$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa File: 7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa (raw, json) Hash identifier: bFBQ+5VpEB0MHDm83nF70mcgYH1XtXLb6sFrHeS4lfA= Subject key identifier: 33:F4:21:F9:DB:35:48:12:4C:32:CA:7F:64:76:A2:1D:ED:19:63:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847B961654AE488C15ADF763D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 7029 IP address blocks: 139.55.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:65:4a:e4:88:c1:5a:df:76:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=4d32af3b-9f00-4624-ae3a-acdfd897b701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b2:bd:78:12:6b:77:32:db:d8:f9:12:78:24: b2:4e:76:57:c3:f9:c2:1b:c6:da:c7:c4:4b:8c:fb: 0b:e4:2a:d7:26:a6:99:8a:7c:3b:99:71:59:a7:88: 7c:4a:83:67:4b:6b:35:60:95:55:53:0c:c1:96:ac: 7d:07:3a:4b:e7:aa:fe:f8:d6:ee:b1:82:87:9a:fd: 83:08:ec:84:38:cd:9b:e9:2d:18:e4:d7:4e:fb:cf: 94:c7:c6:f7:d4:61:f6:dc:9b:30:ef:12:a8:ca:3e: 68:55:f7:30:65:84:b6:58:c4:ad:9d:7b:d4:81:fc: 20:42:12:c0:1e:48:b1:9b:5a:7c:b1:ba:3f:9d:82: 84:8a:c2:48:d6:29:60:bf:a8:b6:d9:f1:a9:ec:b7: 07:34:00:12:b0:ed:6f:10:12:7e:93:53:a8:d3:08: af:90:46:cd:b6:24:6f:27:31:ab:4f:5c:f0:d4:6b: 7a:87:e6:ae:ff:c8:0e:6b:a8:db:a2:a5:00:ef:e6: 42:26:d1:22:f1:da:09:3b:b8:93:c5:c9:5f:bb:e2: 19:4b:d0:ca:48:31:68:97:d6:0f:67:ce:f3:81:ff: f5:bf:67:cf:a5:36:73:9b:f7:2c:6d:1b:77:fb:b6: d1:c2:f3:2c:3e:c8:c1:e9:c3:cd:8c:43:44:ae:5a: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F4:21:F9:DB:35:48:12:4C:32:CA:7F:64:76:A2:1D:ED:19:63:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7d:0c:60:b4:b8:3f:4d:4d:37:83:d2:9e:f0:51:63:52:27: 9e:31:c8:e4:54:e8:4a:5f:30:35:f9:b4:c9:d6:e9:a6:18:3c: 65:2e:ee:b3:d4:6b:48:0b:0f:b4:2a:85:36:60:bd:47:7a:6e: 11:54:40:82:de:a7:85:8a:0a:4b:30:47:ed:ab:8c:1a:04:d0: f3:52:63:74:3b:42:37:58:ed:3d:a1:df:25:57:a7:fa:b8:19: 5e:fc:d2:3f:f5:63:64:bd:8a:c8:b1:91:de:77:0c:0f:ed:07: 29:d8:14:18:d7:57:9e:23:94:87:ad:32:0f:a2:13:16:8d:4b: c6:ff:76:53:81:b0:06:e2:7a:e4:d9:1f:04:54:bd:77:b8:c0: 41:0b:a9:db:2c:ac:0b:07:7d:b8:29:e3:d6:17:9d:b3:4d:87: f2:50:3b:50:0a:05:50:07:c0:4d:2b:e7:a8:4e:7c:83:30:62: f1:46:97:ac:94:6a:42:eb:c1:6e:f5:4e:66:5f:24:11:8c:4b: e6:ed:c8:e9:4d:e4:85:5e:02:9d:2b:d2:3d:c1:62:e1:19:19: a1:4e:44:94:a1:66:72:f1:7f:86:b9:d9:5f:37:a8:b8:b3:29: 5b:37:2b:14:da:ee:67:ce:a6:75:d0:da:c8:b7:83:2e:8b:ab: e9:5b:96:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YWVK5IjBWt92PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk NGQzMmFmM2ItOWYwMC00NjI0LWFlM2EtYWNkZmQ4OTdiNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbK9eBJrdzLb2PkSeCSyTnZXw/nCG8bax8RL jPsL5CrXJqaZinw7mXFZp4h8SoNnS2s1YJVVUwzBlqx9BzpL56r++NbusYKHmv2D COyEOM2b6S0Y5NdO+8+Ux8b31GH23Jsw7xKoyj5oVfcwZYS2WMStnXvUgfwgQhLA Hkixm1p8sbo/nYKEisJI1ilgv6i22fGp7LcHNAASsO1vEBJ+k1Oo0wivkEbNtiRv JzGrT1zw1Gt6h+au/8gOa6jboqUA7+ZCJtEi8doJO7iTxclfu+IZS9DKSDFol9YP Z87zgf/1v2fPpTZzm/csbRt3+7bRwvMsPsjB6cPNjENErlpFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP0IfnbNUgSTDLKf2R2oh3tGWP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2U0OTExZmUtOGFjMC0z ZDBlLWIxYzEtNDhlNmFkYmNlODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEizcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh9DGC0uD9NTTeD0p7wUWNSJ54xyORU6EpfMDX5tMnW6aYYPGUu7rPU a0gLD7QqhTZgvUd6bhFUQILep4WKCkswR+2rjBoE0PNSY3Q7QjdY7T2h3yVXp/q4 GV780j/1Y2S9isixkd53DA/tBynYFBjXV54jlIetMg+iExaNS8b/dlOBsAbieuTZ HwRUvXe4wEELqdssrAsHfbgp49YXnbNNh/JQO1AKBVAHwE0r56hOfIMwYvFGl6yU akLrwW71TmZfJBGMS+btyOlN5IVeAp0r0j3BYuEZGaFORJShZnLxf4a52V83qLiz KVs3KxTa7mfOpnXQ2si3gy6Lq+lbljM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:09 2024 by rpki-client on console-fra.rpki-client.org