$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa File: 64b768fa-4325-324b-9c0e-4df1bbbb2738.roa (raw, json) Hash identifier: p7xOzroaL5HLmeD1Ty7+A8ZSVH0Q9Eo0exGQMfGx4aw= Subject key identifier: 57:0B:F0:A8:49:61:FE:23:F6:7C:D7:1C:3A:DC:06:3A:A2:EF:D1:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117CA4B49D8DD6BC2DFD7F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa Signing time: Thu 12 Sep 2024 17:22:30 +0000 ROA not before: Thu 12 Sep 2024 17:22:30 +0000 ROA not after: Wed 11 Dec 2024 18:22:30 +0000 asID: 7029 IP address blocks: 71.28.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:ca:4b:49:d8:dd:6b:c2:df:d7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:30 2024 GMT Not After : Dec 11 18:22:30 2024 GMT Subject: CN=e0fe02ef-4dc4-4bd5-9398-14d13b9b2528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:17:e0:00:4c:f2:4e:c3:c4:b3:68:9d:42: e6:02:99:ac:89:21:91:45:14:4d:76:82:10:cc:61: 56:49:c5:e4:5a:7c:a7:cd:d2:0e:6d:86:6c:7a:c2: 4f:b3:34:90:9a:ac:77:dc:96:71:b5:86:84:05:87: 05:21:c8:f9:b7:14:90:15:76:5b:a2:bb:3f:d8:17: 60:5c:46:4f:fc:ab:7e:62:e9:29:07:21:f4:bf:24: 4d:1d:0e:bb:43:da:3f:aa:6b:d0:1b:49:7c:47:cc: db:d6:b7:9a:80:2a:1a:bd:70:e4:d6:e5:6a:86:21: 5a:2a:1f:37:0f:7e:3d:df:0e:c1:51:ba:d7:63:ab: f6:f1:01:d6:6e:71:4e:b3:6c:e9:2c:23:e6:9c:69: 9a:2e:3d:13:aa:5a:8a:c4:14:1a:cd:66:20:b4:fc: 69:1d:93:ee:ca:dc:82:4a:89:48:49:99:db:1a:77: e0:df:09:4e:1f:5b:ac:aa:9d:00:f1:bb:ce:6c:50: 4d:ef:e9:45:e9:5e:6f:90:dc:29:43:63:09:89:e8: 1a:65:35:25:a5:79:73:8f:85:d5:79:6f:3d:7f:85: 71:af:51:a0:93:99:f4:e8:99:a7:c2:30:97:c0:bc: 11:1d:a6:0d:46:1e:6f:9c:04:79:a0:2b:05:e5:0d: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:F0:A8:49:61:FE:23:F6:7C:D7:1C:3A:DC:06:3A:A2:EF:D1:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:00:44:43:37:c3:85:4d:84:cb:c2:27:d3:f2:5c:5a:63:bb: ae:20:c2:b8:4a:9c:1c:ed:bc:5b:54:8c:7f:93:d3:5a:56:2d: cc:b1:df:0c:d6:0a:e3:51:55:3d:8e:2d:a3:6c:13:cc:6a:5e: e6:2d:78:6c:41:be:3b:18:fa:0c:8b:ac:72:e9:32:1c:64:48: b6:82:44:05:09:52:b3:0e:c8:3a:72:19:37:ae:9a:1a:67:51: 96:7b:b4:16:3b:f4:cf:4e:68:61:94:d5:2f:e5:06:3b:dd:d7: 6b:a5:4e:4c:0a:32:e1:0a:e2:60:5c:cd:c4:15:94:18:f4:6a: f4:0a:26:24:d8:6f:5e:47:a3:5b:80:6c:1b:76:e9:d0:03:fe: 0a:7d:dd:cb:43:94:e3:42:6c:00:73:25:5d:4e:d4:9d:71:8b: 78:c6:71:a9:b6:69:ef:e2:50:96:93:ac:38:3a:c9:4e:79:37: c5:37:8c:05:43:31:a4:01:52:1c:56:77:63:3a:0b:4d:5a:c9: 4c:77:01:ad:97:3f:7e:b6:a9:b8:65:42:7d:48:87:76:11:5b: e3:06:02:85:4e:b4:42:4c:c3:ed:f7:44:4e:82:a3:21:cc:f1: 81:55:4e:6c:c6:dc:05:be:c0:8c:3d:be:2c:67:45:d0:22:f1: 02:56:c8:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF8pLSdjda8Lf1/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIzMFoXDTI0MTIxMTE4MjIzMFowLzEtMCsGA1UEAxMk ZTBmZTAyZWYtNGRjNC00YmQ1LTkzOTgtMTRkMTNiOWIyNTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgsX4ABM8k7DxLNonULmApmsiSGRRRRNdoIQ zGFWScXkWnynzdIObYZsesJPszSQmqx33JZxtYaEBYcFIcj5txSQFXZbors/2Bdg XEZP/Kt+YukpByH0vyRNHQ67Q9o/qmvQG0l8R8zb1reagCoavXDk1uVqhiFaKh83 D3493w7BUbrXY6v28QHWbnFOs2zpLCPmnGmaLj0TqlqKxBQazWYgtPxpHZPuytyC SolISZnbGnfg3wlOH1usqp0A8bvObFBN7+lF6V5vkNwpQ2MJiegaZTUlpXlzj4XV eW89f4Vxr1Ggk5n06JmnwjCXwLwRHaYNRh5vnAR5oCsF5Q0LcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcL8KhJYf4j9nzXHDrcBjqi79EBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRiNzY4ZmEtNDMyNS0z MjRiLTljMGUtNGRmMWJiYmIyNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIAREM3w4VNhMvCJ9PyXFpju64gwrhKnBztvFtUjH+T01pWLcyx3wzW CuNRVT2OLaNsE8xqXuYteGxBvjsY+gyLrHLpMhxkSLaCRAUJUrMOyDpyGTeumhpn UZZ7tBY79M9OaGGU1S/lBjvd12ulTkwKMuEK4mBczcQVlBj0avQKJiTYb15Ho1uA bBt26dAD/gp93ctDlONCbABzJV1O1J1xi3jGcam2ae/iUJaTrDg6yU55N8U3jAVD MaQBUhxWd2M6C01ayUx3Aa2XP362qbhlQn1Ih3YRW+MGAoVOtEJMw+33RE6CoyHM 8YFVTmzG3AW+wIw9vixnRdAi8QJWyLY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:05 2024 by rpki-client on console-fra.rpki-client.org