$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f31b3f-106c-3b77-a22b-d1bc2067a260.roa File: 77f31b3f-106c-3b77-a22b-d1bc2067a260.roa (raw, json) Hash identifier: P2TeTNKLPcKKBKUU1VSf6AMRhCbaPI8qjWqi5QZB87Q= Subject key identifier: 3E:AC:6F:50:D2:E9:FF:04:4D:40:A0:CE:45:70:8F:F7:CE:C3:88:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553C2B5382903473289580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f31b3f-106c-3b77-a22b-d1bc2067a260.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.96.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3c:2b:53:82:90:34:73:28:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=c2c552c6-ffb6-41d5-b3fd-04df8835ec55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:58:53:35:64:d8:1b:f9:b2:93:9d:38:f4:9e: d5:ca:aa:5f:75:5c:ec:67:5f:ec:bf:21:1c:05:98: d2:77:15:c8:dc:c4:5c:35:7f:12:33:28:cc:80:34: b3:12:3e:25:11:aa:d3:e3:49:7c:2b:e7:1a:67:3b: f0:d2:df:21:69:de:32:14:3f:f9:80:6c:08:f3:b9: 0a:94:67:51:fd:aa:96:c4:28:b2:90:2a:03:2d:a0: 84:a6:55:b4:5a:14:d0:c1:13:72:d5:1e:28:ec:a0: 9f:4f:c1:af:0f:c8:dd:b9:78:b9:23:b0:d8:25:e3: 6a:28:91:44:fc:49:60:7e:92:ff:d9:7a:d9:63:c2: 9e:2f:d9:78:47:78:33:27:2e:e3:4d:3b:c7:0e:93: 73:0b:dd:f8:3a:ad:de:ce:58:f8:d2:2f:0a:29:e6: 06:6c:04:00:56:41:47:18:2b:b6:b9:41:ee:16:e2: 05:ef:e0:d2:3e:0c:6e:55:e5:1f:85:f5:c8:1f:ea: b8:69:d3:03:65:c4:7a:63:88:80:a6:78:40:7b:2a: 91:ec:0e:3b:bb:c0:9f:61:61:25:c6:be:49:57:20: e3:ae:68:32:29:9f:0a:15:40:aa:cd:93:a9:67:88: e5:f6:84:28:2d:af:c7:0e:06:15:3c:29:bb:cd:7c: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AC:6F:50:D2:E9:FF:04:4D:40:A0:CE:45:70:8F:F7:CE:C3:88:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f31b3f-106c-3b77-a22b-d1bc2067a260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6d:91:4f:f8:81:b8:e3:9a:79:2e:16:48:a4:47:94:6f:1f: 95:03:e8:a7:95:f0:bf:dc:31:9c:2d:1d:2d:e7:de:95:d8:d2: e4:c1:60:39:ce:80:22:0d:46:8b:bc:8f:b2:cd:b5:e1:e8:a1: de:2d:bc:ab:ee:de:69:ba:7c:50:b6:6a:de:67:6d:cc:72:32: aa:96:69:41:fc:c1:a5:33:cc:4c:7f:49:9c:48:8b:47:89:e9: 2d:89:06:7e:be:2d:4e:73:2e:f3:f7:2c:68:fc:dc:7e:c4:80: d3:5f:8b:7e:39:8c:30:4c:ab:ff:4e:16:fe:d5:7f:50:be:ac: c3:95:96:af:27:02:83:03:e2:f4:89:40:17:e3:79:07:1e:20: 6c:22:0a:3e:f1:77:db:96:c6:f1:3f:4b:3f:f7:81:f7:9a:9e: 95:0c:f8:df:e9:ed:0c:1b:c5:07:d0:9e:16:de:23:44:c2:0a: 94:e2:89:fb:cc:20:71:f4:8f:8b:de:b4:7a:dd:cc:f3:40:b6: 40:35:cd:61:03:00:33:43:bc:ba:3d:ed:48:1e:38:f9:fb:76: d2:42:c6:5e:c0:3f:98:18:14:19:92:02:f4:81:7f:7b:be:3d: 7d:a1:a7:12:a5:47:6c:21:8c:4e:a5:b0:c7:65:1d:60:0b:08: c5:5d:88:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTwrU4KQNHMolYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YzJjNTUyYzYtZmZiNi00MWQ1LWIzZmQtMDRkZjg4MzVlYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFhTNWTYG/myk5049J7VyqpfdVzsZ1/svyEc BZjSdxXI3MRcNX8SMyjMgDSzEj4lEarT40l8K+caZzvw0t8had4yFD/5gGwI87kK lGdR/aqWxCiykCoDLaCEplW0WhTQwRNy1R4o7KCfT8GvD8jduXi5I7DYJeNqKJFE /ElgfpL/2XrZY8KeL9l4R3gzJy7jTTvHDpNzC934Oq3ezlj40i8KKeYGbAQAVkFH GCu2uUHuFuIF7+DSPgxuVeUfhfXIH+q4adMDZcR6Y4iApnhAeyqR7A47u8CfYWEl xr5JVyDjrmgyKZ8KFUCqzZOpZ4jl9oQoLa/HDgYVPCm7zXxe1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6sb1DS6f8ETUCgzkVwj/fOw4jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzdmMzFiM2YtMTA2Yy0z Yjc3LWEyMmItZDFiYzIwNjdhMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADttkU/4gbjjmnkuFkikR5RvH5UD6KeV8L/cMZwtHS3n3pXY0uTBYDnO gCINRou8j7LNteHood4tvKvu3mm6fFC2at5nbcxyMqqWaUH8waUzzEx/SZxIi0eJ 6S2JBn6+LU5zLvP3LGj83H7EgNNfi345jDBMq/9OFv7Vf1C+rMOVlq8nAoMD4vSJ QBfjeQceIGwiCj7xd9uWxvE/Sz/3gfeanpUM+N/p7QwbxQfQnhbeI0TCCpTiifvM IHH0j4vetHrdzPNAtkA1zWEDADNDvLo97UgeOPn7dtJCxl7AP5gYFBmSAvSBf3u+ PX2hpxKlR2whjE6lsMdlHWALCMVdiGE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:49 2024 by rpki-client on console-ams.rpki-client.org