$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa File: 5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa (raw, json) Hash identifier: TlFFb7Vh9ubp6YmeKPuohkR61r45xUzCN+GEk5iHTOs= Subject key identifier: 93:AD:F9:2C:E1:40:D4:78:9A:77:84:EF:27:D8:A6:91:2D:2E:9F:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847B96163AD44D088F2A7F11B90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:63:ad:44:d0:88:f2:a7:f1:1b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=34d5dad4-29f5-4400-b03d-e83e7803fab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:69:ae:96:f7:bc:28:cb:65:f0:69:a3:71:b5: ab:23:0b:c9:60:66:21:ec:bb:2c:ab:b9:47:17:b7: b4:89:b4:6d:d2:b3:a4:d3:cf:bd:49:0e:ab:a7:11: 58:05:5a:85:9d:c8:7a:30:9a:07:18:69:10:1d:8e: c4:a4:9a:e4:51:50:a0:0e:d0:1d:21:47:f5:88:d9: e9:d7:d1:d1:d4:78:4f:a0:dd:c0:96:6b:69:fc:b8: 6b:92:48:ac:9b:26:8c:d9:3e:dc:a3:dd:94:79:54: 75:51:46:4c:7b:94:d0:93:1e:df:e3:08:d2:74:77: 9a:71:05:43:18:d0:35:c4:d1:f2:9e:12:a4:59:fd: 1a:70:ba:fc:4f:09:08:14:f3:58:35:12:e7:00:bd: eb:dc:4f:85:f4:b4:b6:fa:c9:dc:95:57:99:cd:91: 8e:01:db:cc:c4:d6:42:b5:4f:57:a9:5d:d8:2d:95: cd:88:f0:8b:96:f8:6e:a9:9d:25:71:0b:46:25:f6: d9:f5:a7:f4:0f:37:25:da:0a:ec:4f:e4:36:9b:c2: e4:79:6c:a4:0c:68:f3:2b:be:bc:0d:17:00:5c:c6: 97:01:5d:4a:f7:bb:c6:88:db:ba:10:5b:6c:d2:d7: b6:3f:2e:16:fe:42:9c:27:1c:0f:87:9a:6e:f7:ee: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AD:F9:2C:E1:40:D4:78:9A:77:84:EF:27:D8:A6:91:2D:2E:9F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e8:20:61:5f:6f:54:80:94:1b:a5:19:d6:31:76:fe:a0:9f: b0:7a:9e:41:d7:d3:4b:e7:eb:45:f7:7a:55:43:e9:b9:bf:07: 1a:58:dd:9a:be:03:f9:f9:c6:c6:91:97:bf:9f:51:4e:42:f8: f8:b8:18:19:72:a2:c6:97:a0:5b:88:c5:80:b6:eb:4c:72:c6: e1:cf:9c:f0:3b:24:16:dc:b5:88:ba:6c:4a:eb:b7:01:19:9a: 4e:52:3c:c5:86:a9:55:b9:87:46:6d:84:77:52:ac:66:f4:ba: 94:1a:6e:5b:fc:2b:55:02:36:64:66:82:69:ea:f5:a3:62:d4: 65:f1:33:05:4e:51:f2:f5:c6:70:67:01:bb:50:c1:56:6e:e6: d4:11:ec:b9:93:8b:e0:dc:5c:a1:ee:88:9c:fb:63:bd:b1:4f: 88:2c:50:55:6e:00:16:d9:e4:aa:04:46:8a:f8:31:ee:af:f5: 33:40:38:3e:7e:99:1d:c7:f6:a7:4b:af:6a:88:07:81:3d:8e: 63:ea:f9:fe:d0:c9:82:21:72:a9:d1:eb:5b:7a:05:12:22:b9: 1c:9a:3b:99:59:00:d9:28:f0:1d:22:de:4b:c0:d8:71:cf:78: 76:1d:e8:c9:f2:18:d6:6f:04:92:1d:f3:1f:4b:5b:8a:cd:56: 63:08:01:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YWOtRNCI8qfxG5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk MzRkNWRhZDQtMjlmNS00NDAwLWIwM2QtZTgzZTc4MDNmYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmmulve8KMtl8GmjcbWrIwvJYGYh7Lssq7lH F7e0ibRt0rOk08+9SQ6rpxFYBVqFnch6MJoHGGkQHY7EpJrkUVCgDtAdIUf1iNnp 19HR1HhPoN3Almtp/LhrkkismyaM2T7co92UeVR1UUZMe5TQkx7f4wjSdHeacQVD GNA1xNHynhKkWf0acLr8TwkIFPNYNRLnAL3r3E+F9LS2+snclVeZzZGOAdvMxNZC tU9XqV3YLZXNiPCLlvhuqZ0lcQtGJfbZ9af0Dzcl2grsT+Q2m8LkeWykDGjzK768 DRcAXMaXAV1K97vGiNu6EFts0te2Py4W/kKcJxwPh5pu9+44FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOt+SzhQNR4mneE7yfYppEtLp8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWY0NThiYWEtOWRhMi0z MDg0LWE4ZmYtNjliNzRkNDFmOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERx/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzoIGFfb1SAlBulGdYxdv6gn7B6nkHX00vn60X3elVD6bm/BxpY3Zq+ A/n5xsaRl7+fUU5C+Pi4GBlyosaXoFuIxYC260xyxuHPnPA7JBbctYi6bErrtwEZ mk5SPMWGqVW5h0ZthHdSrGb0upQablv8K1UCNmRmgmnq9aNi1GXxMwVOUfL1xnBn AbtQwVZu5tQR7LmTi+DcXKHuiJz7Y72xT4gsUFVuABbZ5KoERor4Me6v9TNAOD5+ mR3H9qdLr2qIB4E9jmPq+f7QyYIhcqnR61t6BRIiuRyaO5lZANko8B0i3kvA2HHP eHYd6MnyGNZvBJId8x9LW4rNVmMIAQ8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:04 2024 by rpki-client on console-fra.rpki-client.org