$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa File: 6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa (raw, json) Hash identifier: zVhp0VJv/TFx6/2+QM6a1sacusOmTzYUFI28dRLqHoE= Subject key identifier: 00:BA:D9:71:7D:B5:14:6D:FB:65:C1:36:76:48:81:A2:2D:28:22:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552F8F9DC0D685D50B9FA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 71.30.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2f:8f:9d:c0:d6:85:d5:0b:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=ca8b83a3-1d62-48dd-8ac9-6f44db7a9e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:16:c9:89:e6:4a:d4:a4:12:ee:a9:c4:f2: a5:47:3b:d8:29:29:10:82:c9:5b:06:e5:fd:ed:45: 18:51:0f:7e:89:65:97:5a:7d:00:74:cf:9e:f9:c2: bf:f4:2d:dd:d3:66:80:38:17:22:b9:39:23:05:b9: 0c:63:d9:68:a5:de:43:f9:4b:16:4f:6a:5d:da:1b: ac:8a:d7:e1:6f:3d:00:8e:e2:61:ea:12:83:50:b8: 65:33:9d:5e:f2:17:22:ce:50:78:80:03:6f:44:4b: 12:92:db:92:8f:9e:f1:99:b6:c7:68:7f:c1:53:d4: 0b:8d:71:2f:24:10:64:4b:d9:fc:1b:df:66:b9:a2: be:94:70:35:11:3b:10:6d:85:36:57:5c:b7:6d:86: 10:1f:29:10:37:b0:0d:22:05:e4:91:63:c6:2e:7c: e3:82:75:e9:2d:0b:ed:35:d1:8b:c9:71:97:39:75: 48:91:25:36:18:82:17:2c:55:13:b1:00:32:23:3a: 75:24:e0:62:19:19:e1:0d:e1:33:66:8c:d7:92:84: 6f:3e:50:79:c5:3c:55:a6:74:7a:27:4e:ea:5d:06: 35:64:31:44:34:04:cb:f4:75:0e:f9:ee:a0:28:5a: d7:4e:72:52:94:8f:35:40:11:16:30:42:0a:f8:11: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BA:D9:71:7D:B5:14:6D:FB:65:C1:36:76:48:81:A2:2D:28:22:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b1:f8:61:bd:a4:b7:a2:00:fd:61:88:b0:9d:c4:45:b4:05: c5:5c:b3:27:23:56:97:c8:10:51:58:a8:af:1d:af:6b:9c:68: 82:02:eb:e6:ac:bf:23:90:66:04:32:b4:a1:80:69:77:f1:af: e0:67:a2:a8:df:cd:cc:1b:28:39:fa:ba:75:ce:a5:39:cb:07: 95:d4:08:1c:f4:9d:db:e8:b2:0f:26:4e:80:e4:17:7c:ff:5a: 5c:0e:53:8f:19:02:b4:e4:de:61:8c:a7:53:b7:ba:0a:c9:bf: 10:8b:5d:3f:20:71:08:78:9b:6f:9d:29:c2:9f:03:b4:95:2c: 53:67:a7:b1:12:80:26:65:53:a3:0c:20:56:2e:f1:da:dd:c1: 1e:1d:b5:dd:bb:14:8c:d0:57:cd:bb:9a:4c:26:fa:6d:8f:43: 37:db:41:d9:85:c6:db:56:c0:10:ec:4e:83:2a:58:f7:9e:87: c1:15:af:72:2f:e8:67:0e:e9:27:2c:de:57:db:96:5c:a6:38: 61:97:db:5b:04:3f:a3:48:93:b8:81:7c:36:00:13:3b:a6:b6: cf:f8:d3:e5:d3:4d:eb:e6:a0:58:17:d2:d1:8b:e7:a3:cd:ec: 4c:89:be:7b:25:fb:e4:da:86:bd:f8:9a:a3:93:fe:c5:e4:03: 83:b2:f6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVS+PncDWhdULn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk Y2E4YjgzYTMtMWQ2Mi00OGRkLThhYzktNmY0NGRiN2E5ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO0WyYnmStSkEu6pxPKlRzvYKSkQgslbBuX9 7UUYUQ9+iWWXWn0AdM+e+cK/9C3d02aAOBciuTkjBbkMY9lopd5D+UsWT2pd2hus itfhbz0AjuJh6hKDULhlM51e8hcizlB4gANvREsSktuSj57xmbbHaH/BU9QLjXEv JBBkS9n8G99muaK+lHA1ETsQbYU2V1y3bYYQHykQN7ANIgXkkWPGLnzjgnXpLQvt NdGLyXGXOXVIkSU2GIIXLFUTsQAyIzp1JOBiGRnhDeEzZozXkoRvPlB5xTxVpnR6 J07qXQY1ZDFENATL9HUO+e6gKFrXTnJSlI81QBEWMEIK+BH4sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC62XF9tRRt+2XBNnZIgaItKCKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjQzNWU5MGYtMWQxNC0z Nzk4LThkZTMtYWFmZDdmN2UyZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2x+GG9pLeiAP1hiLCdxEW0BcVcsycjVpfIEFFYqK8dr2ucaIIC6+as vyOQZgQytKGAaXfxr+BnoqjfzcwbKDn6unXOpTnLB5XUCBz0ndvosg8mToDkF3z/ WlwOU48ZArTk3mGMp1O3ugrJvxCLXT8gcQh4m2+dKcKfA7SVLFNnp7ESgCZlU6MM IFYu8drdwR4dtd27FIzQV827mkwm+m2PQzfbQdmFxttWwBDsToMqWPeeh8EVr3Iv 6GcO6Scs3lfbllymOGGX21sEP6NIk7iBfDYAEzumts/40+XTTevmoFgX0tGL56PN 7EyJvnsl++Tahr34mqOT/sXkA4Oy9rc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:05 2024 by rpki-client on console-fra.rpki-client.org