$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7fb96345-4fec-3485-ad5b-2945109d0fba.roa File: 7fb96345-4fec-3485-ad5b-2945109d0fba.roa (raw, json) Hash identifier: 5YCwoJ05XyEkgQK1Twj6wbXH/LStEr7sBRd2lPi42UM= Subject key identifier: DD:CC:FF:BD:8B:38:69:FC:B4:08:CA:FF:42:3F:3F:23:A2:F6:10:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15544644DBB998D1AC0E280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7fb96345-4fec-3485-ad5b-2945109d0fba.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 30676 IP address blocks: 69.196.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:44:64:4d:bb:99:8d:1a:c0:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=4fe97b5a-e01f-4473-9840-feef163becee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:ae:42:49:2f:64:a8:91:ed:bc:d7:64:0b: fb:29:c6:1b:c5:d8:09:f9:58:15:5a:8e:3f:cf:76: 7c:1f:3f:e8:ce:da:38:56:46:bb:ab:7e:24:27:67: bb:ec:0b:50:5d:3a:60:03:cd:b9:88:5b:c8:3c:d8: a0:cd:f9:e8:ba:f6:d2:e6:9e:23:98:45:33:2d:7d: 5c:e0:68:e1:55:89:49:41:73:0d:2e:34:65:d8:cc: d6:a0:d6:d4:48:33:69:06:3e:a8:02:59:a0:fb:8c: c1:cd:fa:78:2e:74:93:20:a5:7c:b1:1c:dd:a7:f6: 08:56:34:92:b6:fa:3d:2e:ca:17:ff:6f:77:89:90: b7:9b:1a:db:6e:37:6b:b5:3e:09:ca:e8:ea:af:c4: ed:c0:4f:6d:76:fd:12:13:80:a1:21:a7:ae:01:57: 38:83:8e:ea:ab:fd:72:64:f0:04:32:ca:56:a8:13: 3f:5b:56:38:e4:9c:12:6c:38:49:f6:54:18:40:4e: e0:04:8f:c7:2d:f0:52:b9:30:5b:a9:07:c0:81:24: 76:47:dc:af:34:d8:04:84:5d:30:24:51:14:ba:9d: ab:df:02:e1:a3:6c:46:d0:e1:72:48:0b:58:e5:65: 9c:0b:b9:74:1f:81:2d:5c:68:86:d0:8f:5b:34:85: 8a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CC:FF:BD:8B:38:69:FC:B4:08:CA:FF:42:3F:3F:23:A2:F6:10:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7fb96345-4fec-3485-ad5b-2945109d0fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.196.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7f:13:13:9c:a1:08:60:9e:8b:61:dc:c2:a3:42:7b:fc:86: c5:36:5b:1d:4d:c5:35:48:86:c0:18:13:dc:1c:6f:8f:40:cf: 36:f5:47:53:6e:be:d6:62:49:c0:4d:87:d9:dc:cf:4b:44:a2: de:cc:ec:f1:28:88:c5:9b:5c:8d:b7:32:a5:14:07:f3:4f:50: 04:28:bf:e5:02:4e:82:f8:86:86:45:31:b0:9c:05:de:fa:f5: 30:68:70:97:18:84:98:f9:b2:ca:7a:69:90:cb:15:66:e3:88: a3:07:4b:90:66:dd:e0:95:df:cd:c1:f5:27:cb:54:49:4a:f5: 5c:f1:bc:a0:e5:24:63:1c:05:82:93:17:d1:aa:18:d2:7b:2e: de:6f:cb:7a:c7:4a:ee:c3:0e:b5:6a:ad:52:d9:a1:0a:ef:8f: 45:b4:4c:35:a1:57:21:93:0c:aa:eb:e0:a9:f8:1b:4b:53:20: 7b:ec:f0:d2:d8:29:62:5b:57:ed:af:54:91:af:29:bc:e7:6a: 92:1a:7b:3d:20:f0:05:2e:5c:43:f3:95:a5:dc:75:39:43:58: e9:2e:7b:0f:8e:c9:11:68:6d:a8:19:85:d7:b9:e8:e5:2a:2c: 85:2c:98:d1:91:dd:d5:75:d1:e4:8b:d8:86:f5:a4:8a:fa:82: 78:16:d5:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVURkTbuZjRrA4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NGZlOTdiNWEtZTAxZi00NDczLTk4NDAtZmVlZjE2M2JlY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNauQkkvZKiR7bzXZAv7KcYbxdgJ+VgVWo4/ z3Z8Hz/ozto4Vka7q34kJ2e77AtQXTpgA825iFvIPNigzfnouvbS5p4jmEUzLX1c 4GjhVYlJQXMNLjRl2MzWoNbUSDNpBj6oAlmg+4zBzfp4LnSTIKV8sRzdp/YIVjSS tvo9LsoX/293iZC3mxrbbjdrtT4Jyujqr8TtwE9tdv0SE4ChIaeuAVc4g47qq/1y ZPAEMspWqBM/W1Y45JwSbDhJ9lQYQE7gBI/HLfBSuTBbqQfAgSR2R9yvNNgEhF0w JFEUup2r3wLho2xG0OFySAtY5WWcC7l0H4EtXGiG0I9bNIWKqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3M/72LOGn8tAjK/0I/PyOi9hAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2ZiOTYzNDUtNGZlYy0z NDg1LWFkNWItMjk0NTEwOWQwZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRcTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ/ExOcoQhgnoth3MKjQnv8hsU2Wx1NxTVIhsAYE9wcb49Azzb1R1Nu vtZiScBNh9ncz0tEot7M7PEoiMWbXI23MqUUB/NPUAQov+UCToL4hoZFMbCcBd76 9TBocJcYhJj5ssp6aZDLFWbjiKMHS5Bm3eCV383B9SfLVElK9VzxvKDlJGMcBYKT F9GqGNJ7Lt5vy3rHSu7DDrVqrVLZoQrvj0W0TDWhVyGTDKrr4Kn4G0tTIHvs8NLY KWJbV+2vVJGvKbznapIaez0g8AUuXEPzlaXcdTlDWOkuew+OyRFobagZhde56OUq LIUsmNGR3dV10eSL2Ib1pIr6gngW1eU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:21 2024 by rpki-client on console-ams.rpki-client.org