$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa File: 814cbe67-9c67-3420-81e6-2b9acdf04041.roa (raw, json) Hash identifier: 1fFMf3seOVcY9hNE7+9+fdCO9ROWyrb+CkmAL7yWpEo= Subject key identifier: 09:6D:34:A0:44:1A:E7:2A:DC:62:4A:7F:71:46:EE:CE:48:FB:B5:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553A82D296738EC85E6B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 208.101.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3a:82:d2:96:73:8e:c8:5e:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=bc30ab67-8ced-4b6e-b186-0186f6de7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:50:ac:42:e2:30:ce:e5:b5:01:57:63:ed: f7:cc:0f:1c:c8:90:57:eb:3d:b4:8e:e1:7f:35:12: a0:88:34:36:59:3d:dd:4a:6c:14:ad:a0:ff:e6:53: d6:34:3f:8a:dd:9d:82:7f:d8:c9:34:8f:c3:1f:f7: 17:5b:29:28:31:ee:04:74:1e:a2:dc:89:6b:f6:c7: de:e8:cf:f9:23:3d:f2:51:82:d0:db:af:1a:e2:b4: 8b:cf:34:3b:95:15:df:7e:51:cb:c9:61:3c:ad:b5: fe:59:72:bf:36:e1:e2:b2:6d:72:8b:58:13:4a:24: 05:ef:56:7c:db:18:c4:52:7a:18:f5:54:40:be:20: 9f:c6:0e:5a:03:a9:7e:01:29:ba:0a:3b:fb:e0:ac: 0f:0f:dc:82:26:87:6f:9a:ca:9b:01:cf:08:ba:6a: e6:9f:3c:82:36:4d:a2:47:44:cd:9c:16:80:36:c0: 74:15:05:ab:f3:57:43:e0:4a:68:3e:45:54:7a:6e: 43:01:05:18:29:95:9a:3a:33:7d:fe:7b:d0:75:e9: 0f:92:45:86:49:77:52:e9:a1:3e:24:77:5b:b7:90: e3:e3:16:12:cd:b1:97:c7:36:cc:d6:af:1a:10:43: 17:4d:60:b2:c1:48:62:e3:ba:8b:37:1c:2c:e4:2b: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:34:A0:44:1A:E7:2A:DC:62:4A:7F:71:46:EE:CE:48:FB:B5:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1c:42:26:54:09:4d:b6:68:d3:8a:bf:08:6a:9d:85:55:8e: 0d:9d:17:ff:64:92:21:9f:de:d0:94:c7:84:3f:3d:ff:4f:5f: 00:b8:a1:e0:07:08:e8:17:e1:eb:07:83:65:7b:a5:8b:c2:d9: 4a:83:ad:a0:85:eb:b3:bb:5f:8b:61:e2:59:b6:71:80:5d:3b: b8:95:8f:34:67:c8:13:c5:9d:07:ba:c4:b5:19:4c:84:4e:6f: fe:bf:82:e6:2a:33:4c:a1:9d:fe:e8:5f:c7:a1:bc:c5:45:d1: 06:02:72:cf:42:aa:2c:69:14:62:c2:bc:cb:d0:4e:ad:9a:e4: 0d:06:c4:d0:c7:4d:3f:7f:d3:fb:c0:ed:52:65:ee:ed:c7:8b: d1:e7:01:82:67:45:73:ee:06:5b:12:5e:03:7f:27:82:5b:bf: e1:93:c5:3b:4d:9b:67:f1:bf:22:9b:23:75:c0:b9:9d:95:10: 0d:63:18:9c:a2:71:c0:2e:82:27:3a:21:78:0c:14:3c:75:eb: 65:1f:be:1b:68:be:1a:5f:5f:ff:f0:ea:bc:a2:4a:b8:25:8c: 42:13:60:93:f9:bf:3a:7b:93:4e:8a:43:da:3b:d1:32:a7:7f: 7d:2c:d2:26:00:50:c2:0a:ea:ea:e6:fa:59:a7:1c:3a:2a:c9: b5:e0:82:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTqC0pZzjsheawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YmMzMGFiNjctOGNlZC00YjZlLWIxODYtMDE4NmY2ZGU3ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9dQrELiMM7ltQFXY+33zA8cyJBX6z20juF/ NRKgiDQ2WT3dSmwUraD/5lPWND+K3Z2Cf9jJNI/DH/cXWykoMe4EdB6i3Ilr9sfe 6M/5Iz3yUYLQ268a4rSLzzQ7lRXfflHLyWE8rbX+WXK/NuHism1yi1gTSiQF71Z8 2xjEUnoY9VRAviCfxg5aA6l+ASm6Cjv74KwPD9yCJodvmsqbAc8IumrmnzyCNk2i R0TNnBaANsB0FQWr81dD4EpoPkVUem5DAQUYKZWaOjN9/nvQdekPkkWGSXdS6aE+ JHdbt5Dj4xYSzbGXxzbM1q8aEEMXTWCywUhi47qLNxws5CsbiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAltNKBEGucq3GJKf3FG7s5I+7WlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE0Y2JlNjctOWM2Ny0z NDIwLTgxZTYtMmI5YWNkZjA0MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIcQiZUCU22aNOKvwhqnYVVjg2dF/9kkiGf3tCUx4Q/Pf9PXwC4oeAH COgX4esHg2V7pYvC2UqDraCF67O7X4th4lm2cYBdO7iVjzRnyBPFnQe6xLUZTIRO b/6/guYqM0yhnf7oX8ehvMVF0QYCcs9CqixpFGLCvMvQTq2a5A0GxNDHTT9/0/vA 7VJl7u3Hi9HnAYJnRXPuBlsSXgN/J4Jbv+GTxTtNm2fxvyKbI3XAuZ2VEA1jGJyi ccAugic6IXgMFDx162UfvhtovhpfX//w6ryiSrgljEITYJP5vzp7k06KQ9o70TKn f30s0iYAUMIK6urm+lmnHDoqybXggl8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:53 2024 by rpki-client on console-ams.rpki-client.org