$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa File: 67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa (raw, json) Hash identifier: hVEz7U+7+0sgd+wWifxoHivzmKFGyEHYErTm6l6YwcQ= Subject key identifier: 59:E4:E6:70:D0:67:83:84:03:B4:CF:EA:6E:6C:B9:1F:2F:21:DF:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847213B037E2FFF78CFD55B7100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 7029 IP address blocks: 66.16.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:03:7e:2f:ff:78:cf:d5:5b:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=4b0a0d54-c3d9-4ff7-90da-5160498177e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4b:d0:f6:6c:11:ed:dd:cf:78:0b:a2:0b:b7: d0:6f:d6:19:99:1e:5a:b3:36:ff:f0:f9:b0:a5:95: cd:75:c6:b9:45:70:53:87:50:96:13:43:ff:da:87: 6d:d7:be:7c:84:1c:69:02:4e:6d:b3:b2:76:44:86: 70:59:19:8c:a4:45:87:b9:47:1f:2b:88:1c:38:f0: e9:3a:38:cc:c4:24:b2:45:9a:56:bd:b1:ba:5b:72: 8c:9a:72:24:7e:46:43:95:09:15:e9:d6:6e:4e:b8: 4a:21:08:80:96:34:fc:90:3f:d0:86:98:29:e9:7a: 6d:a2:ad:44:ac:c9:95:fc:d5:07:13:77:0a:d1:b7: 88:a5:12:55:7d:e2:13:5c:09:89:d6:97:e4:5b:5c: 64:0a:3e:ab:c7:98:dc:53:b9:c9:30:85:e0:6a:da: 69:c5:5d:4d:49:e3:2d:cc:79:a4:25:f0:d5:ba:6c: 39:93:19:5a:5e:ea:bf:e0:a1:07:a6:5f:fb:ec:0b: 40:89:14:64:99:ca:28:52:60:9b:ef:64:ed:f5:7a: 59:fe:d1:51:2d:93:84:c0:d8:a9:5a:00:b1:04:5b: 19:9a:2c:85:aa:3c:91:91:4e:5f:50:d0:82:55:16: ea:c1:a2:6d:12:e0:4b:cb:96:bc:f0:b6:2f:36:2d: 3a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E4:E6:70:D0:67:83:84:03:B4:CF:EA:6E:6C:B9:1F:2F:21:DF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67fb6eac-c9e8-347c-9844-7abc9738ffc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.16.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:41:f4:05:dc:b1:24:5c:38:e6:12:d6:3a:43:9a:92:e3:64: 51:5d:0c:a1:55:4c:f7:bd:62:a1:28:91:fb:06:c3:49:e7:e7: 2b:bf:df:b4:03:43:94:2c:5a:1d:31:76:43:fc:1c:89:c9:17: 05:f4:fc:06:1b:8f:9a:29:12:0c:04:fc:9c:0e:cd:08:07:82: 97:c4:c6:e1:13:74:2c:6f:f1:ad:62:ed:d9:de:37:c1:a0:af: d6:7a:ea:e9:d5:06:f5:2e:eb:58:77:0c:6a:b1:12:89:7a:9f: b1:8e:6d:45:0e:e4:4a:b3:4f:a6:3d:46:65:77:c0:43:40:96: d7:2e:2c:cc:f5:18:c6:d5:1e:55:01:4c:a0:9b:39:84:13:e4: bc:8f:0d:72:f2:9b:dd:03:2b:f6:02:31:69:0d:cc:ef:4b:2f: db:68:c0:e4:51:54:98:03:38:f5:6b:89:fe:97:8c:31:7d:d8: 83:50:18:db:f3:0a:95:3a:01:31:32:a5:bf:a6:d4:d0:a7:b6: 53:b0:80:ca:2f:4a:92:74:98:ce:ea:80:47:86:85:6a:c2:48: fe:c6:02:9b:ff:67:2c:d4:7f:b9:90:bc:3d:b5:05:11:78:3a: e5:93:a3:30:a5:13:4e:03:0f:7d:e8:b8:ad:b5:7b:3d:22:52: ca:59:05:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOwN+L/94z9VbcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk NGIwYTBkNTQtYzNkOS00ZmY3LTkwZGEtNTE2MDQ5ODE3N2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUvQ9mwR7d3PeAuiC7fQb9YZmR5aszb/8Pmw pZXNdca5RXBTh1CWE0P/2odt1758hBxpAk5ts7J2RIZwWRmMpEWHuUcfK4gcOPDp OjjMxCSyRZpWvbG6W3KMmnIkfkZDlQkV6dZuTrhKIQiAljT8kD/Qhpgp6Xptoq1E rMmV/NUHE3cK0beIpRJVfeITXAmJ1pfkW1xkCj6rx5jcU7nJMIXgatppxV1NSeMt zHmkJfDVumw5kxlaXuq/4KEHpl/77AtAiRRkmcooUmCb72Tt9XpZ/tFRLZOEwNip WgCxBFsZmiyFqjyRkU5fUNCCVRbqwaJtEuBLy5a88LYvNi06lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnk5nDQZ4OEA7TP6m5suR8vId+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjdmYjZlYWMtYzllOC0z NDdjLTk4NDQtN2FiYzk3MzhmZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhDjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBB9AXcsSRcOOYS1jpDmpLjZFFdDKFVTPe9YqEokfsGw0nn5yu/37QD Q5QsWh0xdkP8HInJFwX0/AYbj5opEgwE/JwOzQgHgpfExuETdCxv8a1i7dneN8Gg r9Z66unVBvUu61h3DGqxEol6n7GObUUO5EqzT6Y9RmV3wENAltcuLMz1GMbVHlUB TKCbOYQT5LyPDXLym90DK/YCMWkNzO9LL9towORRVJgDOPVrif6XjDF92INQGNvz CpU6ATEypb+m1NCntlOwgMovSpJ0mM7qgEeGhWrCSP7GApv/ZyzUf7mQvD21BRF4 OuWTozClE04DD33ouK21ez0iUspZBXc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:47 2024 by rpki-client on console-ams.rpki-client.org