$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa File: 8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa (raw, json) Hash identifier: s96T+ojyiKm6fo4DzU28CSSL1RX5+UEFZaEG61xAdyk= Subject key identifier: AE:B6:60:56:26:E3:07:B5:0D:00:6F:A3:CA:7E:C9:80:44:2C:3F:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553CACE0D971AA9EBE3880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.205.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3c:ac:e0:d9:71:aa:9e:be:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=9a52374f-adac-4810-a20f-a70a5ee635cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:7e:b6:4d:b2:cf:9d:56:7f:ed:88:9c:5d: f0:8b:b8:45:ee:c9:38:34:76:f6:d1:57:ac:0f:36: 0e:5f:e3:68:95:0e:63:9b:59:75:9b:cb:b6:99:1f: fc:38:60:77:6b:49:00:de:51:15:db:e7:57:00:1f: f7:e0:d4:b8:ef:ed:15:74:81:fa:61:9b:03:e5:1e: a6:cb:11:e4:eb:cd:36:4f:6f:b6:07:b2:9f:cf:46: 40:89:8b:35:cc:09:22:b5:56:75:ba:48:06:04:5d: 8a:41:fa:f2:cc:77:97:34:73:3f:d1:cb:21:c4:71: 44:eb:e5:28:7b:c7:d7:33:90:1d:0a:e6:77:35:44: eb:30:95:29:9d:5a:46:b5:d1:3d:89:31:07:bd:fa: d9:65:f5:aa:c6:16:8d:6a:46:79:8c:1d:57:c6:cf: 80:60:a8:56:95:c0:ad:1c:f3:90:fc:5f:6d:a9:d9: b3:d0:95:e3:72:bd:85:68:38:95:78:ba:54:f4:1e: 63:c3:04:ac:95:41:93:d7:a7:1c:01:c1:8f:10:77: 3b:97:7b:c3:cd:f7:76:19:2a:dc:1e:14:66:99:17: 74:da:73:d8:16:95:54:92:43:6f:a0:15:e5:73:c7: a0:a2:44:83:7e:52:64:6e:ab:14:22:5b:4f:bc:6b: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B6:60:56:26:E3:07:B5:0D:00:6F:A3:CA:7E:C9:80:44:2C:3F:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.205.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:29:e2:1e:e6:b8:26:2e:20:39:5f:1d:a8:fd:c4:8f:10:bf: 81:e6:22:bf:fc:a8:00:f3:bc:58:79:4e:3d:37:bc:fa:10:0a: 4f:fa:1c:19:05:d7:28:8d:6f:9a:a9:4c:33:46:bf:12:9d:f7: 68:d7:ab:f5:65:f8:5e:98:39:d7:5d:f6:bf:c5:03:0a:d3:c3: 22:22:de:e8:58:4c:58:af:80:61:4f:aa:41:48:2a:27:cd:ba: a5:06:4b:c8:d2:23:6f:68:fd:a1:18:d5:33:46:0a:c8:71:92: 3d:f0:12:c0:7f:61:5d:d5:e7:f2:af:cd:54:4c:6f:7b:af:ea: ba:2f:7c:8b:98:8c:af:be:1c:0f:9a:c7:5c:87:08:f6:7f:be: 71:1c:e2:5f:dc:9c:da:4d:65:e5:da:64:e4:0a:0b:05:5e:df: a1:94:06:13:4f:1e:29:8a:5a:6d:91:04:86:a9:76:01:c1:2f: 66:fb:df:a4:e0:9c:88:28:56:d5:cb:0e:55:e1:5b:c7:73:1e: e4:eb:97:f3:c6:f0:f3:70:f9:ac:1a:56:28:7a:dc:d2:38:fb: 04:55:2b:1a:a2:c8:44:70:7b:60:82:37:e2:d8:e6:6a:72:b4: 7c:e8:51:17:6c:47:4d:b0:10:d1:48:03:f9:02:0a:47:9c:55: a1:2b:08:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTys4Nlxqp6+OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OWE1MjM3NGYtYWRhYy00ODEwLWEyMGYtYTcwYTVlZTYzNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCt+tk2yz51Wf+2InF3wi7hF7sk4NHb20Ves DzYOX+NolQ5jm1l1m8u2mR/8OGB3a0kA3lEV2+dXAB/34NS47+0VdIH6YZsD5R6m yxHk6802T2+2B7Kfz0ZAiYs1zAkitVZ1ukgGBF2KQfryzHeXNHM/0cshxHFE6+Uo e8fXM5AdCuZ3NUTrMJUpnVpGtdE9iTEHvfrZZfWqxhaNakZ5jB1Xxs+AYKhWlcCt HPOQ/F9tqdmz0JXjcr2FaDiVeLpU9B5jwwSslUGT16ccAcGPEHc7l3vDzfd2GSrc HhRmmRd02nPYFpVUkkNvoBXlc8egokSDflJkbqsUIltPvGss4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK62YFYm4we1DQBvo8p+yYBELD8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGViZGNjY2ItYmMzNi0z YjEyLTlmYjktZGMwMmEyMTM0NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2M3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEp4h7muCYuIDlfHaj9xI8Qv4HmIr/8qADzvFh5Tj03vPoQCk/6HBkF 1yiNb5qpTDNGvxKd92jXq/Vl+F6YOddd9r/FAwrTwyIi3uhYTFivgGFPqkFIKifN uqUGS8jSI29o/aEY1TNGCshxkj3wEsB/YV3V5/KvzVRMb3uv6rovfIuYjK++HA+a x1yHCPZ/vnEc4l/cnNpNZeXaZOQKCwVe36GUBhNPHimKWm2RBIapdgHBL2b736Tg nIgoVtXLDlXhW8dzHuTrl/PG8PNw+awaVih63NI4+wRVKxqiyERwe2CCN+LY5mpy tHzoURdsR02wENFIA/kCCkecVaErCAQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:11 2024 by rpki-client on console-fra.rpki-client.org