$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa File: 5dcb9aae-991a-368f-9926-ce846d46de90.roa (raw, json) Hash identifier: LjFPd+cyIBDc+uyyd4VuBRSJIBzitAYjgJVTVI+/XYU= Subject key identifier: A1:6D:15:F0:C8:ED:C3:BE:84:E2:BC:02:47:CA:F0:57:93:B0:9A:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15514FC44DEF0F8341BA800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 27338 IP address blocks: 209.192.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:14:fc:44:de:f0:f8:34:1b:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a5dfca65-c7e4-484d-9bf4-9512c6907858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:3e:d7:bc:70:b8:3e:8f:e5:93:ba:96:68: 54:66:85:35:be:2c:ae:02:fd:04:1a:fa:af:7b:0d: 4e:a9:e2:5e:b1:f7:9d:3d:50:f9:9b:e4:7a:f9:09: 18:c1:5b:37:39:3d:53:dc:b8:64:9b:f4:b9:df:17: 7e:82:66:1f:fd:16:29:87:53:12:ef:e4:29:97:03: 09:c6:74:2a:06:51:aa:52:73:2b:3f:ff:0b:2b:c5: 8c:85:84:bf:7c:10:2c:cf:f2:ab:9e:de:20:b6:27: 14:ac:49:6b:00:d5:15:2b:92:93:0b:1b:37:41:4f: ea:90:5b:4a:78:9f:d1:ea:89:ee:96:87:c2:ee:4e: 19:22:c7:68:82:20:08:42:43:cb:7f:ea:95:c3:0a: 40:25:27:f6:52:c4:2c:4d:13:8b:7e:6d:a9:05:68: b9:1e:a2:04:6c:a7:13:69:8a:64:48:64:f0:d3:c1: ea:41:e4:72:09:0b:24:8e:23:c8:41:c1:92:c0:dd: dd:98:aa:23:e1:58:6a:cf:d5:44:4f:23:be:ac:7f: ef:cd:d1:71:52:63:42:2d:3f:4a:23:00:8e:37:30: f1:18:9f:d5:41:9c:1d:be:56:cf:a4:2a:f8:6a:b5: d0:7b:bb:f2:28:82:71:f9:dc:58:4a:9b:ad:fb:16: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6D:15:F0:C8:ED:C3:BE:84:E2:BC:02:47:CA:F0:57:93:B0:9A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5dcb9aae-991a-368f-9926-ce846d46de90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:45:9a:d5:9c:16:16:c4:b6:f5:30:58:6b:a3:ca:2e:4c:ee: 67:21:c0:d4:a9:25:65:59:73:13:4b:0d:14:62:4b:3e:cb:5c: 68:fb:42:7c:80:41:8d:81:4c:49:26:57:74:8b:fd:87:00:2d: 87:5e:7d:d9:d9:ac:6b:dd:05:aa:ac:59:4a:3f:cd:be:cc:d0: ed:67:39:67:e5:26:96:5f:b0:72:9b:80:ba:a3:1d:dc:ed:b8: e5:0e:4c:98:90:63:da:25:5b:d2:e0:6a:8d:5d:00:96:e9:99: b3:d8:12:cd:e3:b2:66:b5:97:b5:81:de:64:dc:09:96:f6:c1: e0:5f:24:72:40:a8:41:24:68:62:ed:85:65:54:50:e0:da:d7: cd:45:c0:38:2f:88:6c:bb:1e:a8:43:8e:bc:71:f4:6e:18:9b: bc:9a:29:69:5a:0e:fc:57:a0:67:ab:4e:ac:8a:f0:4b:ac:f0: 8c:4a:11:9b:87:f1:3a:be:5c:8b:33:93:4b:60:ab:ce:ad:23: e8:e7:6f:1d:14:ed:ae:33:14:38:b3:f3:54:6e:f0:c8:e3:bb: 6e:db:2f:3b:d2:9c:4c:82:c1:12:de:74:35:4d:5c:d0:1a:50: 8c:a7:4a:59:d4:23:ed:e2:c9:29:c7:ed:c4:dc:a9:95:2b:98: 41:7c:68:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRT8RN7w+DQbqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTVkZmNhNjUtYzdlNC00ODRkLTliZjQtOTUxMmM2OTA3ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojk+17xwuD6P5ZO6lmhUZoU1viyuAv0EGvqv ew1OqeJesfedPVD5m+R6+QkYwVs3OT1T3Lhkm/S53xd+gmYf/RYph1MS7+QplwMJ xnQqBlGqUnMrP/8LK8WMhYS/fBAsz/Krnt4gticUrElrANUVK5KTCxs3QU/qkFtK eJ/R6onulofC7k4ZIsdogiAIQkPLf+qVwwpAJSf2UsQsTROLfm2pBWi5HqIEbKcT aYpkSGTw08HqQeRyCQskjiPIQcGSwN3dmKoj4Vhqz9VETyO+rH/vzdFxUmNCLT9K IwCONzDxGJ/VQZwdvlbPpCr4arXQe7vyKIJx+dxYSput+xYBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFtFfDI7cO+hOK8AkfK8FeTsJooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRjYjlhYWUtOTkxYS0z NjhmLTk5MjYtY2U4NDZkNDZkZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9FmtWcFhbEtvUwWGujyi5M7mchwNSpJWVZcxNLDRRiSz7LXGj7QnyA QY2BTEkmV3SL/YcALYdefdnZrGvdBaqsWUo/zb7M0O1nOWflJpZfsHKbgLqjHdzt uOUOTJiQY9olW9Lgao1dAJbpmbPYEs3jsma1l7WB3mTcCZb2weBfJHJAqEEkaGLt hWVUUODa181FwDgviGy7HqhDjrxx9G4Ym7yaKWlaDvxXoGerTqyK8Eus8IxKEZuH 8Tq+XIszk0tgq86tI+jnbx0U7a4zFDiz81Ru8Mjju27bLzvSnEyCwRLedDVNXNAa UIynSlnUI+3iySnH7cTcqZUrmEF8aOI= -----END CERTIFICATE-----Generated at Mon Nov 25 15:57:58 2024 by rpki-client on console-fra.rpki-client.org