$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8054b298-15d0-3837-b2e8-fc6f15c33432.roa File: 8054b298-15d0-3837-b2e8-fc6f15c33432.roa (raw, json) Hash identifier: izIUuYWwOTTRZO5nSZbE2JK9q+zFvlyV2eyX65UB3aQ= Subject key identifier: 72:C3:9E:67:14:CC:7C:2A:54:61:42:21:3E:18:07:2C:1D:B5:0F:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40D8B3BEA0F59606953480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8054b298-15d0-3837-b2e8-fc6f15c33432.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 72.16.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d8:b3:be:a0:f5:96:06:95:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=348d5a66-6f73-44c8-8a12-70d29fbe5216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:6d:a6:c9:b6:2d:0b:1e:48:e3:81:83:b5: d4:07:3a:cc:75:5c:4d:6e:0b:f6:45:9f:df:9b:56: 0e:dd:4c:5e:27:f2:6f:4a:1e:7c:dd:37:69:21:87: 38:67:ca:9c:c2:aa:ae:e6:ad:32:9c:64:9f:65:96: 96:18:b5:24:cf:9d:bd:3c:7b:09:e7:10:fd:67:3f: a6:5c:17:7d:23:68:96:4b:5c:ef:22:8c:07:77:e0: bf:01:af:45:aa:41:49:44:67:93:d4:7a:d3:7b:63: c9:27:95:36:41:d0:94:ee:0e:2b:67:d6:81:cb:39: ed:66:5a:01:bb:7d:99:05:2f:94:3b:db:f9:60:68: 2a:35:70:f0:00:5f:59:09:e6:b7:d3:f7:c2:47:be: 6f:b7:b4:61:68:91:ee:99:20:27:79:34:55:f0:b7: 50:90:90:8e:30:d0:26:3d:de:61:f2:13:90:9e:01: d9:98:ce:c8:0d:90:5d:ea:50:b6:2a:b4:e3:75:78: 80:65:4e:fa:90:a0:e6:9b:3c:a2:31:5d:bb:5a:30: 4e:a1:1c:a1:d1:27:4e:51:f3:a6:17:30:b3:34:e0: 85:7b:f8:40:c5:a7:e4:5b:35:76:58:a0:7c:e4:83: 5e:3f:74:26:e0:79:d3:e9:c2:ff:3b:13:1a:19:c2: 2c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:9E:67:14:CC:7C:2A:54:61:42:21:3E:18:07:2C:1D:B5:0F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8054b298-15d0-3837-b2e8-fc6f15c33432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5d:88:e2:01:05:b7:18:5f:71:25:64:4e:29:03:1b:fe:7b: 50:04:16:67:27:1e:72:66:6d:ff:e7:e8:22:83:5e:53:86:c2: 0b:e6:38:f4:29:5c:a2:6b:cb:15:02:21:96:a2:cf:69:21:04: 22:64:cd:4c:83:98:c5:36:19:b8:fc:38:e3:ee:e5:5c:3c:cb: 69:d4:31:3d:6a:1d:d1:2b:3a:1b:2a:53:20:74:1b:69:63:4e: ba:17:4f:c0:75:60:4f:bf:bc:7b:65:38:25:79:89:96:72:2f: 83:ed:6e:90:3f:54:e4:0a:4e:0f:c9:5e:75:91:4e:b9:a1:41: 07:ad:a5:19:4b:6a:71:43:f0:28:bb:5c:e1:7c:43:cb:c4:93: 9c:37:42:8b:9f:54:c7:a0:bf:cb:40:41:1d:5b:16:76:a3:11: 4d:44:71:77:04:b3:8f:d8:30:ec:c7:fd:b6:e8:8b:a1:0f:29: 5f:78:06:bb:3b:53:b9:67:23:a4:0f:63:db:b5:3e:8d:3b:59: 99:ee:a8:d9:f5:f4:07:35:6d:44:af:c6:9e:d0:d7:c6:ed:d0: f5:73:53:b8:9e:cc:8e:2a:e7:89:a8:ee:c1:f4:c6:c1:30:1e: a2:3b:ac:c4:bc:f1:76:1d:f9:a0:00:ac:f2:55:0c:30:1a:ed: f1:97:b8:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNizvqD1lgaVNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzQ4ZDVhNjYtNmY3My00NGM4LThhMTItNzBkMjlmYmU1MjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YRtpsm2LQseSOOBg7XUBzrMdVxNbgv2RZ/f m1YO3UxeJ/JvSh583TdpIYc4Z8qcwqqu5q0ynGSfZZaWGLUkz529PHsJ5xD9Zz+m XBd9I2iWS1zvIowHd+C/Aa9FqkFJRGeT1HrTe2PJJ5U2QdCU7g4rZ9aByzntZloB u32ZBS+UO9v5YGgqNXDwAF9ZCea30/fCR75vt7RhaJHumSAneTRV8LdQkJCOMNAm Pd5h8hOQngHZmM7IDZBd6lC2KrTjdXiAZU76kKDmmzyiMV27WjBOoRyh0SdOUfOm FzCzNOCFe/hAxafkWzV2WKB85INeP3Qm4HnT6cL/OxMaGcIsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLDnmcUzHwqVGFCIT4YBywdtQ/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODA1NGIyOTgtMTVkMC0z ODM3LWIyZTgtZmM2ZjE1YzMzNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANdiOIBBbcYX3ElZE4pAxv+e1AEFmcnHnJmbf/n6CKDXlOGwgvmOPQp XKJryxUCIZaiz2khBCJkzUyDmMU2Gbj8OOPu5Vw8y2nUMT1qHdErOhsqUyB0G2lj TroXT8B1YE+/vHtlOCV5iZZyL4PtbpA/VOQKTg/JXnWRTrmhQQetpRlLanFD8Ci7 XOF8Q8vEk5w3QoufVMegv8tAQR1bFnajEU1EcXcEs4/YMOzH/bboi6EPKV94Brs7 U7lnI6QPY9u1Po07WZnuqNn19Ac1bUSvxp7Q18bt0PVzU7iezI4q54mo7sH0xsEw HqI7rMS88XYd+aAArPJVDDAa7fGXuCQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:53 2024 by rpki-client on console-ams.rpki-client.org