$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: X0Q2/trWD0j65a/8pMH3G3CoEtLj3Shve/D1jq/YKH8= Subject key identifier: C3:BE:5B:B7:1A:6A:4C:39:93:40:96:EB:7E:60:02:3D:2E:30:D5:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552C05C5C2E0E5431C0F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2c:05:c5:c2:e0:e5:43:1c:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=c7a736bc-13fb-4489-ba4d-7f512355c9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:c0:3b:c9:3d:88:c9:37:2a:ac:d1:a1:ba: 19:80:a4:7d:c4:7f:df:ad:be:cf:8d:46:76:50:ab: fa:2b:a5:34:8d:94:99:60:c8:da:78:df:06:b3:35: e8:1d:cd:e5:6e:f4:72:9b:f2:c1:ad:09:99:bf:80: 81:82:cf:37:dc:43:0d:c7:bf:d9:4a:eb:fe:2e:82: 84:46:a2:34:08:20:56:d2:cf:9a:06:97:0c:ee:d3: 28:ec:1e:d7:09:4c:75:be:c2:fd:0c:c7:66:1c:03: 2d:22:71:74:d2:ef:6a:9c:6a:a7:77:9a:e3:6d:93: 65:b8:cd:fb:02:55:15:dd:dc:40:0c:9a:60:7c:9a: a0:f0:a2:3b:43:3d:6d:9c:2d:9f:1f:49:f5:65:90: 9c:68:d9:37:1d:d5:82:7d:c2:c4:d2:29:23:97:54: 60:06:63:99:8b:5e:41:6b:77:2c:cb:8f:dd:db:44: ab:be:b7:48:81:f3:6c:d5:bd:72:28:ba:43:ec:dc: a9:fc:fc:7f:36:71:e0:c5:4b:3f:c5:95:93:96:a0: 4d:44:4d:13:a1:14:60:35:dc:d8:31:05:60:f7:61: 04:f8:66:3d:30:71:4a:1a:dd:a2:1d:9f:3d:df:1b: 15:ea:cf:9a:7e:9f:41:1e:cc:97:cb:95:d0:e2:b5: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BE:5B:B7:1A:6A:4C:39:93:40:96:EB:7E:60:02:3D:2E:30:D5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:71:7d:91:b6:0b:ff:b9:65:c7:90:80:1a:c1:2f:bf:c9:de: 8c:e1:5c:3f:9f:db:f7:ee:3e:6d:83:c8:7b:38:75:8b:25:f9: ee:78:e5:8b:1f:f6:1d:08:6b:d3:b7:16:53:00:12:c5:11:7e: eb:96:78:5a:71:8c:df:bf:2c:25:b6:e2:58:69:43:45:51:da: 3c:e3:ca:3c:18:70:1e:b9:c6:ca:89:32:c8:6f:a0:a1:db:63: bf:7e:68:c4:72:e3:ca:f9:ba:c4:13:6b:11:2d:f7:41:3d:fb: 88:43:84:cb:8d:bc:11:17:5f:43:9e:29:87:65:73:e3:de:88: 42:d5:0a:e3:97:ee:12:9c:91:42:d0:6d:af:82:4b:e7:11:73: 5e:08:99:d8:17:7a:54:bd:0a:71:f6:b9:68:e1:9f:98:27:80: e6:9f:7b:ca:0f:a8:d6:67:37:23:84:c2:ad:6c:03:d9:dd:9c: 0f:8d:7c:f9:5e:4d:94:5c:a4:6e:e8:16:b7:8e:cd:8a:77:7c: d9:ca:07:65:0e:2b:62:9d:dc:72:8c:e6:65:52:66:34:9b:e2: ba:be:39:e1:f0:c6:18:e7:5f:2a:32:fc:fc:3f:b7:ca:1a:22: 63:3f:fb:dd:ea:83:b2:4e:de:c1:c1:11:bc:52:91:90:6f:3a: fb:4b:46:15 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVSwFxcLg5UMcD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YzdhNzM2YmMtMTNmYi00NDg5LWJhNGQtN2Y1MTIzNTVjOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv3AO8k9iMk3KqzRoboZgKR9xH/frb7PjUZ2 UKv6K6U0jZSZYMjaeN8GszXoHc3lbvRym/LBrQmZv4CBgs833EMNx7/ZSuv+LoKE RqI0CCBW0s+aBpcM7tMo7B7XCUx1vsL9DMdmHAMtInF00u9qnGqnd5rjbZNluM37 AlUV3dxADJpgfJqg8KI7Qz1tnC2fH0n1ZZCcaNk3HdWCfcLE0ikjl1RgBmOZi15B a3csy4/d20SrvrdIgfNs1b1yKLpD7Nyp/Px/NnHgxUs/xZWTlqBNRE0ToRRgNdzY MQVg92EE+GY9MHFKGt2iHZ893xsV6s+afp9BHsyXy5XQ4rV9SwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMO+W7caakw5k0CW635gAj0uMNVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiXF9kbYL/7llx5CAGsEvv8nejOFcP5/b9+4+bYPIezh1iyX57njlix/2 HQhr07cWUwASxRF+65Z4WnGM378sJbbiWGlDRVHaPOPKPBhwHrnGyokyyG+godtj v35oxHLjyvm6xBNrES33QT37iEOEy428ERdfQ54ph2Vz496IQtUK45fuEpyRQtBt r4JL5xFzXgiZ2Bd6VL0Kcfa5aOGfmCeA5p97yg+o1mc3I4TCrWwD2d2cD418+V5N lFykbugWt47Nind82coHZQ4rYp3ccozmZVJmNJviur454fDGGOdfKjL8/D+3yhoi Yz/73eqDsk7ewcERvFKRkG86+0tGFQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:02 2024 by rpki-client on console-fra.rpki-client.org