$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa File: 96754f7b-9547-3947-beca-f13dd9962e64.roa (raw, json) Hash identifier: LXZfslGKT2UE+vHBFhfaNZGZWEgQyg18Pltgphpg8dg= Subject key identifier: 8A:67:32:70:CA:2C:31:57:70:BA:A5:24:02:08:2D:8A:26:7D:AD:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40D20933153623CDA8B280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d2:09:33:15:36:23:cd:a8:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=6daef935-cc08-4d63-9862-c0d2c7670837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:20:f1:c8:d2:e2:4b:63:93:3a:02:69:97: 4d:3a:94:b2:4a:6f:ac:63:35:8c:d2:d3:fc:0a:ce: d1:d7:68:10:86:66:a7:f8:f5:c4:48:bf:00:25:63: e2:bb:76:0f:b2:76:36:bc:f8:d6:03:fc:6c:73:43: 5e:77:67:bc:64:a9:e9:de:74:fd:d5:da:a5:3c:97: 41:98:97:fc:c1:1d:7c:91:bb:e9:c7:ab:b8:ee:2d: 87:a3:6a:7d:c2:26:40:cf:48:89:e3:1c:ce:df:bf: ec:37:34:d3:9e:d4:b5:bc:89:e9:cc:78:ee:de:be: 65:75:66:f8:ec:8e:a6:19:62:6d:c3:2d:c8:54:21: 71:f5:13:33:1b:e1:15:8b:bb:a2:c2:16:c0:a7:6f: e2:ac:d5:9c:d2:b9:b9:3e:2d:ad:b1:0c:a4:f8:58: 38:09:78:a0:75:f5:59:e0:d6:e6:d5:6c:2f:f9:96: 16:2c:7e:74:c6:e2:da:bb:09:9e:a5:ff:0d:be:8d: 56:d8:57:7d:a3:90:ed:11:7c:1d:48:7f:5e:8d:90: ba:7d:e9:1d:e8:e4:0a:ff:77:da:ff:3d:d6:1f:89: 9a:a7:77:9e:9d:d4:ea:a3:9c:01:49:3e:68:47:8c: d3:0b:b0:25:78:b6:12:a5:62:1d:08:b6:06:26:a2: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:67:32:70:CA:2C:31:57:70:BA:A5:24:02:08:2D:8A:26:7D:AD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:89:f3:3d:6d:97:fa:b7:6b:54:76:ee:d6:8b:37:f8:04:0d: 1c:a7:17:0c:6e:10:00:bc:ac:14:81:09:91:4c:84:b3:96:56: a4:c7:7a:3e:46:ff:c1:fa:0d:95:55:1f:82:29:d2:f3:9c:d4: 59:06:cf:a1:02:9d:8c:b5:a3:c0:37:3d:e8:16:a4:1b:03:87: a4:0e:9b:4a:f0:6d:f5:7d:cd:8b:e0:b8:9e:08:fe:84:4c:27: a9:a4:0f:2a:69:ad:35:c8:e1:5c:dc:aa:86:40:26:84:0a:25: d2:82:b5:b2:1b:97:31:c6:df:c9:e1:05:2e:31:e3:9d:d2:2a: c1:55:81:1d:ec:6e:58:99:fa:9e:52:0a:fd:d2:f7:6c:1f:39: d1:e9:b2:7c:80:fe:c3:f0:8e:68:dc:35:dd:86:c6:3b:ec:5c: 34:57:49:8d:96:62:08:65:10:39:65:1e:ac:e4:8e:8b:5b:d1: 26:e9:59:4e:05:a8:6f:41:5e:c4:e3:bb:65:de:cd:79:5e:12: 51:48:a7:50:36:3b:fc:63:d4:4f:a9:32:ce:33:32:d4:d9:76: 48:ce:4e:10:0b:24:1f:33:a3:65:b8:bf:2a:03:00:be:4f:80: 3b:3d:a0:7e:8a:8c:0b:a4:69:18:2c:b3:f2:8b:aa:f8:4b:4b: 6c:32:de:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNIJMxU2I82osoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmRhZWY5MzUtY2MwOC00ZDYzLTk4NjItYzBkMmM3NjcwODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwQg8cjS4ktjkzoCaZdNOpSySm+sYzWM0tP8 Cs7R12gQhman+PXESL8AJWPiu3YPsnY2vPjWA/xsc0Ned2e8ZKnp3nT91dqlPJdB mJf8wR18kbvpx6u47i2Ho2p9wiZAz0iJ4xzO37/sNzTTntS1vInpzHju3r5ldWb4 7I6mGWJtwy3IVCFx9RMzG+EVi7uiwhbAp2/irNWc0rm5Pi2tsQyk+Fg4CXigdfVZ 4Nbm1Wwv+ZYWLH50xuLauwmepf8Nvo1W2Fd9o5DtEXwdSH9ejZC6fekd6OQK/3fa /z3WH4map3eendTqo5wBST5oR4zTC7AleLYSpWIdCLYGJqJfMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpnMnDKLDFXcLqlJAIILYomfa0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTY3NTRmN2ItOTU0Ny0z OTQ3LWJlY2EtZjEzZGQ5OTYyZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKJ8z1tl/q3a1R27taLN/gEDRynFwxuEAC8rBSBCZFMhLOWVqTHej5G /8H6DZVVH4Ip0vOc1FkGz6ECnYy1o8A3PegWpBsDh6QOm0rwbfV9zYvguJ4I/oRM J6mkDypprTXI4VzcqoZAJoQKJdKCtbIblzHG38nhBS4x453SKsFVgR3sbliZ+p5S Cv3S92wfOdHpsnyA/sPwjmjcNd2GxjvsXDRXSY2WYghlEDllHqzkjotb0SbpWU4F qG9BXsTju2XezXleElFIp1A2O/xj1E+pMs4zMtTZdkjOThALJB8zo2W4vyoDAL5P gDs9oH6KjAukaRgss/KLqvhLS2wy3jw= -----END CERTIFICATE-----Generated at Mon Nov 25 03:27:10 2024 by rpki-client on console-fra.rpki-client.org