$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74da3f14-18c3-33c8-9435-820da5ad7fbd.roa File: 74da3f14-18c3-33c8-9435-820da5ad7fbd.roa (raw, json) Hash identifier: 145qEAShDBOCapiCPWDL6EdlffToRvTiWA32xC8RVOs= Subject key identifier: 9E:23:96:87:94:EC:B7:37:D0:EC:E9:CE:9C:C2:DF:6E:B9:69:29:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584722A11359CA65FB9FF2C17400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74da3f14-18c3-33c8-9435-820da5ad7fbd.roa Signing time: Sat 07 Sep 2024 13:00:41 +0000 ROA not before: Sat 07 Sep 2024 13:00:41 +0000 ROA not after: Fri 06 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:22:a1:13:59:ca:65:fb:9f:f2:c1:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 7 13:00:41 2024 GMT Not After : Dec 6 14:00:41 2024 GMT Subject: CN=7b3b0f1f-b90b-4fa8-b099-6f157af9a146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b6:ef:a3:a3:c6:56:4d:45:52:52:91:29:4e: 15:30:b0:dc:9d:10:17:ab:44:b8:8e:44:25:f0:fc: 96:65:a1:ad:ce:c0:72:d8:f8:02:ba:c6:f8:f1:f8: d6:cd:81:57:d0:10:0b:da:c3:1d:13:5e:4b:13:24: 80:3e:b4:5a:32:15:5c:62:12:ae:6f:ed:89:d2:85: b3:57:a8:02:d7:d5:28:e8:0a:76:88:73:9a:bd:8a: 02:b1:e0:3f:c2:8c:b3:d1:30:21:68:46:5d:2d:52: b0:d9:67:74:31:d7:fc:f4:f2:25:95:3a:b9:b6:27: de:77:79:00:91:54:b5:68:a0:32:e5:3b:82:c8:c8: cd:d2:98:8c:e0:09:2f:53:84:03:07:85:2d:ed:77: 3a:63:b9:54:b6:20:92:44:13:7d:f5:06:ed:60:59: 6e:e3:86:bf:cc:4b:5e:4c:04:b1:4c:d4:61:6f:ac: 8b:80:f6:a9:81:c9:bc:af:34:0e:cb:e4:55:a3:77: dd:4b:dd:c3:c7:49:03:b0:85:53:84:aa:b4:23:ec: 37:ca:76:72:fe:84:67:ff:59:f4:78:4b:e0:81:ca: 80:aa:21:e0:be:4d:0d:55:6b:6c:a6:10:1b:fc:7e: a8:21:61:a4:f5:ee:8a:43:a5:bc:6b:ad:9d:24:33: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:96:87:94:EC:B7:37:D0:EC:E9:CE:9C:C2:DF:6E:B9:69:29:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74da3f14-18c3-33c8-9435-820da5ad7fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bb:b3:0b:cd:c6:a5:25:94:5a:5c:95:b8:ac:65:96:20:bc: b6:19:35:2c:c9:10:07:aa:13:21:8a:38:25:88:be:26:c5:72: e7:c4:3f:99:a8:47:0c:9c:88:6d:5a:4a:bf:33:71:57:f5:24: 6d:70:4b:aa:42:6c:68:5e:50:42:c0:aa:2d:8c:28:1b:0f:b3: 72:c0:a4:d3:09:04:6b:28:24:34:52:78:eb:41:82:68:b8:c4: f2:d1:dc:8b:3a:b9:66:d1:f0:11:b9:37:51:6e:6d:4c:ff:c7: f6:3e:61:a2:4e:6f:aa:1b:24:ba:1c:96:55:44:ca:a5:ea:b6: c9:30:b0:bf:bb:03:e5:bd:93:21:31:f5:56:0a:64:f9:5f:48: f3:34:6b:16:ad:9b:4c:a2:a0:ef:05:16:8c:4e:de:a0:f7:b3: c5:3a:a6:96:3b:cd:a4:b4:95:57:96:b7:dd:fa:37:15:72:93: 7b:41:3f:1b:fd:ad:0c:a5:ef:8a:6f:a3:db:31:c9:c3:ce:3a: d9:96:dc:1f:c0:ff:53:e4:a2:e8:18:8a:2d:ce:10:3e:d4:03: ba:a0:5b:5d:08:71:98:c6:d8:64:16:38:60:5b:50:38:91:d0: 11:15:23:25:84:be:4d:d3:d8:86:74:48:ae:94:7d:5a:66:b1: ad:89:a3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioRNZymX7n/LBdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk N2IzYjBmMWYtYjkwYi00ZmE4LWIwOTktNmYxNTdhZjlhMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7bvo6PGVk1FUlKRKU4VMLDcnRAXq0S4jkQl 8PyWZaGtzsBy2PgCusb48fjWzYFX0BAL2sMdE15LEySAPrRaMhVcYhKub+2J0oWz V6gC19Uo6Ap2iHOavYoCseA/woyz0TAhaEZdLVKw2Wd0Mdf89PIllTq5tifed3kA kVS1aKAy5TuCyMjN0piM4AkvU4QDB4Ut7Xc6Y7lUtiCSRBN99QbtYFlu44a/zEte TASxTNRhb6yLgPapgcm8rzQOy+RVo3fdS93Dx0kDsIVThKq0I+w3ynZy/oRn/1n0 eEvggcqAqiHgvk0NVWtsphAb/H6oIWGk9e6KQ6W8a62dJDNREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4jloeU7Lc30OzpzpzC3265aSkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzRkYTNmMTQtMThjMy0z M2M4LTk0MzUtODIwZGE1YWQ3ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG7swvNxqUllFpclbisZZYgvLYZNSzJEAeqEyGKOCWIvibFcufEP5mo RwyciG1aSr8zcVf1JG1wS6pCbGheUELAqi2MKBsPs3LApNMJBGsoJDRSeOtBgmi4 xPLR3Is6uWbR8BG5N1FubUz/x/Y+YaJOb6obJLocllVEyqXqtskwsL+7A+W9kyEx 9VYKZPlfSPM0axatm0yioO8FFoxO3qD3s8U6ppY7zaS0lVeWt936NxVyk3tBPxv9 rQyl74pvo9sxycPOOtmW3B/A/1PkougYii3OED7UA7qgW10IcZjG2GQWOGBbUDiR 0BEVIyWEvk3T2IZ0SK6UfVpmsa2Jo20= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:49 2024 by rpki-client on console-ams.rpki-client.org