$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa File: 601631aa-1788-3e00-8366-1ab7d8df59e3.roa (raw, json) Hash identifier: jYvddT6R6JAX50U4YJ6bOOBbbDkL+DuIC5RUomRUah4= Subject key identifier: BA:43:83:30:01:FE:83:EE:00:CA:13:5D:DF:2E:FA:DA:1A:CE:CE:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552C4D5CC919FBC55C8C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 66.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2c:4d:5c:c9:19:fb:c5:5c:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=e057487a-b961-4a35-92c2-b907112a46f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:d8:66:19:48:68:e2:f4:e0:3b:75:26:6b: c9:36:66:70:f9:f7:c8:8e:35:42:34:c6:5d:da:94: 0e:28:b2:d3:57:22:40:3f:ac:82:09:7d:71:91:f9: c1:79:31:76:45:07:e1:00:15:5d:ec:6d:0f:13:5a: 4f:d3:98:b2:78:f1:65:21:09:fe:f9:52:d4:9f:f5: 59:1d:16:1e:9a:b5:0f:a0:84:21:25:b7:d2:d3:c8: 52:1c:a3:b1:47:a5:dc:aa:bd:47:d8:fe:0f:34:a5: 79:8f:95:74:c2:f2:aa:f8:29:cc:99:4c:20:25:6e: c5:85:fc:fc:14:b9:5c:26:63:f1:fe:08:cd:f6:88: 83:f3:23:5d:d5:0f:32:9b:ae:4c:71:c5:1c:ff:5d: 92:74:1d:e2:b5:ac:37:80:ba:e2:4d:5a:29:11:28: 0a:d4:7a:80:c1:8d:ba:5c:7e:89:1f:68:46:06:be: 4e:09:e0:d4:9c:d8:0b:2f:6e:3f:99:52:85:2a:22: 83:dd:c3:f4:3f:42:1c:ea:00:1a:c4:a2:e9:25:2a: 0c:c3:3a:79:d8:6e:b5:a6:6f:8b:eb:20:52:a6:b5: 82:cc:c8:d8:f7:68:15:ff:ee:00:f5:d7:15:7e:f9: 19:81:51:20:cf:c1:9c:ce:93:67:18:36:23:1e:c2: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:43:83:30:01:FE:83:EE:00:CA:13:5D:DF:2E:FA:DA:1A:CE:CE:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5e:39:fb:74:b0:86:8f:8d:1e:18:25:30:0e:da:86:72:95: c2:43:d7:00:46:ce:3d:34:ae:4f:d4:9c:8f:de:c7:e8:09:6d: d1:69:4b:58:b4:6a:38:e2:09:ea:5a:d3:9c:24:4b:5a:a0:cb: 07:f2:b6:24:5f:59:15:b9:7c:39:4d:81:8d:aa:4b:1d:09:0c: d3:ff:18:5b:5b:fc:48:7a:da:46:5f:17:ee:d1:b0:a1:8b:f1: d7:8f:b9:57:7e:36:1c:fa:04:7f:ac:47:5c:e1:05:b0:aa:fb: 2b:50:d5:83:5c:93:9e:e3:53:85:40:5b:2e:96:b1:41:54:fe: d3:c7:b6:f7:92:7f:9c:21:9f:08:87:ed:2f:1c:08:80:21:2d: 6c:07:15:92:7a:04:e1:d2:67:2a:4b:44:e5:ac:c5:09:de:6c: ab:3d:d9:4e:cf:4b:96:04:22:9d:9d:e4:93:b9:56:5e:c0:4c: a8:d3:be:02:cd:dd:12:98:26:66:d0:a2:8e:a5:8a:3b:04:06: f5:3f:8f:0b:4a:ff:2b:ad:99:ba:2c:ae:6c:ef:a2:29:a9:fa: 3d:41:4d:78:69:f4:c7:62:b0:b6:1a:b7:92:4c:bc:23:1d:67: b0:4a:07:46:0a:f4:f9:27:83:51:73:49:53:e2:b4:7d:99:be: 5d:97:90:4d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVSxNXMkZ+8VcjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZTA1NzQ4N2EtYjk2MS00YTM1LTkyYzItYjkwNzExMmE0NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwezYZhlIaOL04Dt1JmvJNmZw+ffIjjVCNMZd 2pQOKLLTVyJAP6yCCX1xkfnBeTF2RQfhABVd7G0PE1pP05iyePFlIQn++VLUn/VZ HRYemrUPoIQhJbfS08hSHKOxR6Xcqr1H2P4PNKV5j5V0wvKq+CnMmUwgJW7Fhfz8 FLlcJmPx/gjN9oiD8yNd1Q8ym65MccUc/12SdB3itaw3gLriTVopESgK1HqAwY26 XH6JH2hGBr5OCeDUnNgLL24/mVKFKiKD3cP0P0Ic6gAaxKLpJSoMwzp52G61pm+L 6yBSprWCzMjY92gV/+4A9dcVfvkZgVEgz8GczpNnGDYjHsKN7wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLpDgzAB/oPuAMoTXd8u+toazs7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjAxNjMxYWEtMTc4OC0z ZTAwLTgzNjYtMWFiN2Q4ZGY1OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQiAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACV45+3Swho+NHhglMA7ahnKVwkPXAEbOPTSuT9Scj97H6Alt0WlLWLRq OOIJ6lrTnCRLWqDLB/K2JF9ZFbl8OU2BjapLHQkM0/8YW1v8SHraRl8X7tGwoYvx 14+5V342HPoEf6xHXOEFsKr7K1DVg1yTnuNThUBbLpaxQVT+08e295J/nCGfCIft LxwIgCEtbAcVknoE4dJnKktE5azFCd5sqz3ZTs9LlgQinZ3kk7lWXsBMqNO+As3d EpgmZtCijqWKOwQG9T+PC0r/K62ZuiyubO+iKan6PUFNeGn0x2Kwthq3kky8Ix1n sEoHRgr0+SeDUXNJU+K0fZm+XZeQTQ== -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:10 2024 by rpki-client on console-fra.rpki-client.org