$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa File: 6763f7e4-2af7-3bb9-9314-87a2549315db.roa (raw, json) Hash identifier: jhLmmQNsbcaPuv7SGPnxvP4dG2a1gby3VzTj1oazmps= Subject key identifier: D4:83:78:0F:C3:B6:B9:09:7B:36:DA:7C:D4:23:D8:CD:E2:99:F0:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847209A57D3BC7D77DD246B8140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa Signing time: Fri 06 Sep 2024 19:36:48 +0000 ROA not before: Fri 06 Sep 2024 19:36:48 +0000 ROA not after: Thu 05 Dec 2024 20:36:48 +0000 asID: 7029 IP address blocks: 71.31.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:20:9a:57:d3:bc:7d:77:dd:24:6b:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 19:36:48 2024 GMT Not After : Dec 5 20:36:48 2024 GMT Subject: CN=895f6a30-fdbb-438c-a96e-9a42274d4a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:c7:6a:d4:5b:e7:b0:5a:a1:b1:2c:28:99: 16:6d:7f:ec:b7:c3:3c:cd:50:12:6b:66:6e:ad:84: ab:18:ba:bf:11:46:23:69:78:2e:5d:56:05:7a:c0: 7f:9e:04:f7:57:19:9f:39:33:34:69:df:e6:13:2d: 90:75:60:5e:f1:6a:3d:14:55:5c:a1:4f:ea:60:54: 12:05:f4:85:76:80:1f:2d:14:ca:0c:31:9c:56:71: e9:9b:07:2a:bc:32:45:6d:ed:b0:4b:5d:90:f4:86: 3e:58:ad:35:f6:5e:13:fa:4a:b9:21:1b:42:0c:3c: eb:67:87:88:8c:fc:ea:85:22:4d:47:5d:45:5d:3b: 4d:40:ed:4b:c9:71:63:d8:47:5c:af:9a:db:24:2d: b0:88:c8:1a:d7:86:04:c3:68:ba:d5:bf:3d:4c:60: 95:0b:47:01:ce:54:e5:d2:42:08:ff:5e:cc:57:8b: 5a:95:54:02:b9:63:70:00:71:77:db:98:a1:a6:9d: 84:f9:f1:b9:d0:81:c3:11:94:fc:c7:43:39:ba:ae: ed:36:cb:d3:e4:98:34:8c:94:06:d7:7a:f2:e2:72: 61:76:4a:a4:f1:81:27:6c:c4:c4:ad:77:2b:87:05: e2:99:13:66:4f:fe:60:44:54:05:da:fd:04:58:68: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:83:78:0F:C3:B6:B9:09:7B:36:DA:7C:D4:23:D8:CD:E2:99:F0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1d:5c:5d:60:b6:06:93:58:b1:bd:6f:25:ad:37:d2:43:d9: 66:c7:1f:ed:e4:fb:82:f1:1e:f6:fa:29:ed:a4:25:99:0c:26: a1:9c:2d:f3:54:eb:20:bb:aa:22:94:d2:45:ec:5f:00:84:d8: 30:4a:57:50:bc:c9:04:ae:86:bc:ab:4b:50:0d:e8:eb:51:c0: 95:89:de:3d:14:07:3e:73:77:cf:51:68:62:4e:de:b2:57:87: 2b:76:b3:f8:62:61:16:36:71:c3:4d:93:5e:4d:f8:d8:cf:e4: 7b:ce:30:cb:50:48:c3:b8:8a:07:2a:b2:f7:5f:27:a1:30:68: cf:a8:cc:b7:37:ce:70:48:3c:43:82:83:ba:c5:4f:c2:73:40: 38:be:df:8e:13:bc:ad:f4:d5:15:50:69:9c:ff:f5:e3:17:28: 4c:8b:46:8d:a3:eb:fc:5b:60:a1:13:7d:71:78:49:60:f3:8c: 94:48:a6:91:48:31:56:b0:1f:ff:be:60:fd:81:01:fa:86:ea: 70:46:5a:e8:b0:0c:f6:6e:e6:92:3e:98:50:be:82:cd:d5:e2: 79:97:df:91:d0:85:13:60:09:3d:c1:18:8d:79:9a:8f:6e:0b: c5:8c:9c:d6:b2:40:66:ed:97:78:fa:60:36:85:ae:da:5f:f3: 55:43:69:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcgmlfTvH133SRrgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNjE5MzY0OFoXDTI0MTIwNTIwMzY0OFowLzEtMCsGA1UEAxMk ODk1ZjZhMzAtZmRiYi00MzhjLWE5NmUtOWE0MjI3NGQ0YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGPHatRb57BaobEsKJkWbX/st8M8zVASa2Zu rYSrGLq/EUYjaXguXVYFesB/ngT3VxmfOTM0ad/mEy2QdWBe8Wo9FFVcoU/qYFQS BfSFdoAfLRTKDDGcVnHpmwcqvDJFbe2wS12Q9IY+WK019l4T+kq5IRtCDDzrZ4eI jPzqhSJNR11FXTtNQO1LyXFj2Edcr5rbJC2wiMga14YEw2i61b89TGCVC0cBzlTl 0kII/17MV4talVQCuWNwAHF325ihpp2E+fG50IHDEZT8x0M5uq7tNsvT5Jg0jJQG 13ry4nJhdkqk8YEnbMTErXcrhwXimRNmT/5gRFQF2v0EWGhxUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSDeA/DtrkJezbafNQj2M3imfAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc2M2Y3ZTQtMmFmNy0z YmI5LTkzMTQtODdhMjU0OTMxNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwdXF1gtgaTWLG9byWtN9JD2WbHH+3k+4LxHvb6Ke2kJZkMJqGcLfNU 6yC7qiKU0kXsXwCE2DBKV1C8yQSuhryrS1AN6OtRwJWJ3j0UBz5zd89RaGJO3rJX hyt2s/hiYRY2ccNNk15N+NjP5HvOMMtQSMO4igcqsvdfJ6EwaM+ozLc3znBIPEOC g7rFT8JzQDi+344TvK301RVQaZz/9eMXKEyLRo2j6/xbYKETfXF4SWDzjJRIppFI MVawH/++YP2BAfqG6nBGWuiwDPZu5pI+mFC+gs3V4nmX35HQhRNgCT3BGI15mo9u C8WMnNayQGbtl3j6YDaFrtpf81VDado= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:05 2024 by rpki-client on console-fra.rpki-client.org