$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa File: 4daf1a7a-da43-3166-9acd-71ed2a62e445.roa (raw, json) Hash identifier: /XmqNLDkzke1PrWK8jcOdiviSk17XvlaEy3Xhibcs08= Subject key identifier: 05:1F:6C:67:6D:2C:23:7A:D9:A5:E4:68:84:99:79:7A:29:B7:C3:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550C7A144DBBF79EFF5590 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.135.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0c:7a:14:4d:bb:f7:9e:ff:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=fea7e396-82dc-4459-a351-0de2f268a58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:c1:51:65:f2:e9:ef:8c:7c:a3:ff:95:bd: 31:e3:2f:b0:a7:ab:6c:60:7b:a3:e5:74:27:75:97: 71:53:b0:7f:90:3d:6d:44:98:1e:d0:76:e6:d5:36: 93:ac:e1:cb:f8:09:16:cb:59:95:31:3b:1d:de:00: fc:31:5a:02:0d:7b:7a:b7:83:97:33:c8:c7:b0:f6: 24:85:a2:15:28:cc:2a:4b:8a:79:42:55:43:e0:c9: aa:b7:4b:13:e1:3f:d4:30:bf:7e:17:b3:11:8f:9e: 25:a4:f4:f5:04:73:43:30:6c:2e:8e:f9:ac:76:ec: f7:b6:ea:d2:7b:90:49:6c:26:7b:3e:1a:02:af:51: 53:28:79:81:16:7c:ca:6e:8c:01:89:1d:4e:2f:81: a1:07:bf:79:f3:d4:26:25:75:cb:b2:80:43:33:fe: 92:0a:99:72:e1:df:3e:9c:ae:7d:1b:7b:6c:f4:fe: af:b0:f6:6e:4f:93:ad:9f:73:a9:f1:28:c1:f1:45: 61:49:ec:a7:77:68:db:bb:37:68:63:e7:44:2b:d3: 31:cd:9b:e1:37:08:0f:05:84:b9:e3:51:8a:d2:d1: ad:e7:56:d7:a5:0f:a8:89:68:1f:8d:cd:8b:e0:20: c2:7f:1c:bd:6c:e1:65:0b:5b:4a:20:61:2f:e6:ec: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1F:6C:67:6D:2C:23:7A:D9:A5:E4:68:84:99:79:7A:29:B7:C3:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4daf1a7a-da43-3166-9acd-71ed2a62e445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.135.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9a:2a:e0:82:5d:13:49:c4:7e:c9:b6:ea:9d:aa:76:66:11: d2:48:82:b2:1b:69:09:1d:79:a5:f1:7c:99:53:86:6e:0f:c1: 02:47:d9:9c:f2:b6:76:6d:06:e6:8f:35:3d:d5:52:1b:af:70: d7:d8:58:6c:10:50:82:35:07:0c:49:f9:e3:ff:7a:3b:49:b9: 84:02:20:89:56:f1:1b:c6:08:51:62:0d:a8:4c:2b:a0:9e:56: 11:e2:ea:79:26:bc:33:4f:8a:93:4f:bf:86:80:ea:3e:f5:66: b9:04:cf:a3:a7:bc:3b:d4:59:ca:af:d6:22:ea:24:80:1a:8b: 0d:5f:b3:0d:23:2e:db:b3:80:6c:2d:83:53:d5:48:39:bc:46: 3b:ad:ce:d1:5b:bc:35:30:dc:4e:a7:94:35:c0:62:88:c0:92: b9:0d:f4:d2:34:29:a1:1d:4e:42:96:a7:49:5f:14:28:31:41: 9e:dc:18:3b:7e:66:53:ac:c7:88:cc:be:41:73:dd:f5:25:3b: ed:b0:25:db:61:b0:84:55:d1:2b:19:5f:b0:e7:0c:93:4e:0e: e9:17:3c:4a:87:02:66:a2:09:eb:fc:3e:b3:ff:2c:4d:e5:f9: 08:a0:25:56:82:5c:84:6d:8b:d8:ea:e1:b1:8d:eb:b9:d8:79: 5c:56:36:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQx6FE27957/VZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZmVhN2UzOTYtODJkYy00NDU5LWEzNTEtMGRlMmYyNjhhNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWzBUWXy6e+MfKP/lb0x4y+wp6tsYHuj5XQn dZdxU7B/kD1tRJge0Hbm1TaTrOHL+AkWy1mVMTsd3gD8MVoCDXt6t4OXM8jHsPYk haIVKMwqS4p5QlVD4Mmqt0sT4T/UML9+F7MRj54lpPT1BHNDMGwujvmsduz3turS e5BJbCZ7PhoCr1FTKHmBFnzKbowBiR1OL4GhB79589QmJXXLsoBDM/6SCply4d8+ nK59G3ts9P6vsPZuT5Otn3Op8SjB8UVhSeynd2jbuzdoY+dEK9MxzZvhNwgPBYS5 41GK0tGt51bXpQ+oiWgfjc2L4CDCfxy9bOFlC1tKIGEv5uz6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUfbGdtLCN62aXkaISZeXopt8ObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhZjFhN2EtZGE0My0z MTY2LTlhY2QtNzFlZDJhNjJlNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2IcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6aKuCCXRNJxH7JtuqdqnZmEdJIgrIbaQkdeaXxfJlThm4PwQJH2Zzy tnZtBuaPNT3VUhuvcNfYWGwQUII1BwxJ+eP/ejtJuYQCIIlW8RvGCFFiDahMK6Ce VhHi6nkmvDNPipNPv4aA6j71ZrkEz6OnvDvUWcqv1iLqJIAaiw1fsw0jLtuzgGwt g1PVSDm8RjutztFbvDUw3E6nlDXAYojAkrkN9NI0KaEdTkKWp0lfFCgxQZ7cGDt+ ZlOsx4jMvkFz3fUlO+2wJdthsIRV0SsZX7DnDJNODukXPEqHAmaiCev8PrP/LE3l +QigJVaCXIRti9jq4bGN67nYeVxWNog= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:42 2024 by rpki-client on console-ams.rpki-client.org