$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97341f8e-825c-3658-a5aa-76dd8e003791.roa File: 97341f8e-825c-3658-a5aa-76dd8e003791.roa (raw, json) Hash identifier: f9p/B5afgu0sSi2EU3tGNElRn6qvANuAb8AGZ+p6V5I= Subject key identifier: 60:B1:B4:2C:B5:C3:2F:90:2C:FB:7E:F7:9F:E7:F6:43:73:22:BD:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15541239893B083CAE9D7A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97341f8e-825c-3658-a5aa-76dd8e003791.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 20337 IP address blocks: 205.232.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:41:23:98:93:b0:83:ca:e9:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=660b7247-2650-47d2-8937-dc8df2d0ce4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:79:31:6a:26:c2:e0:86:45:61:68:8f:c5: e6:53:a5:b9:2b:7c:4d:33:be:41:f3:98:83:cf:62: b4:73:5f:ce:85:3b:61:0e:71:bf:a0:99:a7:c4:6b: c0:d3:40:86:08:5d:e6:76:3e:8e:ab:94:22:aa:42: 9c:cf:07:71:f6:e5:0e:17:03:04:29:d4:23:53:c5: 57:e0:19:04:99:85:3a:d4:33:1d:34:54:2f:ad:58: 9b:21:b7:e1:73:d2:05:15:7c:61:3a:3e:73:d4:fb: 39:dc:0f:2f:a7:a7:c9:87:b6:4a:31:02:42:84:8c: 11:28:93:e3:fa:fe:8f:a3:d6:37:ef:b4:88:6c:3a: 32:77:d1:0b:b2:95:55:2c:48:a4:e3:7f:6c:31:7c: 09:e2:ed:5d:74:72:a6:50:53:a2:67:67:b3:fa:0f: e3:ee:fc:b7:61:bc:a9:7b:3c:fb:40:97:dc:98:4e: 8f:b3:00:44:ed:c1:6c:0e:17:ad:e0:f9:3b:c7:d5: e4:13:2a:00:2c:15:70:80:6f:00:04:46:76:78:7b: 93:41:b6:ec:cd:1a:ea:a0:71:50:2e:98:a9:84:17: 55:31:db:f3:60:25:f5:36:04:76:e0:cf:63:b3:e2: a8:bd:d5:b3:40:79:42:45:90:5c:3a:96:33:b5:6d: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:B4:2C:B5:C3:2F:90:2C:FB:7E:F7:9F:E7:F6:43:73:22:BD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97341f8e-825c-3658-a5aa-76dd8e003791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ae:99:34:37:e8:56:77:6e:80:5d:85:4d:b2:4c:39:c0:71: 08:42:9c:2e:84:92:a5:c5:d6:9e:da:c7:ec:84:7f:bc:3a:3d: 99:e5:ec:e2:72:34:04:75:e4:67:60:d8:58:85:0d:a7:26:ff: a2:91:9c:9c:d8:63:f9:a1:82:ae:28:7d:1e:6f:95:92:fb:91: d3:c6:f2:4f:e8:e4:3e:2c:3f:d8:4e:d6:c9:1b:cf:77:d9:bd: a8:0f:d3:c5:e0:b7:be:bf:d8:d5:27:6a:97:0f:2a:31:c5:31: 92:71:b2:9d:01:04:5d:0d:dc:17:51:c7:8d:43:50:33:d9:0a: 2a:f7:d4:35:23:78:5b:4b:8a:c1:d6:ba:d7:4b:8a:93:7d:1e: 3b:66:87:52:23:d0:bb:e5:9d:0f:82:c8:f0:a7:d4:47:c5:0a: cb:9f:ac:a9:7d:cd:a0:a0:bf:54:68:c6:4f:6c:13:a4:ef:d4: ee:87:df:7d:24:80:aa:10:a0:7f:34:13:11:1c:6d:ab:c2:e2: 34:a8:dd:ea:87:d9:45:12:95:4d:3c:34:15:24:24:52:ef:a5: c7:81:51:3f:1e:e7:89:e5:3a:15:20:3d:7d:a5:4d:ad:bb:ff: 32:2b:9e:82:68:0e:54:8b:1f:72:90:ba:e7:b8:e3:8d:c3:e7: 8d:98:f2:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUEjmJOwg8rp16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NjYwYjcyNDctMjY1MC00N2QyLTg5MzctZGM4ZGYyZDBjZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4x5MWomwuCGRWFoj8XmU6W5K3xNM75B85iD z2K0c1/OhTthDnG/oJmnxGvA00CGCF3mdj6Oq5QiqkKczwdx9uUOFwMEKdQjU8VX 4BkEmYU61DMdNFQvrVibIbfhc9IFFXxhOj5z1Ps53A8vp6fJh7ZKMQJChIwRKJPj +v6Po9Y377SIbDoyd9ELspVVLEik439sMXwJ4u1ddHKmUFOiZ2ez+g/j7vy3Ybyp ezz7QJfcmE6PswBE7cFsDhet4Pk7x9XkEyoALBVwgG8ABEZ2eHuTQbbszRrqoHFQ LpiphBdVMdvzYCX1NgR24M9js+KovdWzQHlCRZBcOpYztW09awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCxtCy1wy+QLPt+95/n9kNzIr2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTczNDFmOGUtODI1Yy0z NjU4LWE1YWEtNzZkZDhlMDAzNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzegcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiumTQ36FZ3boBdhU2yTDnAcQhCnC6EkqXF1p7ax+yEf7w6PZnl7OJy NAR15Gdg2FiFDacm/6KRnJzYY/mhgq4ofR5vlZL7kdPG8k/o5D4sP9hO1skbz3fZ vagP08Xgt76/2NUnapcPKjHFMZJxsp0BBF0N3BdRx41DUDPZCir31DUjeFtLisHW utdLipN9Hjtmh1Ij0LvlnQ+CyPCn1EfFCsufrKl9zaCgv1Roxk9sE6Tv1O6H330k gKoQoH80ExEcbavC4jSo3eqH2UUSlU08NBUkJFLvpceBUT8e54nlOhUgPX2lTa27 /zIrnoJoDlSLH3KQuue4443D542Y8qc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:29 2024 by rpki-client on console-ams.rpki-client.org