBrAvqkIDGZPtJ+REDhDhrb7/WJ lnT961ywhro53XXQRepxLnK8INLZ0EPxRPuSoTfe9YtoO8JfrSQxazbxpwE0EYGw VCxDBgfXZCmaW49g1MUo74L3M81JbLI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:58 2024 by rpki-client on console-fra.rpki-client.org