$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a23603c-b263-3a1e-9c9c-4cf5c32ce196.roa File: 4a23603c-b263-3a1e-9c9c-4cf5c32ce196.roa (raw, json) Hash identifier: AQlzYOOLyeICpkDteUTVtdeFqohgz0eN8nY/wbn9zlY= Subject key identifier: 75:AC:CB:58:D4:9C:23:A9:81:52:09:4A:22:10:57:8B:C1:55:FE:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552F53FD5FF3D3DAED3B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a23603c-b263-3a1e-9c9c-4cf5c32ce196.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 71.30.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2f:53:fd:5f:f3:d3:da:ed:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0d6985ff-65f7-4e21-a9fd-2df777259080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:10:c9:66:c8:24:60:30:b8:ca:dc:2a:c7: 81:ff:68:11:d6:5d:10:15:fc:9d:c2:f9:20:02:75: 7b:90:a8:9c:81:7d:ba:93:a3:1c:c9:5d:2c:e4:37: c4:13:98:48:4f:95:f2:ec:84:9d:25:99:03:50:25: aa:28:56:39:0e:e0:10:96:89:81:8f:86:e3:51:f4: ef:fe:3d:c7:e5:96:14:65:e6:08:c7:5a:05:1b:1b: 35:e2:a1:d9:34:8f:3a:25:47:70:78:d3:ba:fa:ec: c8:46:60:ce:47:91:8d:86:c9:4e:7d:41:59:5d:82: 5b:2c:72:f0:17:ea:d6:2b:26:35:72:1f:e9:81:bf: 8a:c8:29:12:59:4f:ac:b6:26:e1:ab:dc:34:92:3c: 63:7d:ec:45:4e:b0:ba:49:e1:8a:a2:60:b4:1b:35: 3e:cc:d3:64:6b:40:ef:53:db:96:12:90:96:43:5b: 01:1d:1a:db:9b:67:9e:e8:06:c0:e5:65:e4:09:0e: 19:78:49:ee:de:a9:b7:e2:5c:a3:6e:18:d8:cf:a3: 0b:95:61:73:75:5e:49:45:ef:6d:20:06:d2:ed:4e: 82:a5:db:18:8a:e6:35:14:79:b9:0b:81:d3:f8:60: 2d:d7:dd:aa:e8:8e:19:f8:0b:19:22:b8:42:04:6d: bc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AC:CB:58:D4:9C:23:A9:81:52:09:4A:22:10:57:8B:C1:55:FE:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a23603c-b263-3a1e-9c9c-4cf5c32ce196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3b:bb:13:fb:5d:c6:b9:64:76:45:ca:02:1c:9c:54:e1:a1: ee:c5:81:24:54:3b:a6:1d:bd:5f:ba:23:df:18:72:b0:ea:6e: 31:45:7b:85:86:38:6a:46:a4:18:d0:9e:e7:40:e8:22:cf:f7: c8:f9:18:5a:a1:3a:b3:9f:5f:18:df:e3:f7:ec:6b:98:1b:30: 71:67:b7:99:d5:1a:93:8a:96:fa:73:e0:1b:f1:a0:0d:78:7c: 18:bf:a7:0f:81:14:13:51:20:6b:e8:49:26:23:05:f3:5f:de: ea:ae:85:09:60:76:2a:ca:16:42:50:22:4d:0d:1c:fa:42:30: ef:e2:8d:33:ba:12:64:ee:f5:fb:79:cf:54:75:d6:b6:f1:0c: cf:58:d8:55:56:fc:03:cc:b3:96:13:9d:4f:02:00:27:18:03: 71:be:b2:c6:84:b2:87:d4:4c:27:0f:ca:0e:12:18:ff:25:a3: 00:87:88:bb:cd:e6:9a:7f:4e:50:3f:79:f6:c7:45:a0:76:be: 66:34:20:87:09:f3:9a:4d:0b:be:10:00:27:01:b3:a5:8e:07: 0b:a5:eb:10:da:0b:74:bb:da:2b:be:4a:2f:1d:4d:48:ed:e9: 0f:1d:1f:4e:ef:71:1e:96:23:06:85:f4:42:d8:8f:31:2c:e2: 6c:8b:b4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVS9T/V/z09rtO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MGQ2OTg1ZmYtNjVmNy00ZTIxLWE5ZmQtMmRmNzc3MjU5MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9EQyWbIJGAwuMrcKseB/2gR1l0QFfydwvkg AnV7kKicgX26k6McyV0s5DfEE5hIT5Xy7ISdJZkDUCWqKFY5DuAQlomBj4bjUfTv /j3H5ZYUZeYIx1oFGxs14qHZNI86JUdweNO6+uzIRmDOR5GNhslOfUFZXYJbLHLw F+rWKyY1ch/pgb+KyCkSWU+stibhq9w0kjxjfexFTrC6SeGKomC0GzU+zNNka0Dv U9uWEpCWQ1sBHRrbm2ee6AbA5WXkCQ4ZeEnu3qm34lyjbhjYz6MLlWFzdV5JRe9t IAbS7U6CpdsYiuY1FHm5C4HT+GAt192q6I4Z+AsZIrhCBG28hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWsy1jUnCOpgVIJSiIQV4vBVf6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyMzYwM2MtYjI2My0z YTFlLTljOWMtNGNmNWMzMmNlMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERx4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ7uxP7Xca5ZHZFygIcnFThoe7FgSRUO6YdvV+6I98YcrDqbjFFe4WG OGpGpBjQnudA6CLP98j5GFqhOrOfXxjf4/fsa5gbMHFnt5nVGpOKlvpz4BvxoA14 fBi/pw+BFBNRIGvoSSYjBfNf3uquhQlgdirKFkJQIk0NHPpCMO/ijTO6EmTu9ft5 z1R11rbxDM9Y2FVW/APMs5YTnU8CACcYA3G+ssaEsofUTCcPyg4SGP8lowCHiLvN 5pp/TlA/efbHRaB2vmY0IIcJ85pNC74QACcBs6WOBwul6xDaC3S72iu+Si8dTUjt 6Q8dH07vcR6WIwaF9ELYjzEs4myLtF0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:41 2024 by rpki-client on console-ams.rpki-client.org