$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61140e2f-f13f-33e4-8a7a-7dc59867fc33.roa File: 61140e2f-f13f-33e4-8a7a-7dc59867fc33.roa (raw, json) Hash identifier: aLqaoInH8NhTzLNavCbWmQ6DAEemuZN3PraGPRonkJE= Subject key identifier: 11:53:E3:2C:41:20:29:18:16:EF:06:BB:8E:EA:DC:B9:19:95:35:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155324838820FD3256E35C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61140e2f-f13f-33e4-8a7a-7dc59867fc33.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 75.117.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:32:48:38:82:0f:d3:25:6e:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=d2b60a53-ab6b-410d-a8ca-52e6ffc7a7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:36:bf:ee:48:73:a9:ec:72:dc:fc:26:b3: 5f:25:78:f4:95:39:e7:33:32:9a:5e:84:1b:e0:0d: 8b:dd:ec:91:ba:05:c7:e3:46:e1:92:30:3f:70:6e: ea:96:d1:44:61:ef:0c:d6:2f:9c:05:a7:08:c9:67: 1a:7a:69:f8:89:a4:a8:15:19:2e:26:30:50:1f:c5: ba:5b:63:c0:08:57:8a:bd:c0:0b:98:85:3a:d5:d7: 7e:0b:a8:3b:4b:21:c2:62:03:26:11:83:a7:22:8b: 1f:96:e6:c3:3d:0a:0b:3b:0a:a9:71:fe:f8:d4:62: 5b:85:c0:79:8e:fa:47:da:2b:b0:f5:2a:18:4d:23: 87:45:5d:e9:00:d5:40:db:d8:3e:cd:4e:4a:2b:0c: 1c:93:fe:d8:0b:b5:18:d1:f2:55:35:c6:5f:14:34: df:89:cf:f6:95:31:fa:95:63:de:b0:f8:b6:36:70: 28:0b:3c:0f:ec:55:ec:1d:ec:af:66:3d:af:a9:9c: 3c:66:8e:df:21:66:a9:ab:3b:57:a7:fc:61:c5:27: 2e:90:f9:0b:cd:19:70:ab:8a:78:22:eb:63:40:19: ac:40:9b:8c:cd:20:df:29:92:86:37:fb:6d:7d:21: ef:bf:a7:e5:ef:5c:ab:88:02:c1:b9:89:74:18:d9: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:E3:2C:41:20:29:18:16:EF:06:BB:8E:EA:DC:B9:19:95:35:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61140e2f-f13f-33e4-8a7a-7dc59867fc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4d:b9:a0:a3:75:f8:8a:78:20:fb:c1:0a:1a:13:7d:74:90: 9a:2b:72:75:0a:e8:f8:70:e3:b0:a0:48:2c:84:ae:8f:e4:c7: 3f:c2:88:ab:10:0b:9d:28:3e:71:0f:51:29:f1:a6:37:7c:34: fb:89:43:fe:ac:78:06:a5:43:3a:5f:95:a0:d6:cb:67:09:bc: cb:67:04:c2:1d:e5:5c:b1:ba:af:ef:25:7f:60:2f:6d:2e:84: 59:54:df:47:b2:58:3f:4d:59:18:08:84:7c:da:1d:3b:19:a3: 34:be:ec:29:2c:78:7d:f5:ba:39:5f:a6:87:80:ad:45:a1:76: 81:e0:4b:dd:e2:a7:01:15:65:80:56:0c:13:71:58:16:6c:58: 3c:42:7d:87:dc:b1:44:c2:71:b9:d2:9e:14:e6:5a:25:c6:bd: 33:f7:87:43:74:aa:ce:62:e0:44:6c:11:7c:93:4b:7b:08:8b: 3a:44:fb:01:eb:fa:3e:74:c7:d5:80:9c:d2:ab:dc:ab:00:bf: 4d:25:1e:ae:ce:31:81:70:18:64:e5:1c:a2:08:1c:2c:1d:30: fc:a6:ad:46:81:a1:01:d9:07:36:23:a5:91:01:01:07:a2:bf: 88:1b:7a:ec:53:2e:7f:24:d7:a9:10:e1:64:15:da:32:00:dd: 67:11:92:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTJIOIIP0yVuNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZDJiNjBhNTMtYWI2Yi00MTBkLWE4Y2EtNTJlNmZmYzdhN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+E2v+5Ic6nsctz8JrNfJXj0lTnnMzKaXoQb 4A2L3eyRugXH40bhkjA/cG7qltFEYe8M1i+cBacIyWcaemn4iaSoFRkuJjBQH8W6 W2PACFeKvcALmIU61dd+C6g7SyHCYgMmEYOnIosflubDPQoLOwqpcf741GJbhcB5 jvpH2iuw9SoYTSOHRV3pANVA29g+zU5KKwwck/7YC7UY0fJVNcZfFDTfic/2lTH6 lWPesPi2NnAoCzwP7FXsHeyvZj2vqZw8Zo7fIWapqztXp/xhxScukPkLzRlwq4p4 IutjQBmsQJuMzSDfKZKGN/ttfSHvv6fl71yriALBuYl0GNndQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFT4yxBICkYFu8Gu47q3LkZlTWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjExNDBlMmYtZjEzZi0z M2U0LThhN2EtN2RjNTk4NjdmYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVNuaCjdfiKeCD7wQoaE310kJorcnUK6Phw47CgSCyEro/kxz/CiKsQ C50oPnEPUSnxpjd8NPuJQ/6seAalQzpflaDWy2cJvMtnBMId5Vyxuq/vJX9gL20u hFlU30eyWD9NWRgIhHzaHTsZozS+7CkseH31ujlfpoeArUWhdoHgS93ipwEVZYBW DBNxWBZsWDxCfYfcsUTCcbnSnhTmWiXGvTP3h0N0qs5i4ERsEXyTS3sIizpE+wHr +j50x9WAnNKr3KsAv00lHq7OMYFwGGTlHKIIHCwdMPymrUaBoQHZBzYjpZEBAQei v4gbeuxTLn8k16kQ4WQV2jIA3WcRkm0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:46 2024 by rpki-client on console-ams.rpki-client.org