$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa File: 5453459a-6eb2-3994-9041-412771cabb7c.roa (raw, json) Hash identifier: o5/yIk6oR2UWHeLfdtIlqxYAsZsCS6KDYWZISmYjbk8= Subject key identifier: 97:C2:20:1D:BF:B8:70:7C:05:50:18:9D:44:D0:4A:13:BC:B5:8C:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F7798F68F7E734F8BB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 64.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f7:79:8f:68:f7:e7:34:f8:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=ede5223a-ba04-459e-9d3f-79200019917b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:85:e1:92:28:b1:35:ee:5a:b5:fe:7a:d0:c3: 12:24:fc:2e:74:a7:82:45:ad:91:23:e7:77:4b:3f: 9a:f6:69:9d:5e:24:72:f4:3f:fb:d8:2b:84:b0:de: b8:f0:d5:18:f6:b7:e8:19:7c:d0:8b:cf:e6:2d:a7: 89:18:1a:84:78:7a:0b:da:a2:0a:98:9a:f9:ad:e9: d8:eb:10:1f:ad:8d:46:d9:83:90:d9:8e:e5:7f:5f: 89:08:65:8e:03:5d:d1:70:48:20:1d:de:63:e9:ce: 02:f9:95:49:00:05:f5:49:a4:01:81:2c:78:78:97: ca:df:ef:9e:c5:17:bc:48:bc:86:b7:65:7b:24:bd: b3:b2:95:36:40:0f:3f:7a:ea:2c:e9:86:f5:5a:ed: ac:28:04:96:5d:39:25:d9:dc:28:06:f4:30:ad:52: cf:61:c3:6c:a0:0c:48:62:56:c7:bd:8d:20:40:52: 2d:28:41:45:5a:13:1a:e7:ef:c2:0d:bb:b9:8b:ac: 72:82:19:3c:a2:b0:46:a4:83:ac:d8:5e:cd:e6:da: e6:a6:60:4d:35:8b:e1:5b:85:63:d2:43:7b:54:af: f8:f1:06:aa:20:64:c1:f5:09:5f:3f:20:8d:64:02: ac:7b:a8:7e:79:53:47:cc:52:64:82:63:b9:fe:6d: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C2:20:1D:BF:B8:70:7C:05:50:18:9D:44:D0:4A:13:BC:B5:8C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1c:18:95:6a:53:e5:43:ca:38:d4:cf:2e:38:39:21:d0:e2: 74:f2:17:f3:9c:ee:79:12:ca:d4:da:4f:7c:98:7d:20:31:19: 87:2c:c2:5b:ac:fe:0e:d1:5f:8d:05:81:ea:d6:07:b7:4c:a2: 2d:79:bb:9b:5b:be:ff:c1:95:6c:cc:b0:22:84:3b:55:3c:b5: a0:d5:a9:fd:76:b3:e0:87:df:93:46:a3:af:0e:76:27:89:44: a0:95:0d:8b:15:74:1d:43:0e:7f:71:b8:45:9a:e0:9f:f5:c6: 87:f6:1a:af:54:91:02:f8:ce:e8:76:41:e8:da:f0:2c:c7:55: 47:1a:17:96:33:f6:65:73:b1:1c:08:0f:3a:97:de:97:3a:75: 50:5f:96:b6:e4:6f:da:21:c9:20:e5:74:b9:96:e7:d7:9d:0a: 33:07:71:f1:46:3e:ba:a8:1a:74:12:21:ed:7a:55:92:d1:30: a1:34:18:3c:e8:9c:8f:fa:95:64:ef:3e:43:a1:01:cd:03:6e: 24:0d:89:36:f5:f4:a7:29:5e:bb:e4:a4:a7:18:cb:fa:ca:cf: 2d:11:e2:57:ec:b5:f8:87:2f:75:23:ce:d4:38:81:c1:9c:93: a1:d7:82:f5:a2:bc:1a:70:5f:8e:e4:01:1a:fb:af:df:95:c5: 28:2f:06:f3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVPd5j2j35zT4uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZWRlNTIyM2EtYmEwNC00NTllLTlkM2YtNzkyMDAwMTk5MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4XhkiixNe5atf560MMSJPwudKeCRa2RI+d3 Sz+a9mmdXiRy9D/72CuEsN648NUY9rfoGXzQi8/mLaeJGBqEeHoL2qIKmJr5renY 6xAfrY1G2YOQ2Y7lf1+JCGWOA13RcEggHd5j6c4C+ZVJAAX1SaQBgSx4eJfK3++e xRe8SLyGt2V7JL2zspU2QA8/euos6Yb1Wu2sKASWXTkl2dwoBvQwrVLPYcNsoAxI YlbHvY0gQFItKEFFWhMa5+/CDbu5i6xyghk8orBGpIOs2F7N5trmpmBNNYvhW4Vj 0kN7VK/48QaqIGTB9QlfPyCNZAKse6h+eVNHzFJkgmO5/m2n9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJfCIB2/uHB8BVAYnUTQShO8tYwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ1MzQ1OWEtNmViMi0z OTk0LTkwNDEtNDEyNzcxY2FiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQFAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAchwYlWpT5UPKONTPLjg5IdDidPIX85zueRLK1NpPfJh9IDEZhyzCW6z+ DtFfjQWB6tYHt0yiLXm7m1u+/8GVbMywIoQ7VTy1oNWp/Xaz4Iffk0ajrw52J4lE oJUNixV0HUMOf3G4RZrgn/XGh/Yar1SRAvjO6HZB6NrwLMdVRxoXljP2ZXOxHAgP Opfelzp1UF+WtuRv2iHJIOV0uZbn150KMwdx8UY+uqgadBIh7XpVktEwoTQYPOic j/qVZO8+Q6EBzQNuJA2JNvX0pyleu+SkpxjL+srPLRHiV+y1+IcvdSPO1DiBwZyT odeC9aK8GnBfjuQBGvuv35XFKC8G8w== -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:02 2024 by rpki-client on console-fra.rpki-client.org