$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa File: 8fe10703-6f23-359f-98b0-f95f4892cde6.roa (raw, json) Hash identifier: TyLd9Vgc9LsdU+gnNO1Za8cIpJt8f507/9/RlHxIugo= Subject key identifier: 21:50:01:EB:85:FD:2A:DB:A6:8D:A4:8A:37:5E:3F:94:DF:4D:83:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EE8A3A5816446A4E7A7ED500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 71.28.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:3a:58:16:44:6a:4e:7a:7e:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=efd0d11f-777b-4de6-933a-751f1d1983e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:01:7e:fc:67:73:c5:9d:30:f5:20:ab:da:d7: f2:41:2b:db:68:26:76:b9:a5:da:03:e9:97:44:61: 5d:70:66:21:28:ad:d3:d1:8a:2b:2f:d8:30:ef:6e: 46:88:27:fd:47:42:b8:eb:77:09:3d:2b:a6:ac:8b: 99:21:15:73:a2:77:76:8a:d0:a0:a8:b1:30:f4:3e: 53:1c:15:ad:33:80:19:70:fe:2f:bb:7c:25:eb:41: 9f:d0:8e:da:29:b8:60:b5:90:66:59:f4:49:75:cf: 87:17:b2:33:e6:cb:7a:5e:fa:4c:e6:bc:29:4b:6d: db:18:5a:32:bc:32:5b:95:e0:cc:07:c7:97:4c:15: d8:d5:53:8f:4d:5d:d5:92:85:59:53:6f:d2:93:0e: bf:dc:f0:b3:fc:6a:64:fb:9e:55:bb:2e:37:fd:42: b8:e8:3f:6d:44:0d:2d:7d:7d:5a:81:fe:0e:f1:17: c3:15:79:75:16:95:44:89:fd:c9:5b:f8:1c:55:3e: 2f:6a:0a:d6:d0:c1:a9:62:9d:69:e4:47:29:ff:d1: c0:9b:6f:a8:1f:12:6f:fa:1d:d0:b7:be:93:82:b8: 89:29:3b:4f:a9:a0:e6:5e:21:3d:54:79:9b:7c:02: 81:e0:df:7c:19:e0:df:0c:b9:96:ad:44:92:0f:bd: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:50:01:EB:85:FD:2A:DB:A6:8D:A4:8A:37:5E:3F:94:DF:4D:83:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:11:ec:9e:c2:35:98:8a:e0:14:14:68:4d:17:9e:71:b6:af: b4:7a:cc:71:a5:fc:87:31:dc:a2:ee:e2:28:9e:6e:15:b9:75: 11:94:f2:18:6d:29:e5:44:0e:fd:5a:88:ad:31:f3:4f:ea:8a: c3:5c:b7:88:ab:d1:59:0c:05:d0:b9:a0:77:b7:30:1b:f3:61: e8:c3:7e:d7:a6:fb:1b:0f:04:f5:e0:b9:bb:e3:84:17:ea:c8: d1:64:44:6e:3d:ad:e2:1d:c7:a3:72:3b:56:14:dc:51:db:9c: af:16:8a:bd:ef:17:79:89:54:bd:7a:47:bc:ca:89:a9:ac:8c: 11:0e:13:4b:eb:9a:6c:17:ad:ee:18:fb:e1:3b:13:68:f9:98: b7:6c:72:3b:59:70:00:e5:8f:76:b5:25:08:62:00:16:10:24: 54:57:69:1a:e8:fc:22:05:e3:f8:98:73:d8:9b:4a:71:de:53: f5:88:fb:db:e1:44:93:4e:cd:0b:9c:78:9e:aa:f2:61:58:c5: b6:28:2f:88:c4:f4:47:22:68:71:e7:b7:06:bd:13:5e:0b:46: 75:22:0c:09:23:d1:45:77:0f:fc:84:f5:d1:87:fb:75:be:2a: 3a:e0:e4:a1:8a:f5:98:99:55:ac:1f:43:9b:d2:8f:33:30:dd: 85:64:6b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijpYFkRqTnp+1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk ZWZkMGQxMWYtNzc3Yi00ZGU2LTkzM2EtNzUxZjFkMTk4M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggF+/GdzxZ0w9SCr2tfyQSvbaCZ2uaXaA+mX RGFdcGYhKK3T0YorL9gw725GiCf9R0K463cJPSumrIuZIRVzond2itCgqLEw9D5T HBWtM4AZcP4vu3wl60Gf0I7aKbhgtZBmWfRJdc+HF7Iz5st6XvpM5rwpS23bGFoy vDJbleDMB8eXTBXY1VOPTV3VkoVZU2/Skw6/3PCz/Gpk+55Vuy43/UK46D9tRA0t fX1agf4O8RfDFXl1FpVEif3JW/gcVT4vagrW0MGpYp1p5Ecp/9HAm2+oHxJv+h3Q t76TgriJKTtPqaDmXiE9VHmbfAKB4N98GeDfDLmWrUSSD72QkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFQAeuF/Srbpo2kijdeP5TfTYNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZlMTA3MDMtNmYyMy0z NTlmLTk4YjAtZjk1ZjQ4OTJjZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYR7J7CNZiK4BQUaE0XnnG2r7R6zHGl/Icx3KLu4iiebhW5dRGU8hht KeVEDv1aiK0x80/qisNct4ir0VkMBdC5oHe3MBvzYejDftem+xsPBPXgubvjhBfq yNFkRG49reIdx6NyO1YU3FHbnK8Wir3vF3mJVL16R7zKiamsjBEOE0vrmmwXre4Y ++E7E2j5mLdscjtZcADlj3a1JQhiABYQJFRXaRro/CIF4/iYc9ibSnHeU/WI+9vh RJNOzQuceJ6q8mFYxbYoL4jE9EciaHHntwa9E14LRnUiDAkj0UV3D/yE9dGH+3W+ Kjrg5KGK9ZiZVawfQ5vSjzMw3YVka+s= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:19 2024 by rpki-client on console-fra.rpki-client.org