$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b10f31b-8c36-3bbd-937b-55a65dd3b635.roa File: 7b10f31b-8c36-3bbd-937b-55a65dd3b635.roa (raw, json) Hash identifier: R2AnTvex7nPA/6tG89MgvDcLkXrbP+eC6DdKrmkbNBg= Subject key identifier: AD:9B:D2:5E:46:B2:25:36:F8:FC:AB:4E:2A:4B:6F:AB:52:37:5B:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154FC3A8B3D8D1E99BDB260 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b10f31b-8c36-3bbd-937b-55a65dd3b635.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 71.29.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:fc:3a:8b:3d:8d:1e:99:bd:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=41e4d089-68da-4d01-a0da-6fb5dc912415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:31:7a:8c:61:d2:6d:27:bf:3f:f4:8a:e1: 5f:d0:c9:55:c1:be:1a:c3:e6:48:aa:f0:6c:76:3e: 89:cb:b0:fb:b9:46:f3:fe:ef:d3:30:3e:d4:12:8d: 8d:8a:79:91:18:b5:c0:91:54:1b:19:f2:7f:9d:62: da:9c:06:10:73:c3:ef:99:7c:83:80:bc:47:ef:f4: 7a:26:44:1e:d8:44:3b:f7:6f:93:16:ab:1a:e7:d3: 44:de:1a:ba:d2:67:7b:cc:c8:33:1e:40:28:25:50: e2:90:2b:e1:13:f5:72:e0:1a:66:54:1e:e4:aa:dc: ba:2b:a9:d8:59:45:f8:c5:4d:b2:46:b9:f6:07:db: ec:f4:d7:91:bf:97:c1:0f:42:a0:b8:9b:e5:5e:85: 85:5a:83:b3:6b:ca:49:ce:1a:2c:88:c1:50:15:c3: 22:2f:7c:4c:97:f7:81:21:dd:61:be:eb:28:29:41: 8f:57:f0:e5:2e:37:1c:2e:05:a4:fa:d1:a6:cb:09: 43:19:98:95:9b:98:6f:bd:54:9e:72:22:77:11:ea: 93:1c:d0:89:95:bc:83:20:9e:d8:28:31:78:1d:f9: 7d:40:11:1c:b9:e7:96:6e:69:f5:19:21:1f:e8:8d: b2:3e:f1:23:e0:55:3e:41:81:16:4f:5e:03:93:55: 64:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9B:D2:5E:46:B2:25:36:F8:FC:AB:4E:2A:4B:6F:AB:52:37:5B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b10f31b-8c36-3bbd-937b-55a65dd3b635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5e:7f:94:0d:8c:bf:19:b3:f0:3f:f1:53:fd:fc:3b:99:73: 09:18:20:c4:a0:a6:19:bd:6c:8e:87:da:a1:bd:6f:19:80:bb: 62:d2:91:88:31:11:2a:ca:3a:27:23:a4:72:2d:1d:06:c6:c0: 15:68:53:dd:35:fe:7d:95:5f:30:6f:ad:b2:ef:d5:d4:84:f5: 0d:25:1d:50:2b:d1:07:fd:13:dc:11:2d:ec:ea:5e:0e:9f:3b: 79:ca:f8:5f:f1:d0:57:b8:d8:13:7f:8c:10:cf:2e:f1:97:04: c6:b2:62:05:c5:e2:69:e7:52:2d:57:a2:0f:9c:af:d0:77:81: 18:a4:06:9b:e8:0b:97:1e:35:f0:3c:e2:0a:4c:d1:8b:56:dd: bd:c7:52:cd:fe:76:d7:2a:e9:e9:db:f9:a5:ce:92:0e:b7:29: cb:fa:7d:54:c4:59:53:55:06:a9:b4:6e:61:1b:1f:5b:ed:9e: b3:f1:35:b3:fd:0f:78:a8:56:ae:10:86:87:5f:70:8e:4e:e7: 7b:a6:69:0e:fa:9d:38:f4:df:8e:94:27:a3:73:17:aa:30:d6: 46:e9:20:d1:80:07:3b:21:cf:06:f3:21:f1:80:e0:f5:8c:e8: a4:c7:21:5d:c5:f6:87:7e:cc:f0:54:cd:c8:fd:1c:cc:7e:30: b7:01:3b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPw6iz2NHpm9smAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NDFlNGQwODktNjhkYS00ZDAxLWEwZGEtNmZiNWRjOTEyNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd8xeoxh0m0nvz/0iuFf0MlVwb4aw+ZIqvBs dj6Jy7D7uUbz/u/TMD7UEo2NinmRGLXAkVQbGfJ/nWLanAYQc8PvmXyDgLxH7/R6 JkQe2EQ792+TFqsa59NE3hq60md7zMgzHkAoJVDikCvhE/Vy4BpmVB7kqty6K6nY WUX4xU2yRrn2B9vs9NeRv5fBD0KguJvlXoWFWoOza8pJzhosiMFQFcMiL3xMl/eB Id1hvusoKUGPV/DlLjccLgWk+tGmywlDGZiVm5hvvVSeciJ3EeqTHNCJlbyDIJ7Y KDF4Hfl9QBEcueeWbmn1GSEf6I2yPvEj4FU+QYEWT14Dk1VkbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2b0l5GsiU2+PyrTipLb6tSN1sDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2IxMGYzMWItOGMzNi0z YmJkLTkzN2ItNTVhNjVkZDNiNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRef5QNjL8Zs/A/8VP9/DuZcwkYIMSgphm9bI6H2qG9bxmAu2LSkYgx ESrKOicjpHItHQbGwBVoU901/n2VXzBvrbLv1dSE9Q0lHVAr0Qf9E9wRLezqXg6f O3nK+F/x0Fe42BN/jBDPLvGXBMayYgXF4mnnUi1Xog+cr9B3gRikBpvoC5ceNfA8 4gpM0YtW3b3HUs3+dtcq6enb+aXOkg63Kcv6fVTEWVNVBqm0bmEbH1vtnrPxNbP9 D3ioVq4QhodfcI5O53umaQ76nTj0346UJ6NzF6ow1kbpINGABzshzwbzIfGA4PWM 6KTHIV3F9od+zPBUzcj9HMx+MLcBOwA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:49 2024 by rpki-client on console-ams.rpki-client.org