$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60122882-c0e1-39d2-9a63-4a9dc8d76535.roa File: 60122882-c0e1-39d2-9a63-4a9dc8d76535.roa (raw, json) Hash identifier: T4dsMXEgDFD1MxrRCL+6t3RU6ow0e4OD844gUwDNvyY= Subject key identifier: 38:9D:BF:F6:E0:05:4D:21:3E:81:04:90:1F:7D:8F:67:6A:FC:64:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155301C0F9306CA0F113A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60122882-c0e1-39d2-9a63-4a9dc8d76535.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 72.16.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:30:1c:0f:93:06:ca:0f:11:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=957d51ff-9063-4a1f-aed9-b03ae4d2c5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:45:58:cb:b4:9e:09:52:7d:b0:19:be:39: 6a:34:b0:06:ba:d4:53:60:a5:26:7b:bb:02:24:da: b0:b0:9e:0b:55:df:40:d4:ab:e1:5e:24:98:fc:23: 86:16:8b:d6:5c:c4:15:6c:ae:ff:6e:cf:1b:d6:89: e3:15:0f:18:f8:20:82:0e:1a:3a:f1:35:aa:9f:9d: 7a:1a:b1:b8:00:b7:1c:85:24:0c:e7:08:6c:0a:41: 66:b5:50:02:91:83:ed:c7:ad:2a:ac:40:13:d8:11: 8d:8f:de:79:5f:64:5c:5b:de:a8:ba:5d:28:62:85: 27:ba:10:7c:2e:62:e6:4a:ed:aa:cf:51:22:d1:07: e4:76:7d:76:9a:8a:f2:8e:7e:a9:29:6c:1f:ee:d5: df:6b:dd:69:58:1f:fc:42:7e:9c:21:bc:92:8c:e9: 10:eb:66:70:2f:eb:e6:1c:7e:1b:7a:50:62:92:e0: 49:92:df:29:ad:86:b2:19:06:52:af:84:83:55:65: dc:88:67:47:f2:d5:f3:76:c9:02:2a:41:6e:47:3a: 4a:72:e5:49:f1:d3:d3:58:95:7d:e9:b9:99:08:a7: 25:70:f6:7b:f1:55:7f:ad:6f:da:62:ce:f1:d6:8b: 7b:dd:cf:89:f9:9a:ec:4a:59:56:78:4a:20:7e:ac: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:BF:F6:E0:05:4D:21:3E:81:04:90:1F:7D:8F:67:6A:FC:64:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60122882-c0e1-39d2-9a63-4a9dc8d76535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b1:a6:82:ad:51:04:2e:ac:dd:d3:e4:68:97:e7:bb:65:77: 57:13:c7:39:d8:00:78:6b:38:6a:41:0b:e2:b9:68:e5:b6:c7: 27:d3:0d:9a:a4:f4:6c:a3:93:54:e7:11:db:78:b9:33:87:72: ec:a7:38:1f:ae:b9:30:3f:88:7b:b4:aa:35:f3:db:06:5b:bc: f9:8e:ad:82:47:0c:52:10:cf:e3:af:10:a5:ab:19:9c:56:2e: 3a:c4:eb:84:17:19:df:d9:89:a2:20:35:d7:43:49:e5:a0:22: ff:26:54:47:a0:30:d9:5a:0c:f2:3f:d3:3c:68:41:e5:f6:29: 7e:62:0e:6f:7c:43:86:f6:45:73:01:86:31:63:79:f1:7f:b1: 33:cf:78:0a:23:6f:8b:14:88:7a:f8:28:91:c9:5d:1d:82:2a: 44:d0:11:bf:5e:94:cb:ec:d1:6b:2b:c9:2b:a1:a1:bd:bd:d1: 4d:d3:7d:76:c7:96:31:9a:84:5b:eb:f9:72:34:9c:4c:d8:fd: 3d:38:88:b7:0f:f3:58:b3:c2:e5:06:bb:fd:5a:fc:c3:b8:6d: 58:48:6b:c3:55:f6:71:c5:ae:6b:b9:ed:e7:af:5c:2b:99:80: 1a:02:43:0a:3a:87:d5:52:88:f4:97:05:c6:32:a9:87:dd:b4: 46:cd:b8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTAcD5MGyg8ROgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTU3ZDUxZmYtOTA2My00YTFmLWFlZDktYjAzYWU0ZDJjNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjShFWMu0nglSfbAZvjlqNLAGutRTYKUme7sC JNqwsJ4LVd9A1KvhXiSY/COGFovWXMQVbK7/bs8b1onjFQ8Y+CCCDho68TWqn516 GrG4ALcchSQM5whsCkFmtVACkYPtx60qrEAT2BGNj955X2RcW96oul0oYoUnuhB8 LmLmSu2qz1Ei0Qfkdn12moryjn6pKWwf7tXfa91pWB/8Qn6cIbySjOkQ62ZwL+vm HH4belBikuBJkt8prYayGQZSr4SDVWXciGdH8tXzdskCKkFuRzpKcuVJ8dPTWJV9 6bmZCKclcPZ78VV/rW/aYs7x1ot73c+J+ZrsSllWeEogfqyeywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDidv/bgBU0hPoEEkB99j2dq/GQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjAxMjI4ODItYzBlMS0z OWQyLTlhNjMtNGE5ZGM4ZDc2NTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmxpoKtUQQurN3T5GiX57tld1cTxznYAHhrOGpBC+K5aOW2xyfTDZqk 9Gyjk1TnEdt4uTOHcuynOB+uuTA/iHu0qjXz2wZbvPmOrYJHDFIQz+OvEKWrGZxW LjrE64QXGd/ZiaIgNddDSeWgIv8mVEegMNlaDPI/0zxoQeX2KX5iDm98Q4b2RXMB hjFjefF/sTPPeAojb4sUiHr4KJHJXR2CKkTQEb9elMvs0WsrySuhob290U3TfXbH ljGahFvr+XI0nEzY/T04iLcP81izwuUGu/1a/MO4bVhIa8NV9nHFrmu57eevXCuZ gBoCQwo6h9VSiPSXBcYyqYfdtEbNuCM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:39 2024 by rpki-client on console-ams.rpki-client.org