$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa File: 94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa (raw, json) Hash identifier: CGQA9eqg76GBl77o4JHl8ICKbq4GAmYnx1gjHzPDfmU= Subject key identifier: 3B:3E:8C:EA:EA:67:5B:0B:C3:70:AA:5A:3A:BF:99:F4:CC:C1:BA:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117B60655E1773C8673E680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa Signing time: Thu 12 Sep 2024 17:22:20 +0000 ROA not before: Thu 12 Sep 2024 17:22:20 +0000 ROA not after: Wed 11 Dec 2024 18:22:20 +0000 asID: 7029 IP address blocks: 75.89.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:b6:06:55:e1:77:3c:86:73:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:20 2024 GMT Not After : Dec 11 18:22:20 2024 GMT Subject: CN=f5d82ff2-2d3e-4522-9889-2cf89ffeed64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:be:3d:b2:66:bd:3e:30:50:b1:69:f8:52: 7a:78:7d:34:b2:8c:ed:34:34:f0:7b:4c:ec:7f:cc: f7:3f:9b:e8:1d:20:eb:80:f0:d2:62:22:a3:71:30: c5:b2:5c:c1:07:9f:5d:67:4c:2d:e1:d7:b1:c2:91: 8e:b3:31:84:9b:ae:c1:92:59:99:4c:93:b0:93:01: ce:c8:d4:e4:21:f7:cf:4d:3b:ad:32:5d:79:a6:fd: 21:49:00:b3:d1:d8:e2:71:57:45:a3:13:0e:da:21: 46:69:0e:89:a1:64:cb:c7:33:b5:bc:23:89:70:15: fe:7b:84:7b:d0:b6:19:56:ad:ac:d0:9a:34:c6:b6: 30:e7:79:16:e3:06:ec:d2:fa:62:37:65:ee:bb:97: f0:e4:d2:c8:8d:fa:67:85:24:45:7a:4b:1d:83:ba: 17:99:47:43:60:c9:57:c1:bc:8b:2b:dd:82:d5:60: c2:eb:33:6c:34:2a:b8:3f:19:0d:14:02:f8:43:30: 95:26:ea:a8:85:97:4e:ca:6e:35:2d:2b:06:7a:83: 4e:e9:a5:c8:04:91:b8:b3:fc:ec:c5:a5:d2:ec:e0: 5b:8f:bc:71:20:60:f5:5d:b5:99:0f:75:b6:10:75: 96:8e:a4:0b:73:3d:36:fc:71:b5:6c:cf:30:7a:be: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3E:8C:EA:EA:67:5B:0B:C3:70:AA:5A:3A:BF:99:F4:CC:C1:BA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f2:23:bc:74:02:18:7b:b6:ff:bc:91:07:18:13:91:12:5a: 72:08:c8:be:c3:1a:29:5f:3e:0e:dd:7f:9e:58:bb:b3:1e:c0: 17:4b:39:14:4d:32:ad:1e:ea:fa:95:1d:17:db:25:fb:5a:c6: 32:9e:6e:bc:3f:1d:31:e8:d9:82:8a:90:bd:82:03:20:19:9d: 65:d3:0f:09:95:8a:c3:2c:08:24:fe:3a:d9:d8:74:f0:6c:d4: ea:03:17:fe:8d:f5:1f:91:b4:96:3b:e2:78:ee:a2:89:02:c5: 52:cf:31:2b:95:ec:4b:5b:1a:6c:09:92:69:16:05:fb:81:53: a4:e0:71:68:c2:b5:bd:30:23:95:a1:1c:61:99:e1:f1:05:26: 02:3e:0d:85:7e:0a:f2:8d:b2:4b:a4:93:69:eb:ad:e5:ad:ce: c7:a8:c3:73:7e:0e:52:73:35:23:29:88:74:d7:8e:db:0a:cb: 95:1b:a6:27:8b:b9:b5:19:e8:83:a1:18:eb:cc:a3:17:6d:fd: ef:ce:c1:97:a6:3b:8c:9c:25:f3:de:4f:03:00:a6:79:fb:36: c0:17:e7:70:2d:78:9e:b3:10:f2:58:90:3f:51:bc:ce:5b:1e: 57:8f:96:f6:e4:19:55:03:16:c9:f9:95:64:35:13:0b:10:39: 58:e0:a3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF7YGVeF3PIZz5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIyMFoXDTI0MTIxMTE4MjIyMFowLzEtMCsGA1UEAxMk ZjVkODJmZjItMmQzZS00NTIyLTk4ODktMmNmODlmZmVlZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNe+PbJmvT4wULFp+FJ6eH00soztNDTwe0zs f8z3P5voHSDrgPDSYiKjcTDFslzBB59dZ0wt4dexwpGOszGEm67BklmZTJOwkwHO yNTkIffPTTutMl15pv0hSQCz0djicVdFoxMO2iFGaQ6JoWTLxzO1vCOJcBX+e4R7 0LYZVq2s0Jo0xrYw53kW4wbs0vpiN2Xuu5fw5NLIjfpnhSRFeksdg7oXmUdDYMlX wbyLK92C1WDC6zNsNCq4PxkNFAL4QzCVJuqohZdOym41LSsGeoNO6aXIBJG4s/zs xaXS7OBbj7xxIGD1XbWZD3W2EHWWjqQLcz02/HG1bM8wer7JSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs+jOrqZ1sLw3CqWjq/mfTMwbpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTRiZjVhNTItM2MxOS0z YjU3LWEzMTQtZjk0NDlhMGEzYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACryI7x0Ahh7tv+8kQcYE5ESWnIIyL7DGilfPg7df55Yu7MewBdLORRN Mq0e6vqVHRfbJftaxjKebrw/HTHo2YKKkL2CAyAZnWXTDwmVisMsCCT+OtnYdPBs 1OoDF/6N9R+RtJY74njuookCxVLPMSuV7EtbGmwJkmkWBfuBU6TgcWjCtb0wI5Wh HGGZ4fEFJgI+DYV+CvKNskukk2nrreWtzseow3N+DlJzNSMpiHTXjtsKy5UbpieL ubUZ6IOhGOvMoxdt/e/OwZemO4ycJfPeTwMApnn7NsAX53AteJ6zEPJYkD9RvM5b HlePlvbkGVUDFsn5lWQ1EwsQOVjgo/g= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:13 2024 by rpki-client on console-fra.rpki-client.org