$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa File: 5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa (raw, json) Hash identifier: YRpxvs1/82JljRVufltrthi9nL+TNsx13Q2T3V8iuts= Subject key identifier: 53:39:0E:49:47:BF:DD:80:4A:32:89:1C:F5:50:74:7D:FB:3C:46:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F7AFC0A230A0F8D79A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 64.119.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f7:af:c0:a2:30:a0:f8:d7:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=ea849672-c9a7-4796-b6ba-b8a5d4d6e5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:e2:3f:a8:14:28:54:a4:f1:48:f4:bc:fe: 77:88:83:53:9f:31:27:d6:fc:e9:96:04:8d:36:d1: 65:06:1f:71:11:2d:16:72:ef:18:8c:ec:4b:ab:8d: 5d:b9:59:3f:f9:cd:60:30:1a:87:11:a5:51:a0:40: 0e:4a:ec:9d:52:1d:43:52:6f:20:01:63:8a:bb:d1: af:a3:0e:ab:cc:f7:1d:4d:16:5c:0a:64:55:17:d9: d5:86:21:e3:94:86:25:61:bd:f4:bb:b9:3a:3f:a2: e4:be:93:ea:8e:9f:3a:26:60:24:54:68:a7:48:3c: 06:c3:88:b1:ac:39:a1:19:2c:62:26:81:75:75:4f: 78:17:d4:1c:d7:03:d4:9e:3d:f0:a9:8c:6b:2b:08: 24:6d:4d:fd:fb:ee:91:8d:02:b1:57:fb:43:c1:9f: 4f:18:7d:63:0a:9c:55:63:29:f5:21:1d:5c:a5:9a: 61:63:f9:c1:9e:2e:98:66:11:cc:38:38:7d:a0:d0: 54:8f:32:95:0e:46:53:90:ec:53:33:60:08:65:76: 6b:8d:22:8a:2e:a3:6d:19:f7:5f:cd:c0:09:00:17: 4b:1b:9d:1b:8d:45:5f:6a:fa:9e:40:b8:17:78:ce: 50:9b:00:25:6e:d9:95:95:42:63:83:69:3d:ee:b2: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:0E:49:47:BF:DD:80:4A:32:89:1C:F5:50:74:7D:FB:3C:46:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5295be43-da7d-3253-8b1e-ad11e7eb36d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.119.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e8:ab:42:37:45:f1:be:0a:19:27:6d:7c:16:98:1c:6f:4d: 3b:5d:49:67:ec:95:56:59:1f:63:e6:c0:6b:81:5e:05:70:20: db:8d:9d:13:2b:8e:b6:1e:7b:6e:77:c4:82:82:00:7b:4e:ad: ae:15:f8:66:b8:90:9c:2d:61:75:da:bc:85:61:39:24:4d:c6: e5:0d:4b:a3:c5:15:4d:6c:6a:df:ae:f2:01:5f:07:c1:00:9d: 61:9c:d2:7d:fd:3c:e7:d0:da:a0:c5:f5:46:bc:3b:b7:18:10: 09:18:4f:ba:8c:4d:ab:0a:cf:d2:12:84:f9:6e:b1:68:19:33: d6:8b:67:26:d2:10:b8:8f:f0:42:f0:da:25:1d:ab:65:f5:54: 11:f3:dd:28:2d:aa:81:d0:7c:82:e4:ce:62:ac:b9:1a:db:a3: cc:7a:20:2e:29:1f:0b:ee:1d:75:c4:f8:1e:d9:90:ed:9c:d6: 0a:23:31:03:1e:f6:4f:e5:ef:ba:ff:b5:00:26:4a:af:9d:80: a6:0b:5f:3a:18:5c:73:0d:c9:a3:ff:77:b2:12:0a:d8:69:a2: 3b:3a:d8:1b:12:20:01:fe:f9:b4:78:0a:ab:f6:72:2c:b4:71: f0:be:70:f8:94:b5:45:35:5f:aa:94:bb:42:ed:e2:7d:21:f9: 12:3e:d0:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPevwKIwoPjXmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZWE4NDk2NzItYzlhNy00Nzk2LWI2YmEtYjhhNWQ0ZDZlNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcLiP6gUKFSk8Uj0vP53iINTnzEn1vzplgSN NtFlBh9xES0Wcu8YjOxLq41duVk/+c1gMBqHEaVRoEAOSuydUh1DUm8gAWOKu9Gv ow6rzPcdTRZcCmRVF9nVhiHjlIYlYb30u7k6P6LkvpPqjp86JmAkVGinSDwGw4ix rDmhGSxiJoF1dU94F9Qc1wPUnj3wqYxrKwgkbU39++6RjQKxV/tDwZ9PGH1jCpxV Yyn1IR1cpZphY/nBni6YZhHMODh9oNBUjzKVDkZTkOxTM2AIZXZrjSKKLqNtGfdf zcAJABdLG50bjUVfavqeQLgXeM5QmwAlbtmVlUJjg2k97rKA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM5DklHv92ASjKJHPVQdH37PEaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI5NWJlNDMtZGE3ZC0z MjUzLThiMWUtYWQxMWU3ZWIzNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/oq0I3RfG+ChknbXwWmBxvTTtdSWfslVZZH2PmwGuBXgVwINuNnRMr jrYee253xIKCAHtOra4V+Ga4kJwtYXXavIVhOSRNxuUNS6PFFU1sat+u8gFfB8EA nWGc0n39POfQ2qDF9Ua8O7cYEAkYT7qMTasKz9IShPlusWgZM9aLZybSELiP8ELw 2iUdq2X1VBHz3SgtqoHQfILkzmKsuRrbo8x6IC4pHwvuHXXE+B7ZkO2c1gojMQMe 9k/l77r/tQAmSq+dgKYLXzoYXHMNyaP/d7ISCthpojs62BsSIAH++bR4Cqv2ciy0 cfC+cPiUtUU1X6qUu0Lt4n0h+RI+0Bg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:43 2024 by rpki-client on console-ams.rpki-client.org