$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8aa669ab-d75e-3b6b-99b7-f7a0d146e144.roa File: 8aa669ab-d75e-3b6b-99b7-f7a0d146e144.roa (raw, json) Hash identifier: qG/pRgGvVD9Lgf4q2Tvio8DAltflGzTH4/SekmAvjt4= Subject key identifier: A1:50:50:19:FB:B8:37:0B:E1:83:CC:D0:41:93:53:E9:DE:97:D4:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15529CB839D38E4943C8680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8aa669ab-d75e-3b6b-99b7-f7a0d146e144.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 50.96.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:29:cb:83:9d:38:e4:94:3c:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a1f8d22f-d390-4d76-9e06-845ebe7cd00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:08:6f:39:1b:47:3a:8c:b2:0f:00:a5:65:0f: 8b:37:f0:38:07:74:8d:01:34:08:47:79:ad:ea:c2: ca:04:54:bb:cc:58:bd:47:eb:f0:8c:ca:82:43:02: 2a:1d:0e:db:b6:d4:68:1d:08:8f:43:40:67:57:8f: 1a:45:30:03:09:84:2e:7e:0b:a0:3b:fe:bc:4e:a2: 5c:2d:fd:a8:7d:b5:75:c7:06:b7:69:7d:55:7e:66: ec:47:c6:00:9a:26:6b:c4:b3:29:a7:ae:a0:67:ac: 63:13:5d:f9:30:8f:04:da:01:48:fc:90:ba:79:b8: ee:6d:f4:2b:33:e5:33:6e:cc:f8:54:b5:14:30:16: 2e:dd:43:d6:3a:2c:30:f8:0b:24:b4:15:d8:f4:60: 43:3d:9b:eb:08:5e:e3:fc:40:6a:ef:b6:20:a5:9d: 97:45:4e:d4:bf:2b:86:70:3e:18:e8:37:20:48:dd: 6f:7b:2b:12:a6:39:04:51:ce:04:4b:ab:a3:a3:82: 2f:51:8c:68:12:1d:14:f1:73:19:58:24:f7:a6:3a: 54:33:bf:fe:c0:60:44:f3:f5:0c:d0:0f:ea:eb:f1: 23:df:b5:8e:64:d9:1d:e2:57:25:03:16:9f:19:d4: 4c:01:65:5d:c7:3a:49:e0:e3:0a:14:f5:26:be:e6: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:50:50:19:FB:B8:37:0B:E1:83:CC:D0:41:93:53:E9:DE:97:D4:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8aa669ab-d75e-3b6b-99b7-f7a0d146e144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:cb:71:a8:d7:5f:c2:12:9d:23:0b:da:48:a7:30:2e:bc:43: 28:64:f1:0f:12:d6:f1:7e:d2:89:b0:4e:40:99:02:b3:d4:c9: 21:ba:ec:cd:7a:8d:17:50:e3:70:19:9d:79:d8:05:1e:b3:bf: 02:da:24:8e:8e:39:99:01:85:95:18:b6:6e:5b:d2:3b:56:83: e6:1b:33:3e:a7:31:3e:19:49:43:70:53:ed:72:da:fe:2a:07: 53:47:31:02:1e:45:83:0b:db:57:c3:98:1f:c8:96:e9:a6:41: e6:2d:3f:6f:3c:3a:1d:1e:45:78:d2:56:45:0a:4a:d0:fd:ab: 09:77:10:e5:98:8b:a5:cc:43:f6:92:41:ea:c3:f2:ca:ae:3b: bd:2f:95:a7:d3:79:08:ac:33:c0:5f:9d:3e:58:0b:6e:d2:43: 51:3d:fa:bd:52:f4:95:fd:9d:93:62:35:bf:38:c1:79:f8:e4: ad:4e:44:66:76:40:96:06:00:43:04:19:02:6e:fe:82:f6:fe: c8:d0:cf:c3:5d:a9:53:1e:83:e9:70:53:72:ca:02:07:ce:a1: cb:ba:b3:44:df:3a:82:87:99:5a:57:40:b5:b6:7c:34:86:63: 07:f9:2b:72:8b:1a:05:19:20:2f:26:d1:1f:90:72:83:46:bb: 0e:04:ce:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSnLg5045JQ8hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTFmOGQyMmYtZDM5MC00ZDc2LTllMDYtODQ1ZWJlN2NkMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQhvORtHOoyyDwClZQ+LN/A4B3SNATQIR3mt 6sLKBFS7zFi9R+vwjMqCQwIqHQ7bttRoHQiPQ0BnV48aRTADCYQufgugO/68TqJc Lf2ofbV1xwa3aX1VfmbsR8YAmiZrxLMpp66gZ6xjE135MI8E2gFI/JC6ebjubfQr M+Uzbsz4VLUUMBYu3UPWOiww+AsktBXY9GBDPZvrCF7j/EBq77YgpZ2XRU7UvyuG cD4Y6DcgSN1veysSpjkEUc4ES6ujo4IvUYxoEh0U8XMZWCT3pjpUM7/+wGBE8/UM 0A/q6/Ej37WOZNkd4lclAxafGdRMAWVdxzpJ4OMKFPUmvua9gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFQUBn7uDcL4YPM0EGTU+nel9TBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFhNjY5YWItZDc1ZS0z YjZiLTk5YjctZjdhMGQxNDZlMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDLcajXX8ISnSML2kinMC68Qyhk8Q8S1vF+0omwTkCZArPUySG67M16 jRdQ43AZnXnYBR6zvwLaJI6OOZkBhZUYtm5b0jtWg+YbMz6nMT4ZSUNwU+1y2v4q B1NHMQIeRYML21fDmB/IlummQeYtP288Oh0eRXjSVkUKStD9qwl3EOWYi6XMQ/aS QerD8squO70vlafTeQisM8BfnT5YC27SQ1E9+r1S9JX9nZNiNb84wXn45K1ORGZ2 QJYGAEMEGQJu/oL2/sjQz8NdqVMeg+lwU3LKAgfOocu6s0TfOoKHmVpXQLW2fDSG Ywf5K3KLGgUZIC8m0R+QcoNGuw4Ezr0= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:18 2024 by rpki-client on console-fra.rpki-client.org