$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa File: 5681d306-27a9-32cc-a97a-f708d3e413c7.roa (raw, json) Hash identifier: qe06Wx1Wv+FjiziXBNUk30LMQ1GYxOzzhqDs4Rw0rrE= Subject key identifier: 83:C2:75:54:E2:AA:0A:EA:41:B1:9F:99:A8:CA:EF:71:BA:76:90:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858471FD5DB84D6B38868F3E51780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 209.255.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:db:84:d6:b3:88:68:f3:e5:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=050df8e8-730a-4967-bbc1-70311265e19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:60:14:ae:dd:45:7b:49:e4:56:31:93:24: b8:2b:85:c8:21:7c:5f:d5:cc:81:c9:04:7d:60:08: e7:f1:9f:71:51:62:a9:c9:28:50:e8:19:be:55:41: b4:db:00:86:f2:61:ae:8f:82:b8:12:99:3e:75:0d: e2:25:91:2a:35:4d:db:14:d1:5e:ae:de:d9:4a:2f: e5:45:2f:f5:83:1e:bd:59:49:0b:6c:d6:51:be:ca: fd:17:43:fd:c9:85:82:e8:8a:c1:3d:67:80:cd:1a: 94:ed:cf:5b:0d:dd:0c:2d:6c:0f:02:6d:9a:c1:cc: e2:c6:49:90:f4:79:0c:8f:11:fc:e1:8c:1a:c2:02: 72:c9:7a:fa:03:ae:19:21:b5:3b:3d:2c:25:29:0a: 09:03:44:52:37:fb:a3:ad:0b:24:8a:7b:18:f4:f1: fb:b1:9e:b5:b8:26:ba:dc:18:38:88:a3:85:2b:c7: a1:16:81:1b:f0:ff:10:3f:e2:08:54:cd:38:b6:43: 81:8b:cc:40:36:43:1c:04:ef:9f:7d:20:4c:6b:18: ef:03:5f:75:a1:f7:05:66:92:b3:b4:be:14:e1:b7: fa:d4:47:08:f3:8f:77:53:5c:08:40:1c:1a:a5:de: ce:54:04:16:5f:be:18:53:b4:3d:c5:fe:ca:c3:ab: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C2:75:54:E2:AA:0A:EA:41:B1:9F:99:A8:CA:EF:71:BA:76:90:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:51:5b:c3:34:39:10:e9:34:43:50:5e:8c:83:8b:74:5a:5f: f4:db:f2:53:36:58:72:b0:86:1b:a5:b7:f7:b6:cc:44:a8:92: 52:47:90:19:dd:9b:b8:cc:e7:df:bf:0a:96:03:de:95:c9:88: a0:77:58:24:00:e1:db:07:fc:69:e6:ea:2b:1b:e3:6f:34:13: e9:d8:0b:de:f8:66:82:3a:ac:c7:40:46:cd:ba:b4:64:43:1b: 7f:be:6e:ad:be:c0:56:e9:76:50:21:31:3e:99:20:2a:d1:c0: 9a:49:4c:79:a9:6c:f2:98:b3:d2:cf:a9:64:d1:05:a4:ad:a9: c3:d9:4a:b2:bb:64:cf:96:5a:f5:00:a3:f9:09:da:6c:74:ac: a6:d8:36:a0:a4:d0:0f:68:1a:80:3b:02:91:dd:0d:f8:4c:95: ad:2a:67:f9:58:5a:78:4c:28:21:3a:4c:1b:a1:5b:82:8a:7d: 00:b1:81:f3:43:a1:8f:61:b4:8f:ba:a3:78:0d:de:7a:22:1c: 7e:30:10:06:cd:45:b0:01:f8:85:e1:2c:00:87:cb:37:f3:4c: 4d:95:61:ec:26:47:32:6a:19:b2:23:d0:c4:e1:ce:24:e8:67: d9:27:61:45:85:cd:e8:d2:db:40:a0:54:6a:08:3c:c5:06:d9: dd:42:1c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1duE1rOIaPPlF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MDUwZGY4ZTgtNzMwYS00OTY3LWJiYzEtNzAzMTEyNjVlMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmFgFK7dRXtJ5FYxkyS4K4XIIXxf1cyByQR9 YAjn8Z9xUWKpyShQ6Bm+VUG02wCG8mGuj4K4Epk+dQ3iJZEqNU3bFNFert7ZSi/l RS/1gx69WUkLbNZRvsr9F0P9yYWC6IrBPWeAzRqU7c9bDd0MLWwPAm2awczixkmQ 9HkMjxH84YwawgJyyXr6A64ZIbU7PSwlKQoJA0RSN/ujrQskinsY9PH7sZ61uCa6 3Bg4iKOFK8ehFoEb8P8QP+IIVM04tkOBi8xANkMcBO+ffSBMaxjvA191ofcFZpKz tL4U4bf61EcI8493U1wIQBwapd7OVAQWX74YU7Q9xf7Kw6uj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPCdVTiqgrqQbGfmajK73G6dpBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4MWQzMDYtMjdhOS0z MmNjLWE5N2EtZjcwOGQzZTQxM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9RW8M0ORDpNENQXoyDi3RaX/Tb8lM2WHKwhhult/e2zESoklJHkBnd m7jM59+/CpYD3pXJiKB3WCQA4dsH/Gnm6isb4280E+nYC974ZoI6rMdARs26tGRD G3++bq2+wFbpdlAhMT6ZICrRwJpJTHmpbPKYs9LPqWTRBaStqcPZSrK7ZM+WWvUA o/kJ2mx0rKbYNqCk0A9oGoA7ApHdDfhMla0qZ/lYWnhMKCE6TBuhW4KKfQCxgfND oY9htI+6o3gN3noiHH4wEAbNRbAB+IXhLACHyzfzTE2VYewmRzJqGbIj0MThziTo Z9knYUWFzejS20CgVGoIPMUG2d1CHBY= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:09 2024 by rpki-client on console-fra.rpki-client.org