$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a6e306-1139-3cb5-be98-2af8129d2c08.roa File: 88a6e306-1139-3cb5-be98-2af8129d2c08.roa (raw, json) Hash identifier: dtzLSmRdD+N3tQdpcalPyqSyeQpK1BCvqGkQdrHm5eU= Subject key identifier: A2:49:AD:1C:96:7B:46:13:4C:71:A5:3C:FB:85:28:B5:15:8F:C2:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15516148A4FACFECAAE5C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a6e306-1139-3cb5-be98-2af8129d2c08.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 31898 IP address blocks: 50.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:16:14:8a:4f:ac:fe:ca:ae:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0af6b995-5248-4e1a-b0d3-238568a1532d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:fa:c4:5b:8a:4d:07:c6:d6:16:64:d5:c9: 32:48:2e:4b:27:9f:79:0d:2a:48:eb:ad:f4:56:71: 9f:6a:4e:c1:5b:78:7e:3f:09:27:22:b6:46:a0:a3: f9:9d:55:2d:f7:57:9f:4e:85:59:94:20:ff:51:79: f5:f2:41:f0:48:c0:46:0e:e3:4f:3b:44:8e:36:2e: 06:ec:b9:31:fa:fd:53:16:38:55:a8:c6:7c:67:79: d7:f0:c6:d8:61:f0:e6:ab:18:af:48:2d:35:71:dc: a7:1a:ec:4d:f5:69:02:33:2c:34:58:88:31:7a:14: 84:76:09:08:68:52:db:8e:11:59:31:af:e4:c1:31: 46:9b:da:29:3c:12:e9:73:76:18:42:7b:3b:ed:8d: b5:8a:f5:c0:d7:4d:95:2e:7b:ea:46:a8:57:d8:4d: cb:59:ca:e1:ce:32:b6:80:cd:a7:0d:ff:33:91:8d: 11:15:66:8c:0d:c7:52:d1:19:97:d4:43:fb:02:bf: ac:66:b8:f9:5a:27:3c:04:84:5a:9e:e8:01:d8:de: ad:e2:90:98:64:f0:73:d9:25:32:df:e1:13:38:a8: d7:96:82:9a:fb:48:50:5c:c9:6e:24:56:bc:d6:4b: d8:e8:5f:49:36:49:6e:f3:72:2f:93:2d:4d:72:1a: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:49:AD:1C:96:7B:46:13:4C:71:A5:3C:FB:85:28:B5:15:8F:C2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a6e306-1139-3cb5-be98-2af8129d2c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c0:7d:08:bb:52:91:61:3f:df:2e:94:27:fd:05:7c:c8:0e: 1d:67:74:98:c3:a2:8c:bb:81:b1:2b:02:44:94:da:99:15:87: 19:4f:47:27:11:0c:56:90:a8:ae:fb:fe:58:e9:29:68:18:9d: 8e:f3:3a:5f:5d:18:c8:26:a6:a1:47:8a:1a:8d:d7:d2:3a:c7: 4a:e0:d8:ca:ac:47:37:b3:29:a2:dc:8e:cd:d8:9a:8b:bf:e8: d2:77:13:37:b7:ac:0a:f1:29:ba:5f:fe:ba:c7:ff:25:8d:8d: 97:70:ce:52:2c:f6:9b:60:1d:68:58:8a:da:da:84:44:a5:6f: 9c:13:4b:5b:d7:15:c3:49:07:ce:bf:7c:bf:94:0e:00:76:e8: 01:0d:36:96:1e:b7:42:f2:7a:19:fe:34:f1:fe:66:38:df:7e: 53:4b:da:ab:66:b6:77:24:a7:e1:e7:8d:c1:9c:a2:bd:65:ce: 60:bd:3b:d8:9b:60:88:ed:ca:7d:1d:84:9b:82:fb:5d:d3:5b: ad:09:60:a9:82:e9:75:0a:a0:4b:7e:7d:f6:ae:8a:70:15:ce: 54:6d:23:d1:31:47:74:47:a3:fc:72:ea:7f:61:82:95:10:7f: b6:b6:41:d1:b3:a5:3f:f6:56:ae:fe:a0:30:ae:21:5e:d6:aa: 58:9f:1a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVRYUik+s/squXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MGFmNmI5OTUtNTI0OC00ZTFhLWIwZDMtMjM4NTY4YTE1MzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBX6xFuKTQfG1hZk1ckySC5LJ595DSpI6630 VnGfak7BW3h+PwknIrZGoKP5nVUt91efToVZlCD/UXn18kHwSMBGDuNPO0SONi4G 7Lkx+v1TFjhVqMZ8Z3nX8MbYYfDmqxivSC01cdynGuxN9WkCMyw0WIgxehSEdgkI aFLbjhFZMa/kwTFGm9opPBLpc3YYQns77Y21ivXA102VLnvqRqhX2E3LWcrhzjK2 gM2nDf8zkY0RFWaMDcdS0RmX1EP7Ar+sZrj5Wic8BIRanugB2N6t4pCYZPBz2SUy 3+ETOKjXloKa+0hQXMluJFa81kvY6F9JNklu83Ivky1Nchr6NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJJrRyWe0YTTHGlPPuFKLUVj8K4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODhhNmUzMDYtMTEzOS0z Y2I1LWJlOTgtMmFmODEyOWQyYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvAfQi7UpFhP98ulCf9BXzIDh1ndJjDooy7gbErAkSU2pkVhxlPRycR DFaQqK77/ljpKWgYnY7zOl9dGMgmpqFHihqN19I6x0rg2MqsRzezKaLcjs3Ymou/ 6NJ3Eze3rArxKbpf/rrH/yWNjZdwzlIs9ptgHWhYitrahESlb5wTS1vXFcNJB86/ fL+UDgB26AENNpYet0Lyehn+NPH+ZjjfflNL2qtmtnckp+HnjcGcor1lzmC9O9ib YIjtyn0dhJuC+13TW60JYKmC6XUKoEt+ffauinAVzlRtI9ExR3RHo/xy6n9hgpUQ f7a2QdGzpT/2Vq7+oDCuIV7WqlifGkc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:54 2024 by rpki-client on console-ams.rpki-client.org