$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4af855e9-148b-31c3-b046-0d869777ec3e.roa File: 4af855e9-148b-31c3-b046-0d869777ec3e.roa (raw, json) Hash identifier: PcUEyeA9CHaDs9/gXRHIjCSKIocTq5iT/Yl3yt5gU/Q= Subject key identifier: 9F:18:2A:19:B8:1D:7B:B4:FD:A8:1F:E2:89:8A:43:1C:83:86:29:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154FB469B8B9D7027AD7BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4af855e9-148b-31c3-b046-0d869777ec3e.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 70.46.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:fb:46:9b:8b:9d:70:27:ad:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=516198a1-3bc8-46a1-8e4b-85930312b428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:49:8a:10:24:f5:a3:83:86:bc:da:21:0f: 8a:cd:68:14:21:df:5f:3c:fe:5e:08:5b:50:4b:6c: fb:7f:e2:98:d4:d7:5c:37:38:32:36:58:f1:ee:85: 8b:bf:83:c0:d2:36:10:68:51:fb:19:e7:e2:b1:4e: 29:43:52:25:36:6c:cc:d5:95:4a:79:1f:20:25:35: b8:74:51:57:cd:69:81:b5:cb:d4:a8:a2:89:33:30: 8f:79:2c:8e:2a:93:83:d8:5a:92:d8:d3:9b:80:a8: c5:d7:ae:83:48:89:c9:4b:8c:03:22:33:1d:7f:ac: 4b:df:5a:14:6f:a3:dd:f8:d6:05:5b:20:0f:5e:ec: af:56:1b:8c:64:e7:2a:50:77:44:60:8d:fc:43:70: 76:fa:de:1f:c0:d7:04:04:c0:b8:a5:71:ce:ea:1f: 79:4b:e0:36:7d:b2:44:e1:96:d8:d0:a3:11:16:8b: 0a:77:b0:71:39:2c:fc:d2:1d:8a:67:1e:3b:a7:2f: 4a:3e:f7:c6:b4:94:18:cf:45:53:7b:af:3e:12:4c: cd:ce:68:66:f4:7c:0d:6c:ec:6f:54:a6:4a:b6:a6: 62:11:6a:bb:d8:4b:3e:65:8b:ff:ad:a4:de:b2:8a: 5b:0f:ad:7e:f8:e6:64:68:06:a2:d9:fc:82:92:86: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:18:2A:19:B8:1D:7B:B4:FD:A8:1F:E2:89:8A:43:1C:83:86:29:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4af855e9-148b-31c3-b046-0d869777ec3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 70.46.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2e:45:be:eb:34:18:f1:86:94:54:17:96:e1:95:1e:ca:96: df:f8:d3:96:f8:8b:b6:ef:74:71:72:e4:1a:31:94:19:38:52: d8:5a:4e:c5:60:5b:bc:d2:cf:a6:e3:2d:ea:b1:26:9f:29:47: a8:d6:f6:73:a6:b7:78:82:c8:2f:e6:95:c8:c3:10:16:2d:2c: b4:4f:80:6d:0e:97:9c:d6:a1:4a:87:7b:5e:86:5b:2b:52:e5: 27:ae:6e:be:d4:71:74:54:83:15:eb:7e:16:2a:09:72:6f:93: d5:ec:06:75:50:ad:64:fb:19:5b:26:5c:4c:57:c3:b0:10:57: a2:6d:4f:11:f2:95:52:2d:39:15:9e:ac:a2:82:93:98:88:95: 24:de:25:51:6e:38:e1:6b:b1:07:13:92:74:19:b6:ca:5c:c6: bb:18:6a:64:e9:b0:52:48:d5:3f:a7:49:90:cd:b5:96:71:1f: d6:c9:da:3f:07:67:bc:ce:f5:c9:4f:52:55:77:91:3e:19:9e: da:a5:a9:8a:06:a2:6b:47:df:18:f0:a5:4a:fc:2e:73:15:69: 41:69:61:a0:9c:28:85:cf:75:57:4d:3e:e6:6d:4d:ce:b4:6a: 73:d4:dc:cd:14:c7:a8:f7:bf:bb:b3:6f:62:1c:ba:58:69:e6: b7:c5:52:70 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVPtGm4udcCete8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NTE2MTk4YTEtM2JjOC00NmExLThlNGItODU5MzAzMTJiNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijBJihAk9aODhrzaIQ+KzWgUId9fPP5eCFtQ S2z7f+KY1NdcNzgyNljx7oWLv4PA0jYQaFH7GefisU4pQ1IlNmzM1ZVKeR8gJTW4 dFFXzWmBtcvUqKKJMzCPeSyOKpOD2FqS2NObgKjF166DSInJS4wDIjMdf6xL31oU b6Pd+NYFWyAPXuyvVhuMZOcqUHdEYI38Q3B2+t4fwNcEBMC4pXHO6h95S+A2fbJE 4ZbY0KMRFosKd7BxOSz80h2KZx47py9KPvfGtJQYz0VTe68+EkzNzmhm9HwNbOxv VKZKtqZiEWq72Es+ZYv/raTesopbD61++OZkaAai2fyCkoZ6JwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ8YKhm4HXu0/agf4omKQxyDhilzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGFmODU1ZTktMTQ4Yi0z MWMzLWIwNDYtMGQ4Njk3NzdlYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARi4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIy5Fvus0GPGGlFQXluGVHsqW3/jTlviLtu90cXLkGjGUGThS2FpOxWBb vNLPpuMt6rEmnylHqNb2c6a3eILIL+aVyMMQFi0stE+AbQ6XnNahSod7XoZbK1Ll J65uvtRxdFSDFet+FioJcm+T1ewGdVCtZPsZWyZcTFfDsBBXom1PEfKVUi05FZ6s ooKTmIiVJN4lUW444WuxBxOSdBm2ylzGuxhqZOmwUkjVP6dJkM21lnEf1snaPwdn vM71yU9SVXeRPhme2qWpigaia0ffGPClSvwucxVpQWlhoJwohc91V00+5m1NzrRq c9TczRTHqPe/u7NvYhy6WGnmt8VScA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:00 2024 by rpki-client on console-fra.rpki-client.org