$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62a8b3fd-2301-3b79-b0cf-e2cdfa925e9d.roa File: 62a8b3fd-2301-3b79-b0cf-e2cdfa925e9d.roa (raw, json) Hash identifier: 08arGxtHm6OVJlYUII44OCbLXX3L9vF+09TK3PWhEao= Subject key identifier: F1:8B:28:EF:04:1A:48:04:39:96:C5:45:7C:4A:7F:C6:8D:D6:F2:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155474C03F0A96C31AF7414 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62a8b3fd-2301-3b79-b0cf-e2cdfa925e9d.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 395364 IP address blocks: 74.9.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:47:4c:03:f0:a9:6c:31:af:74:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=710bb39a-9c20-43e9-a71b-903e306e6b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:45:84:e3:e3:8f:1f:97:cb:68:9b:f9:28: b4:d9:a2:f1:6b:e9:e0:30:e3:9c:f9:ca:2a:ee:ec: 8f:01:41:e3:82:e8:7f:35:04:da:85:14:fb:8a:2d: 7b:7f:c6:e5:52:e3:ec:b4:b5:8f:6a:b1:f9:23:89: e8:c0:55:e7:83:26:95:da:51:4c:cb:48:16:7a:27: 2e:69:be:dd:80:f1:07:3a:47:dc:8c:81:11:21:23: 5f:29:85:02:a9:68:77:88:57:32:81:2c:0c:a6:ef: 51:3c:bd:74:41:60:2c:b5:9d:b3:fb:af:42:d5:57: 53:ec:94:af:99:f0:b1:a8:39:0e:7b:04:ef:70:fe: bc:37:b8:97:25:72:bb:33:35:13:1f:59:a1:88:a3: 32:d0:74:0d:02:5a:45:2e:6c:a9:ce:32:17:47:1d: bc:b3:bb:af:8a:05:13:60:30:3d:96:7e:d2:09:85: 20:8d:ac:c9:a3:b9:2c:62:0d:22:dc:3e:44:67:cf: 5b:41:cf:ca:59:6c:8b:e7:89:86:c8:d1:56:53:aa: 64:69:d7:3d:21:00:d6:0e:d2:d3:3f:e1:c5:db:3f: 8a:4d:cd:f3:d1:b8:d8:96:3e:9c:7e:de:99:4f:c8: ba:a7:b5:40:87:10:4d:18:e1:a0:5e:a2:9b:fd:30: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:28:EF:04:1A:48:04:39:96:C5:45:7C:4A:7F:C6:8D:D6:F2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62a8b3fd-2301-3b79-b0cf-e2cdfa925e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.9.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:23:fc:24:2c:f8:ef:ad:5b:92:ec:5e:b1:95:38:11:8e:19: 97:58:b2:48:33:a2:d3:7d:55:2a:0d:65:4d:59:33:52:28:59: ea:e6:22:d9:71:ed:38:ad:28:d8:cf:dc:aa:7c:6a:03:32:f3: 0d:c4:ec:d7:86:b3:b1:41:2b:56:00:75:3e:9f:77:28:26:33: fe:4e:3b:6c:5b:ae:9e:10:f6:5a:5d:29:61:b0:42:9e:5a:a2: 84:b4:33:2a:a3:9d:e5:36:95:af:87:2f:e0:4d:69:fc:d3:6e: 2f:97:84:17:a4:e1:3f:5b:5c:75:ea:ec:6a:05:17:50:c8:91: a6:4b:7d:64:96:ef:41:dd:6b:5f:36:93:2d:a6:05:1b:1c:87: 59:4c:ef:36:45:97:0c:c1:f4:e9:85:25:7f:5a:5c:77:04:b1: e5:0c:e9:de:12:40:7a:44:72:55:4e:12:73:83:a4:42:83:ad: 7d:74:d3:6c:31:a8:fd:ac:15:7c:09:6a:bb:57:ce:9e:c7:d1: a7:de:c6:06:66:ed:70:f6:a2:c3:0f:e8:ca:89:33:a0:da:e5: 37:bf:65:a6:ab:09:6c:bc:20:42:e3:ab:e3:6b:42:a4:dc:ad: ae:a0:0e:22:5f:b9:d2:da:5a:73:31:6c:c6:6b:2b:b0:8b:aa: 94:e9:74:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUdMA/CpbDGvdBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NzEwYmIzOWEtOWMyMC00M2U5LWE3MWItOTAzZTMwNmU2YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9JFhOPjjx+Xy2ib+Si02aLxa+ngMOOc+coq 7uyPAUHjguh/NQTahRT7ii17f8blUuPstLWParH5I4nowFXngyaV2lFMy0gWeicu ab7dgPEHOkfcjIERISNfKYUCqWh3iFcygSwMpu9RPL10QWAstZ2z+69C1VdT7JSv mfCxqDkOewTvcP68N7iXJXK7MzUTH1mhiKMy0HQNAlpFLmypzjIXRx28s7uvigUT YDA9ln7SCYUgjazJo7ksYg0i3D5EZ89bQc/KWWyL54mGyNFWU6pkadc9IQDWDtLT P+HF2z+KTc3z0bjYlj6cft6ZT8i6p7VAhxBNGOGgXqKb/TA3pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGLKO8EGkgEOZbFRXxKf8aN1vIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjJhOGIzZmQtMjMwMS0z Yjc5LWIwY2YtZTJjZGZhOTI1ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgmuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4j/CQs+O+tW5LsXrGVOBGOGZdYskgzotN9VSoNZU1ZM1IoWermItlx 7TitKNjP3Kp8agMy8w3E7NeGs7FBK1YAdT6fdygmM/5OO2xbrp4Q9lpdKWGwQp5a ooS0MyqjneU2la+HL+BNafzTbi+XhBek4T9bXHXq7GoFF1DIkaZLfWSW70Hda182 ky2mBRsch1lM7zZFlwzB9OmFJX9aXHcEseUM6d4SQHpEclVOEnODpEKDrX1002wx qP2sFXwJartXzp7H0afexgZm7XD2osMP6MqJM6Da5Te/ZaarCWy8IELjq+NrQqTc ra6gDiJfudLaWnMxbMZrK7CLqpTpdMA= -----END CERTIFICATE-----Generated at Mon Nov 25 15:58:00 2024 by rpki-client on console-fra.rpki-client.org