$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa File: 868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa (raw, json) Hash identifier: 8W+bAGv7vD3dUKiRpUtblfWv+bZ/qfEwmJAgDaZSy5Q= Subject key identifier: 4B:32:9B:2F:43:A7:A8:90:E7:7E:1A:AB:D2:AC:40:05:F1:87:34:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40DA28AAC91E71ED322DC8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 75.91.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:da:28:aa:c9:1e:71:ed:32:2d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=df693dec-df82-477a-be08-12af900afb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:f9:08:0b:76:4a:66:5a:3c:31:75:ce:b0: d9:06:6b:52:a1:88:be:d4:50:a6:58:02:c8:da:63: 44:d0:6c:14:e1:b7:5b:d7:e1:a7:3f:cb:62:1e:5b: 04:9b:23:b6:6f:eb:1f:0a:72:55:3f:c5:e1:01:fa: ad:fa:1f:64:0f:eb:69:c6:62:06:97:29:a7:e5:99: 91:7c:af:67:76:0f:d9:fb:cd:61:a8:cb:fe:0c:99: 5d:71:8d:2b:83:db:d8:c0:8f:2a:11:54:84:47:8a: 07:aa:b8:a9:c4:94:4a:ef:f5:3d:98:a8:ee:12:fe: f3:c9:5a:49:db:76:18:ef:f3:75:79:c1:b8:5b:bc: e3:47:b6:05:a2:cc:91:c2:72:f0:fb:3a:df:bd:d2: 0c:63:b0:2c:72:36:13:f6:e5:cc:4f:8f:e3:9e:37: 95:95:fd:d4:a0:1f:7d:83:a0:ed:13:f6:dd:06:68: e9:6b:6d:d8:48:e3:2c:b1:dc:82:b4:7a:63:99:be: 5e:13:a3:36:7d:24:69:44:7a:6f:de:7f:6a:00:42: 72:39:d3:fe:4a:66:22:03:08:6b:17:d8:2f:3e:5c: 0f:27:7e:1f:7e:97:ff:f1:72:51:a6:ad:97:9e:a2: d9:f7:e4:f1:dd:d4:8b:65:e1:70:fa:a4:58:c9:4f: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:9B:2F:43:A7:A8:90:E7:7E:1A:AB:D2:AC:40:05:F1:87:34:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:70:58:4a:eb:34:4b:44:8f:74:a0:dd:30:29:20:79:7a:43: e0:5b:b4:9e:68:aa:b9:e5:be:8e:2b:f6:39:29:bd:79:80:8e: 41:d1:12:ba:06:a6:0c:0c:a2:3f:ba:f2:15:a3:c0:68:4d:c2: dd:ed:0d:69:0b:23:03:a5:21:58:a1:11:76:b5:90:0b:17:3a: 11:9e:b3:86:db:c4:8f:c5:a0:d8:22:65:15:62:60:e4:41:bb: b1:6e:f9:7b:8c:16:3b:b2:7f:6a:a0:c1:ab:53:6c:ae:3c:c6: a6:11:fc:b2:20:2f:6b:f9:0f:58:97:89:ba:5f:cb:da:ff:1c: 0b:8a:4c:ed:59:b9:3d:6c:5c:92:ac:80:a5:24:0a:0e:2f:f0: 94:e3:37:ad:e4:8c:dd:dc:a4:00:e3:ce:6a:8e:3c:76:a3:86: 72:88:6f:b2:41:ba:d7:50:6e:17:40:79:61:92:c1:9e:7f:f8: a9:4d:cc:51:76:60:3b:87:98:8c:f0:9a:91:17:74:15:33:0c: 1a:cf:ce:1e:b1:9f:5c:eb:ae:b0:99:48:8d:bb:5c:d1:0d:70: 2d:7b:f0:ce:1a:3d:ac:d4:4d:70:80:85:67:14:01:1a:72:16: cc:7b:8b:fd:bc:66:f4:b4:03:eb:91:fd:9b:35:bd:02:27:a4: 1f:bf:3f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNooqskece0yLcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGY2OTNkZWMtZGY4Mi00NzdhLWJlMDgtMTJhZjkwMGFmYjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll/5CAt2SmZaPDF1zrDZBmtSoYi+1FCmWALI 2mNE0GwU4bdb1+GnP8tiHlsEmyO2b+sfCnJVP8XhAfqt+h9kD+tpxmIGlymn5ZmR fK9ndg/Z+81hqMv+DJldcY0rg9vYwI8qEVSER4oHqripxJRK7/U9mKjuEv7zyVpJ 23YY7/N1ecG4W7zjR7YFosyRwnLw+zrfvdIMY7AscjYT9uXMT4/jnjeVlf3UoB99 g6DtE/bdBmjpa23YSOMssdyCtHpjmb5eE6M2fSRpRHpv3n9qAEJyOdP+SmYiAwhr F9gvPlwPJ34ffpf/8XJRpq2XnqLZ9+Tx3dSLZeFw+qRYyU8s6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsymy9Dp6iQ534aq9KsQAXxhzQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODY4ZDhmYmItODVhZi0z ZjQ3LWFkOTktMzllYzhjZmI3N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1wWErrNEtEj3Sg3TApIHl6Q+BbtJ5oqrnlvo4r9jkpvXmAjkHREroG pgwMoj+68hWjwGhNwt3tDWkLIwOlIVihEXa1kAsXOhGes4bbxI/FoNgiZRViYORB u7Fu+XuMFjuyf2qgwatTbK48xqYR/LIgL2v5D1iXibpfy9r/HAuKTO1ZuT1sXJKs gKUkCg4v8JTjN63kjN3cpADjzmqOPHajhnKIb7JButdQbhdAeWGSwZ5/+KlNzFF2 YDuHmIzwmpEXdBUzDBrPzh6xn1zrrrCZSI27XNENcC178M4aPazUTXCAhWcUARpy Fsx7i/28ZvS0A+uR/Zs1vQInpB+/P3I= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:18 2024 by rpki-client on console-fra.rpki-client.org