$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84909f45-ca5f-32fb-b258-97033c85b337.roa File: 84909f45-ca5f-32fb-b258-97033c85b337.roa (raw, json) Hash identifier: kj4KZpM+Hr1I3McUR1HG0PGCDD1xX33PCYpYSdhyKyU= Subject key identifier: 0B:07:30:1D:30:69:DD:70:31:88:03:49:41:FA:99:7E:83:E4:C5:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40D11D59B84FFC9C0387BA Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84909f45-ca5f-32fb-b258-97033c85b337.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 69.66.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d1:1d:59:b8:4f:fc:9c:03:87:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=d77dde15-200a-4c4d-9861-5342d0bff8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:93:6f:40:8f:c9:75:d1:23:75:0c:3f:ce: e7:68:85:ff:25:d0:eb:51:af:41:2a:5a:61:8d:b3: 55:94:9a:2e:73:03:81:27:04:c5:bd:4f:ef:29:ed: ef:89:f9:12:10:bb:4d:af:0b:8e:aa:bd:01:56:30: f9:4a:14:df:89:08:3c:c8:8e:55:14:c1:65:cc:d9: 9e:dc:0a:a2:40:8c:83:e4:7c:eb:72:aa:12:3f:c3: 2e:e6:38:6c:9d:94:6f:2e:e4:a2:9a:75:f1:f3:06: be:0e:05:d2:3b:fe:f9:d8:8c:2d:54:00:83:56:0a: d7:fa:74:37:00:f1:76:03:38:a4:bb:1f:23:e0:69: 7f:49:81:7b:64:15:93:8c:7f:e3:66:46:10:6c:47: 2f:e7:9c:f1:63:5b:30:d1:fb:f8:2b:2f:13:e9:aa: 75:71:87:d8:33:1e:22:84:53:1a:92:8a:a2:80:38: b4:17:f0:c9:16:35:43:40:93:0b:4a:1a:3c:21:d9: be:bd:6c:0a:a8:1c:e2:6b:c5:b8:3b:e2:e2:3c:41: ea:06:70:1f:c3:67:a8:d1:99:79:99:75:41:d9:0d: 3d:4d:ab:22:d3:2a:bb:1a:b0:24:93:45:74:c0:e8: c7:8f:dc:87:aa:58:5b:c6:38:0e:c8:b2:97:75:be: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:07:30:1D:30:69:DD:70:31:88:03:49:41:FA:99:7E:83:E4:C5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84909f45-ca5f-32fb-b258-97033c85b337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d3:0f:4c:12:25:60:df:3f:07:69:f5:4a:12:68:44:e4:0a: b9:0e:34:64:58:87:fc:d1:fe:cc:6e:b5:4d:06:53:3b:20:d6: c3:2f:7d:2c:dc:4d:0c:20:0d:d6:a9:e0:3e:b1:b7:26:d2:95: b0:b1:36:b7:f6:68:6b:99:1b:ac:2f:b3:73:db:2e:52:b6:61: e4:b6:25:44:91:71:ff:f4:35:01:8f:14:ef:b5:0c:c6:33:69: 46:01:40:9f:99:a1:e6:74:77:28:d1:0b:b8:34:55:15:a8:a0: c7:8e:db:3b:13:13:9c:05:ad:5c:86:95:2e:69:2a:ca:35:62: b7:a7:2f:0a:14:aa:aa:02:3e:4b:75:82:cd:c4:ba:b3:01:ae: 34:06:06:ce:b4:5a:6e:69:59:07:c0:03:f9:d2:d9:0b:c7:26: d7:30:3f:26:3f:dd:a8:e3:9d:07:fc:b6:0e:ee:06:b0:c5:f5: 80:0a:6a:e4:b1:29:cd:9d:9b:9a:e6:1a:70:e8:1a:de:ed:67: 20:c5:2c:af:9b:97:84:12:f0:70:34:f1:8a:ea:9d:f2:e0:b2: 96:c4:e0:39:5d:8c:3d:57:02:44:f6:25:c1:20:8f:c6:b4:44: b5:d0:1d:97:c2:5e:e6:d0:a5:42:27:37:30:18:c6:9d:aa:4e: 38:21:c5:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNEdWbhP/JwDh7owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDc3ZGRlMTUtMjAwYS00YzRkLTk4NjEtNTM0MmQwYmZmOGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLiTb0CPyXXRI3UMP87naIX/JdDrUa9BKlph jbNVlJoucwOBJwTFvU/vKe3vifkSELtNrwuOqr0BVjD5ShTfiQg8yI5VFMFlzNme 3AqiQIyD5HzrcqoSP8Mu5jhsnZRvLuSimnXx8wa+DgXSO/752IwtVACDVgrX+nQ3 APF2Azikux8j4Gl/SYF7ZBWTjH/jZkYQbEcv55zxY1sw0fv4Ky8T6ap1cYfYMx4i hFMakoqigDi0F/DJFjVDQJMLSho8Idm+vWwKqBzia8W4O+LiPEHqBnAfw2eo0Zl5 mXVB2Q09Tasi0yq7GrAkk0V0wOjHj9yHqlhbxjgOyLKXdb4pSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsHMB0wad1wMYgDSUH6mX6D5MXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQ5MDlmNDUtY2E1Zi0z MmZiLWIyNTgtOTcwMzNjODViMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARULVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrTD0wSJWDfPwdp9UoSaETkCrkONGRYh/zR/sxutU0GUzsg1sMvfSzc TQwgDdap4D6xtybSlbCxNrf2aGuZG6wvs3PbLlK2YeS2JUSRcf/0NQGPFO+1DMYz aUYBQJ+ZoeZ0dyjRC7g0VRWooMeO2zsTE5wFrVyGlS5pKso1YrenLwoUqqoCPkt1 gs3EurMBrjQGBs60Wm5pWQfAA/nS2QvHJtcwPyY/3ajjnQf8tg7uBrDF9YAKauSx Kc2dm5rmGnDoGt7tZyDFLK+bl4QS8HA08YrqnfLgspbE4DldjD1XAkT2JcEgj8a0 RLXQHZfCXubQpUInNzAYxp2qTjghxaw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:10 2024 by rpki-client on console-fra.rpki-client.org