$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa File: 95ebfcdd-e246-31f5-bf4c-227b2114b836.roa (raw, json) Hash identifier: rLNtqWDqO1lEYVFg02feGvPWukkoDy2TBK7Xv0XE0kw= Subject key identifier: 22:09:88:00:E4:15:9C:89:C8:5A:F6:86:79:07:61:2B:FE:06:49:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847A30C0FF0775D7AE655539480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 7029 IP address blocks: 209.253.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0c:0f:f0:77:5d:7a:e6:55:53:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=78be21be-9dc1-4016-93a8-f4f9b92a4b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:bb:9e:9b:98:21:c9:ad:fb:bb:d6:3d:44: fa:c3:42:b6:9a:fe:08:7e:10:c1:fb:37:16:78:fe: 55:ab:1a:e8:d6:91:c8:24:6d:92:a8:ba:50:7b:28: 2f:4b:11:49:c9:e7:c6:a5:f5:20:e9:ad:4d:97:5e: 2e:ee:74:b9:57:72:82:8c:e2:70:50:dd:71:89:8f: 61:31:1d:91:cd:fc:a8:32:dd:c3:7b:ac:62:23:13: bc:f3:ff:d2:1f:6f:32:8a:db:1a:39:7f:8a:a1:85: d6:b0:d1:0e:7a:ba:dc:c1:2e:f6:a8:99:91:20:f9: 26:c2:2d:5e:09:c8:84:10:cb:83:56:69:7a:f7:ed: 0b:b3:86:a3:d4:32:28:c3:57:aa:03:fa:9b:09:79: dc:a5:c3:0f:3b:bf:f4:77:08:9a:f3:e3:69:cb:f5: 63:a5:5f:53:0b:48:77:bc:f1:69:bf:61:cb:6e:9b: 67:3e:e1:6b:4e:c2:93:9f:6a:ec:8b:45:68:93:8a: f4:38:24:c8:d3:57:03:f2:0f:03:8e:6f:d7:67:e2: 1b:a3:fe:70:82:27:1b:2e:68:a3:f1:e0:61:ff:fc: cc:82:f3:e7:a4:bc:51:1e:6b:fb:94:ce:bb:e0:5d: fb:5b:96:37:2a:84:bc:5d:58:c7:90:5a:5b:86:e0: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:09:88:00:E4:15:9C:89:C8:5A:F6:86:79:07:61:2B:FE:06:49:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ebfcdd-e246-31f5-bf4c-227b2114b836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4e:97:bc:99:c5:9d:54:75:26:11:af:8d:fb:d0:1a:35:22: b4:16:47:b9:22:e7:3d:e0:4c:d5:a8:42:69:6a:a2:ff:2a:e6: 36:f6:87:6b:62:5c:ea:6a:19:82:f4:1c:79:09:35:ef:78:93: 06:45:64:47:38:15:77:64:f8:dc:5f:85:c2:4d:a8:46:37:16: a1:40:db:d7:df:a1:ea:d7:7b:8f:c2:aa:0d:11:f1:e0:f8:01: 13:c9:49:37:33:63:e8:3a:6b:f4:9c:81:61:d2:6a:19:6b:e0: f0:53:f7:22:e5:01:3c:57:ab:1b:ea:1c:11:ad:31:66:ad:28: 78:ee:cf:ef:f6:24:9e:d5:70:0f:fb:d0:5e:e1:65:55:6d:70: eb:24:cb:d0:db:84:b2:0f:43:49:c7:c5:87:11:37:1b:99:2e: 93:02:18:64:c7:ff:39:c7:ae:e2:3e:7e:df:03:e3:6f:c5:bb: 23:e0:6e:4d:d6:07:6d:67:1d:b5:1e:3c:39:91:d9:62:4e:9f: ee:06:1b:c9:aa:f9:0f:ac:76:ba:e8:da:0f:13:31:b0:6c:7c: f0:ad:00:d5:9c:fc:01:b9:87:d8:19:b8:a0:ff:83:0c:78:0c: 6f:e2:67:df:82:16:6a:0c:86:f2:24:25:3e:f7:9f:94:8b:87: 43:91:6c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejDA/wd1165lVTlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk NzhiZTIxYmUtOWRjMS00MDE2LTkzYTgtZjRmOWI5MmE0YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBS7npuYIcmt+7vWPUT6w0K2mv4IfhDB+zcW eP5Vqxro1pHIJG2SqLpQeygvSxFJyefGpfUg6a1Nl14u7nS5V3KCjOJwUN1xiY9h MR2RzfyoMt3De6xiIxO88//SH28yitsaOX+KoYXWsNEOerrcwS72qJmRIPkmwi1e CciEEMuDVml69+0Ls4aj1DIow1eqA/qbCXncpcMPO7/0dwia8+Npy/VjpV9TC0h3 vPFpv2HLbptnPuFrTsKTn2rsi0Vok4r0OCTI01cD8g8Djm/XZ+Ibo/5wgicbLmij 8eBh//zMgvPnpLxRHmv7lM674F37W5Y3KoS8XVjHkFpbhuAbWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIJiADkFZyJyFr2hnkHYSv+Bkm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVlYmZjZGQtZTI0Ni0z MWY1LWJmNGMtMjI3YjIxMTRiODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0f3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1Ol7yZxZ1UdSYRr4370Bo1IrQWR7ki5z3gTNWoQmlqov8q5jb2h2ti XOpqGYL0HHkJNe94kwZFZEc4FXdk+NxfhcJNqEY3FqFA29ffoerXe4/Cqg0R8eD4 ARPJSTczY+g6a/ScgWHSahlr4PBT9yLlATxXqxvqHBGtMWatKHjuz+/2JJ7VcA/7 0F7hZVVtcOsky9DbhLIPQ0nHxYcRNxuZLpMCGGTH/znHruI+ft8D42/FuyPgbk3W B21nHbUePDmR2WJOn+4GG8mq+Q+sdrro2g8TMbBsfPCtANWc/AG5h9gZuKD/gwx4 DG/iZ9+CFmoMhvIkJT73n5SLh0ORbIc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:59 2024 by rpki-client on console-ams.rpki-client.org