$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa File: 8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa (raw, json) Hash identifier: bbtak9BhN+CSqU5Ic7EmXkSAq4rosRu8Z9EEDKzjyOY= Subject key identifier: 7B:C4:B5:B0:25:97:17:64:76:32:74:28:65:7C:78:46:F4:5E:2D:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6BFF93407442879DB66D30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 166.82.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6b:ff:93:40:74:42:87:9d:b6:6d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=96868a72-e2fc-453d-9bf6-a3ada794c045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:1a:65:19:5e:35:e6:dc:00:72:00:0e:37: 94:8e:45:46:ad:95:f4:9f:5a:ef:70:cd:30:4a:df: a4:52:47:6c:c9:db:77:6d:de:07:2d:b3:9a:d5:fe: 78:6b:a2:b3:26:b9:07:da:60:b8:5c:57:63:11:3d: 4d:91:e6:b6:ba:fa:5c:b3:be:77:ba:8b:b2:95:dd: 84:a4:74:28:26:99:b6:ec:50:a1:de:4e:c1:b8:8d: c9:3c:74:e1:36:89:8f:1c:e7:de:f0:ea:2e:2c:a0: cb:9b:e1:5a:a5:5e:b6:fa:e3:55:dc:f5:ad:78:e9: 51:22:25:f1:08:30:c2:30:fc:ec:d3:7d:39:fa:00: f2:d8:2f:2a:45:e2:ec:e4:f6:1a:ab:51:7c:4f:68: 61:58:6e:c2:09:8e:f6:7f:f7:d6:97:06:54:d6:68: c6:90:cd:ba:ca:99:59:19:15:e7:91:df:39:d9:aa: 28:30:d5:80:66:62:b8:c9:f8:e1:ad:1a:97:d9:51: 50:5b:3a:91:a3:7b:17:d3:32:1b:d3:22:93:b2:5f: 23:f3:84:09:bf:58:41:ec:db:ca:89:dd:2f:8c:44: ad:08:d4:17:32:0f:0d:94:50:58:10:d7:a3:0e:c0: 3a:c4:9d:1a:5e:a6:d1:30:2f:f2:37:41:f2:1e:05: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C4:B5:B0:25:97:17:64:76:32:74:28:65:7C:78:46:F4:5E:2D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:55:73:3d:a9:65:d2:88:14:55:68:36:c5:09:5a:2d:1a:3c: 6e:f9:df:6c:f2:63:3b:2e:2f:f4:e6:51:f2:4d:2e:8b:aa:0f: e0:fd:8c:2e:05:b9:aa:7c:c5:c3:27:99:62:bc:b0:9c:65:22: 8c:5a:f5:3c:8c:91:19:77:a1:00:7d:da:55:24:2c:c9:67:3e: 06:9b:15:c0:8a:2f:f2:20:05:7b:ae:6d:24:97:05:c7:88:a4: b3:16:93:1b:47:5b:e8:a4:3f:2c:d1:10:22:38:63:16:0b:6b: e3:a7:98:94:8a:74:11:74:c1:11:34:3e:49:a7:e5:9d:50:c2: 8b:59:67:18:40:86:20:a3:90:6e:0d:c7:3f:a2:3b:92:04:49: 69:10:b6:f6:0c:c2:b3:2b:69:e8:f2:76:42:e9:b4:2c:e4:8e: 36:0c:ef:c6:ba:2d:52:09:a1:74:43:30:16:2a:ac:8b:ee:a6: 8f:fe:ab:8e:e8:03:c8:ad:f6:54:76:8d:2f:d5:1d:55:fc:96: bd:51:d8:bb:37:da:78:6c:ef:a7:eb:19:33:ad:56:f5:c5:4d: de:86:b8:0d:7c:db:9e:bb:a0:1b:1d:9d:9f:7b:bc:87:0e:a3: 3d:2c:93:76:f9:b1:ef:49:ed:97:86:e2:0e:36:29:c3:1e:3b: b7:ae:5f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEera/+TQHRCh522bTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk OTY4NjhhNzItZTJmYy00NTNkLTliZjYtYTNhZGE3OTRjMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBQaZRleNebcAHIADjeUjkVGrZX0n1rvcM0w St+kUkdsydt3bd4HLbOa1f54a6KzJrkH2mC4XFdjET1Nkea2uvpcs753uouyld2E pHQoJpm27FCh3k7BuI3JPHThNomPHOfe8OouLKDLm+FapV62+uNV3PWteOlRIiXx CDDCMPzs0305+gDy2C8qReLs5PYaq1F8T2hhWG7CCY72f/fWlwZU1mjGkM26yplZ GRXnkd852aooMNWAZmK4yfjhrRqX2VFQWzqRo3sX0zIb0yKTsl8j84QJv1hB7NvK id0vjEStCNQXMg8NlFBYENejDsA6xJ0aXqbRMC/yN0HyHgVuiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvEtbAllxdkdjJ0KGV8eEb0Xi1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGU4MWNlOTktNzA1Mi0z ZDVhLWExYzYtZjU4YWEyMmEzZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtVcz2pZdKIFFVoNsUJWi0aPG7532zyYzsuL/TmUfJNLouqD+D9jC4F uap8xcMnmWK8sJxlIoxa9TyMkRl3oQB92lUkLMlnPgabFcCKL/IgBXuubSSXBceI pLMWkxtHW+ikPyzRECI4YxYLa+OnmJSKdBF0wRE0Pkmn5Z1QwotZZxhAhiCjkG4N xz+iO5IESWkQtvYMwrMraejydkLptCzkjjYM78a6LVIJoXRDMBYqrIvupo/+q47o A8it9lR2jS/VHVX8lr1R2Ls32nhs76frGTOtVvXFTd6GuA182567oBsdnZ97vIcO oz0sk3b5se9J7ZeG4g42KcMeO7euX1s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:11 2024 by rpki-client on console-fra.rpki-client.org