$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa File: 4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa (raw, json) Hash identifier: 3PIZivWPPMn01ZhwyZ2b7QNxmDEq9k6euXRbpacvGmw= Subject key identifier: 66:FF:36:E3:1C:DC:1E:44:41:66:95:F6:36:F7:8B:0F:28:6C:48:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40D3099415A8056017F824 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 71.30.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d3:09:94:15:a8:05:60:17:f8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=70bf4b19-871a-4362-b8e7-0ab223935d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:de:0e:30:fc:d0:5c:3b:08:4b:ee:51:55: 86:c2:db:a3:4d:8f:95:1c:fc:55:be:f9:76:c8:1c: 75:d3:8c:b3:1e:6c:bb:4a:21:c3:19:53:f0:d2:00: 5e:12:1f:94:0d:77:5a:d9:6c:8b:6e:41:8e:81:df: 60:0b:e8:09:18:2e:91:eb:3a:e1:2a:bd:a7:08:dc: de:f8:f3:65:a1:d7:95:98:a7:27:f3:d5:3a:a4:72: 8a:44:58:a5:7c:7f:55:1f:b5:60:88:04:61:ae:8d: ac:66:45:47:ff:de:b5:58:23:0e:35:ba:1a:2b:89: e9:35:42:e6:c2:f1:25:a7:d3:d3:d3:7d:78:53:32: 75:9d:0b:7f:07:1e:71:b5:c7:fe:1a:7f:4b:24:0b: 60:55:0a:c8:4a:36:82:35:c7:e4:9d:f7:13:ff:94: 4a:16:d6:6f:8a:c0:c8:bb:54:e8:29:f1:d3:72:a9: 82:a7:49:90:12:bf:91:c7:5b:5f:aa:f3:12:37:93: d6:eb:07:e6:41:e8:d5:d3:41:c5:9b:5a:3e:8b:99: 10:46:a3:db:84:5c:70:1e:3a:21:af:10:bc:d6:4d: 96:fa:2f:85:e7:56:7d:6e:2a:7e:f4:dd:db:77:79: 16:46:cd:70:fd:e2:e8:a1:67:9d:24:52:bd:a0:5c: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FF:36:E3:1C:DC:1E:44:41:66:95:F6:36:F7:8B:0F:28:6C:48:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:93:48:29:9a:68:dd:c7:f0:04:50:55:09:8d:3b:f7:6a:97: 3b:da:9c:fe:f5:fd:d9:dd:ad:4b:1e:51:78:c3:66:9d:21:21: 27:30:47:e0:5c:cc:e8:55:b5:6c:1a:38:a6:10:9b:4c:8a:4d: dd:72:69:a9:0c:f1:fa:e7:10:3f:89:38:fb:21:bf:48:7c:50: 85:37:44:f1:44:8e:48:79:39:0a:89:b0:4d:f9:86:0b:4e:0f: c5:32:41:9e:4f:37:49:ef:83:5f:f3:69:c5:96:e1:a6:3b:d8: bb:0c:01:7f:a3:9d:c9:e2:8c:c1:cf:c5:38:2e:ae:65:f0:5b: 63:d5:30:15:3b:f8:93:3c:41:19:43:f8:2a:aa:c3:55:75:44: 14:ca:0d:9a:e9:c2:e1:be:b3:ae:31:9b:48:91:87:ce:c1:44: 72:54:51:d5:6d:8c:85:76:ea:5d:ae:0f:d7:b0:a0:6d:87:cb: cc:1b:d3:04:f4:73:c7:8d:cc:c9:2f:67:76:64:37:a7:05:01: f4:7a:e0:24:d3:97:69:d3:1b:f4:52:74:fd:65:bd:15:6e:7b: cf:e0:75:bb:be:3a:f2:68:66:f3:f7:c4:e9:9f:3d:c4:38:43: 0a:f4:f0:64:9d:a4:75:e0:e4:66:a8:2f:11:ee:59:26:e6:21: 8b:59:12:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNMJlBWoBWAX+CQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NzBiZjRiMTktODcxYS00MzYyLWI4ZTctMGFiMjIzOTM1ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQreDjD80Fw7CEvuUVWGwtujTY+VHPxVvvl2 yBx104yzHmy7SiHDGVPw0gBeEh+UDXda2WyLbkGOgd9gC+gJGC6R6zrhKr2nCNze +PNlodeVmKcn89U6pHKKRFilfH9VH7VgiARhro2sZkVH/961WCMONboaK4npNULm wvElp9PT0314UzJ1nQt/Bx5xtcf+Gn9LJAtgVQrISjaCNcfknfcT/5RKFtZvisDI u1ToKfHTcqmCp0mQEr+Rx1tfqvMSN5PW6wfmQejV00HFm1o+i5kQRqPbhFxwHjoh rxC81k2W+i+F51Z9bip+9N3bd3kWRs1w/eLooWedJFK9oFwDvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb/NuMc3B5EQWaV9jb3iw8obEgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGFlZGY1YmItMDNlNS0z YWU0LTgwZmItNmE4OWUxM2Q2ODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmTSCmaaN3H8ARQVQmNO/dqlzvanP71/dndrUseUXjDZp0hIScwR+Bc zOhVtWwaOKYQm0yKTd1yaakM8frnED+JOPshv0h8UIU3RPFEjkh5OQqJsE35hgtO D8UyQZ5PN0nvg1/zacWW4aY72LsMAX+jncnijMHPxTgurmXwW2PVMBU7+JM8QRlD +Cqqw1V1RBTKDZrpwuG+s64xm0iRh87BRHJUUdVtjIV26l2uD9ewoG2Hy8wb0wT0 c8eNzMkvZ3ZkN6cFAfR64CTTl2nTG/RSdP1lvRVue8/gdbu+OvJoZvP3xOmfPcQ4 Qwr08GSdpHXg5GaoLxHuWSbmIYtZEjk= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:07 2024 by rpki-client on console-fra.rpki-client.org