$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa File: 5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa (raw, json) Hash identifier: U5U40L21xt7VYUcjfjkzT5A2+QQoEmoxPPjyxA8dN5g= Subject key identifier: DE:43:48:A8:2A:C5:BA:B3:EF:C1:34:0A:77:B5:28:11:D9:05:9F:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552D72981F2C4376D2DBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 67.140.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2d:72:98:1f:2c:43:76:d2:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=7a2b4f12-dc8e-4e83-8026-fa1f5a453a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:0d:90:f9:41:bf:1e:f1:b6:5a:bb:ef:a0: 37:d9:53:2a:0c:ee:02:a3:16:f7:56:a5:6d:e9:96: 55:73:a7:3c:5e:8d:2b:ea:69:86:a2:11:ec:cc:be: 92:f6:94:fa:86:97:f3:cb:68:31:68:ce:c0:4d:32: 5a:3f:2c:74:4a:58:d3:bb:3e:52:67:32:9f:c9:4d: 74:b5:d4:65:d7:d6:3c:61:9b:5a:48:c6:7c:4e:88: 39:52:58:d7:c2:e3:d4:62:64:0f:7e:96:24:b9:5f: 63:28:46:7b:70:5d:e9:ff:c7:1b:ff:17:bc:e8:b6: 9f:a4:79:12:ab:d7:83:b6:af:8e:a1:c2:a4:8d:f4: c4:fd:b4:6d:09:ad:01:15:f5:f0:b5:5b:74:b1:b1: bf:17:5e:d2:77:6a:b7:ba:24:0e:23:c1:e5:60:95: 9f:a0:69:ef:f1:c4:ae:6d:8d:31:1c:65:ea:73:2e: a6:10:b0:d1:5a:d9:91:d5:23:18:a2:08:43:0b:20: e9:ae:b4:db:16:80:4c:04:e4:3c:bd:75:6c:da:9d: e4:cc:1c:81:34:14:3b:a4:65:7d:2a:9e:55:98:b7: f1:63:55:4d:f5:d7:8e:1b:63:df:fb:74:35:64:93: 97:d2:20:d7:b7:52:cb:76:5f:6d:cb:b5:b0:3f:6d: 37:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:43:48:A8:2A:C5:BA:B3:EF:C1:34:0A:77:B5:28:11:D9:05:9F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b8174c1-d9dd-3039-92fc-ddc31456f0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:14:f9:27:fb:43:56:aa:a1:8c:13:da:ee:4f:dc:77:37:b5: 2d:d6:c0:ca:35:a6:32:7d:e0:82:5f:f7:42:91:1b:8a:7f:be: 97:f9:cc:fb:ca:4d:0b:38:cf:dd:41:ee:ca:13:a4:e8:fd:78: a8:0e:a9:f0:87:0c:9f:32:02:4a:d1:63:aa:8e:b1:1a:78:be: 3e:58:f3:59:d6:0f:38:e0:6e:00:47:5f:cd:2a:8e:21:04:14: 9c:e9:42:9c:30:ee:06:9b:2b:ae:2c:25:72:e6:e3:62:d9:5b: 57:8a:58:b1:2a:61:70:17:71:8b:a1:e5:6d:bb:c7:3c:81:2b: 93:af:e9:2c:ae:a5:a4:03:db:14:89:64:85:c1:d5:56:68:1b: 20:9e:91:19:1c:0d:3a:a7:ac:52:de:07:18:64:59:66:b0:93: 68:a8:31:6a:54:21:95:a9:2a:ac:58:74:2f:a9:5e:13:17:f0: ae:3f:6b:09:41:79:1c:92:3f:5f:bb:9f:a0:f4:73:b2:3e:bc: 86:88:5a:ae:0c:25:33:eb:62:49:91:9c:a8:72:ab:c0:e2:07: 5d:2b:57:2b:f2:35:a6:71:fd:dd:4a:9b:af:73:bf:06:54:fe: 92:af:07:12:f0:d7:a9:be:c1:29:90:e2:05:1f:9d:0f:c3:2d: d6:6b:b3:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVS1ymB8sQ3bS28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk N2EyYjRmMTItZGM4ZS00ZTgzLTgwMjYtZmExZjVhNDUzYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U4NkPlBvx7xtlq776A32VMqDO4Coxb3VqVt 6ZZVc6c8Xo0r6mmGohHszL6S9pT6hpfzy2gxaM7ATTJaPyx0SljTuz5SZzKfyU10 tdRl19Y8YZtaSMZ8Tog5UljXwuPUYmQPfpYkuV9jKEZ7cF3p/8cb/xe86LafpHkS q9eDtq+OocKkjfTE/bRtCa0BFfXwtVt0sbG/F17Sd2q3uiQOI8HlYJWfoGnv8cSu bY0xHGXqcy6mELDRWtmR1SMYoghDCyDprrTbFoBMBOQ8vXVs2p3kzByBNBQ7pGV9 Kp5VmLfxY1VN9deOG2Pf+3Q1ZJOX0iDXt1LLdl9ty7WwP203owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5DSKgqxbqz78E0Cne1KBHZBZ+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWI4MTc0YzEtZDlkZC0z MDM5LTkyZmMtZGRjMzE0NTZmMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8U+Sf7Q1aqoYwT2u5P3Hc3tS3WwMo1pjJ94IJf90KRG4p/vpf5zPvK TQs4z91B7soTpOj9eKgOqfCHDJ8yAkrRY6qOsRp4vj5Y81nWDzjgbgBHX80qjiEE FJzpQpww7gabK64sJXLm42LZW1eKWLEqYXAXcYuh5W27xzyBK5Ov6SyupaQD2xSJ ZIXB1VZoGyCekRkcDTqnrFLeBxhkWWawk2ioMWpUIZWpKqxYdC+pXhMX8K4/awlB eRySP1+7n6D0c7I+vIaIWq4MJTPrYkmRnKhyq8DiB10rVyvyNaZx/d1Km69zvwZU /pKvBxLw16m+wSmQ4gUfnQ/DLdZrs5Q= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:03 2024 by rpki-client on console-fra.rpki-client.org