$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/513d00bc-503f-3f28-a38e-ad2de0290c6b.roa File: 513d00bc-503f-3f28-a38e-ad2de0290c6b.roa (raw, json) Hash identifier: HMQzD9vBOSt8AaDjruw20AI4oTjKkExyCxT37jq6J5w= Subject key identifier: D0:A3:B8:A7:8A:37:FF:EE:A6:D4:47:90:C9:89:A0:35:0F:A8:C7:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551188137D73F355A995C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/513d00bc-503f-3f28-a38e-ad2de0290c6b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7268 IP address blocks: 66.84.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:11:88:13:7d:73:f3:55:a9:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=f208bdee-f0fd-4dfb-84b8-8ae2794ad1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:4e:7f:42:fb:73:b1:86:43:e1:5e:b2:7f: 10:72:90:b3:f6:c8:16:1e:3f:8f:fd:b9:eb:d4:0c: e3:d3:93:62:cc:9d:a3:d0:ef:29:19:e5:7e:d2:c7: b1:a2:72:12:48:f2:a8:29:5b:82:1a:80:89:15:80: a8:25:5d:9d:49:b8:83:3d:a8:c4:8c:53:89:a2:1e: e6:41:91:26:24:0d:9b:5b:05:58:4e:b7:00:c2:b1: aa:8d:e7:87:f8:09:a9:d1:f2:49:a8:8b:e1:a3:82: ce:69:e3:cc:0c:da:a9:3f:7d:05:df:47:12:06:6c: ce:91:72:06:b3:80:d0:c1:ce:dc:4f:35:68:9f:1a: 22:21:87:8f:39:9d:f5:c0:38:c9:f3:e5:91:68:2b: df:42:2e:ef:93:31:87:2c:5b:89:f7:97:d9:ca:92: 3a:29:6c:60:0c:32:fe:01:f2:3b:a6:24:9e:05:53: 61:90:ca:1d:53:e4:e2:5f:a6:b6:db:b9:cb:49:37: 3e:d6:b1:91:72:a9:1c:91:ef:9e:4c:89:83:55:cb: 36:5b:ab:ee:ea:64:ad:ff:3c:0c:c0:21:bc:b4:d5: 2f:f5:64:6d:7c:2e:29:34:cd:48:a6:49:a8:89:c0: 27:43:49:f4:f1:64:d5:a7:a6:d5:a1:85:0f:37:c1: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:B8:A7:8A:37:FF:EE:A6:D4:47:90:C9:89:A0:35:0F:A8:C7:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/513d00bc-503f-3f28-a38e-ad2de0290c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.84.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fe:57:37:69:7b:f6:95:23:cc:13:02:41:f6:1e:ef:03:7a: e3:8a:93:aa:78:58:09:da:ee:91:c1:3f:d1:da:5a:54:7e:32: 97:e2:4d:76:46:44:af:6c:81:4e:3c:8a:6a:c5:0e:c7:3b:fd: 7e:bf:7b:70:c9:13:be:84:1f:f9:19:f2:9a:c5:80:71:e5:b9: 2b:1b:55:f0:fe:df:dd:b0:30:30:b3:5a:8a:4a:3f:9b:4c:94: 00:26:61:f3:29:bb:09:87:48:c5:da:f2:6c:8a:1a:4b:67:92: b4:21:04:8f:f1:5a:dc:47:7a:3d:41:a8:17:4e:1c:61:b0:77: 31:cb:78:da:a0:67:b8:36:05:6d:84:38:bf:40:4b:1f:08:97: 8c:7c:f2:92:f4:fd:e1:d1:56:00:45:2d:e1:8e:55:b0:3e:2c: 79:08:cc:45:78:ff:e3:b4:90:59:d7:2b:ff:28:37:e0:c7:25: e0:3a:1a:db:84:99:8e:ee:b8:a8:3c:83:d8:42:4b:59:7e:0b: 6d:c1:7c:f3:e2:19:15:92:1f:8c:7d:61:cc:d6:d0:b7:4f:19: 0c:b5:ef:69:81:0a:59:3f:82:d6:1d:d2:e8:aa:69:7a:3e:8a: 04:9f:ff:64:b8:19:66:2f:39:ec:d3:1b:d2:56:c2:5f:e1:25: c3:9a:64:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRGIE31z81WplcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZjIwOGJkZWUtZjBmZC00ZGZiLTg0YjgtOGFlMjc5NGFkMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ThOf0L7c7GGQ+Fesn8QcpCz9sgWHj+P/bnr 1Azj05NizJ2j0O8pGeV+0sexonISSPKoKVuCGoCJFYCoJV2dSbiDPajEjFOJoh7m QZEmJA2bWwVYTrcAwrGqjeeH+Amp0fJJqIvho4LOaePMDNqpP30F30cSBmzOkXIG s4DQwc7cTzVonxoiIYePOZ31wDjJ8+WRaCvfQi7vkzGHLFuJ95fZypI6KWxgDDL+ AfI7piSeBVNhkModU+TiX6a227nLSTc+1rGRcqkcke+eTImDVcs2W6vu6mSt/zwM wCG8tNUv9WRtfC4pNM1IpkmoicAnQ0n08WTVp6bVoYUPN8EdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCjuKeKN//uptRHkMmJoDUPqMdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTEzZDAwYmMtNTAzZi0z ZjI4LWEzOGUtYWQyZGUwMjkwYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlSmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7+Vzdpe/aVI8wTAkH2Hu8DeuOKk6p4WAna7pHBP9HaWlR+MpfiTXZG RK9sgU48imrFDsc7/X6/e3DJE76EH/kZ8prFgHHluSsbVfD+392wMDCzWopKP5tM lAAmYfMpuwmHSMXa8myKGktnkrQhBI/xWtxHej1BqBdOHGGwdzHLeNqgZ7g2BW2E OL9ASx8Il4x88pL0/eHRVgBFLeGOVbA+LHkIzEV4/+O0kFnXK/8oN+DHJeA6GtuE mY7uuKg8g9hCS1l+C23BfPPiGRWSH4x9YczW0LdPGQy172mBClk/gtYd0uiqaXo+ igSf/2S4GWYvOezTG9JWwl/hJcOaZJ4= -----END CERTIFICATE-----Generated at Mon Nov 25 15:57:54 2024 by rpki-client on console-fra.rpki-client.org