$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa File: 9761d531-6b31-3351-b19d-f5977ae11d1d.roa (raw, json) Hash identifier: NNF65XSN5aUEKhmKeqFLu7TF49AOPQbzIx+s4rTuzJ4= Subject key identifier: 1E:FE:4A:52:65:5D:4F:04:E0:69:13:53:46:C3:AA:3F:55:D2:D4:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858471A4381915B67C4D06AD46808 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa Signing time: Wed 04 Sep 2024 13:06:59 +0000 ROA not before: Wed 04 Sep 2024 13:06:59 +0000 ROA not after: Tue 03 Dec 2024 14:06:59 +0000 asID: 7029 IP address blocks: 50.96.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:43:81:91:5b:67:c4:d0:6a:d4:68:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 13:06:59 2024 GMT Not After : Dec 3 14:06:59 2024 GMT Subject: CN=bc37dd27-7966-4954-823a-858926172d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:d0:88:28:0b:b3:4d:71:f6:65:61:06:54: d2:94:72:4b:85:03:6c:1e:90:1a:29:ac:bf:e8:a0: 47:14:b4:18:85:0f:ef:28:fa:7f:cc:a4:fe:22:8f: eb:a7:58:f4:4e:fa:07:ab:2e:74:c7:5b:fb:e9:7f: 16:4a:0d:34:d5:e9:4a:b8:79:24:37:4a:a9:48:65: 3b:f6:0f:32:43:5d:9a:58:3f:56:83:0d:04:52:9c: e4:8a:2f:9c:d9:5f:b1:de:d3:d6:01:8c:e2:08:49: 6f:8f:ca:8b:98:91:bc:37:80:41:10:b7:f8:73:4f: 76:93:89:c3:22:ac:e6:03:31:94:f9:1a:86:4a:bb: aa:dc:bf:dc:13:51:9c:25:6c:d6:1d:4a:05:a3:ae: 48:79:79:c2:0e:4f:8b:c7:a4:ba:28:c3:52:af:8f: f4:22:7d:15:f1:fd:47:01:15:ed:ea:59:cc:95:69: fa:b7:41:be:78:b3:68:d6:b0:9b:e6:e9:aa:00:d4: a2:b2:77:3e:22:c2:31:99:12:5b:f0:99:97:36:ea: 1c:34:6d:ad:b1:a6:05:02:ea:cd:50:5a:0f:6d:01: 65:c3:f5:52:11:7c:54:cd:3e:fe:4d:26:13:44:83: 22:a2:51:73:4f:3b:f6:ee:78:29:90:6c:59:85:b4: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FE:4A:52:65:5D:4F:04:E0:69:13:53:46:C3:AA:3F:55:D2:D4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:88:a9:28:3b:be:5a:41:ab:e8:ad:77:69:fc:5e:d6:d2:d0: 67:ac:e5:3e:aa:17:b4:64:8d:99:e9:45:55:2f:fe:ef:41:81: 3e:2c:5b:b0:b6:d6:8b:c9:34:40:49:e0:34:8c:05:79:18:c7: e7:32:c7:a9:93:df:78:ae:ff:08:8d:bc:3a:59:1c:64:48:92: 4c:24:2d:80:48:e8:36:7a:99:9f:ad:79:a8:e8:47:80:23:c5: a4:7a:36:14:77:f6:8f:97:53:98:bf:9a:8d:54:e2:ee:9b:a3: 7d:a9:f6:f6:16:6e:53:11:04:db:47:a3:a3:8f:15:c2:22:48: 4a:f1:fa:7f:e5:44:d4:7c:a3:c5:fa:9a:d4:68:73:02:86:56: eb:b5:da:b5:f8:2b:4d:f8:c1:81:9e:02:99:cb:40:08:56:f5: 40:17:92:af:1a:e3:30:c9:ad:18:c6:a0:c6:f3:18:74:12:30: f0:96:5b:99:e0:4c:69:d3:a4:a1:6c:f4:39:27:a0:56:47:37: be:4d:b0:ea:ee:2f:ef:09:f2:76:55:7e:72:31:ae:18:95:31: 69:1c:a6:5a:68:64:d2:8e:a1:d9:82:c0:6b:2c:f3:6d:b1:ac: a9:e1:e5:58:25:0a:68:41:c6:a0:56:c7:51:29:d3:2c:d5:93: 24:16:76:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcaQ4GRW2fE0GrUaAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNDEzMDY1OVoXDTI0MTIwMzE0MDY1OVowLzEtMCsGA1UEAxMk YmMzN2RkMjctNzk2Ni00OTU0LTgyM2EtODU4OTI2MTcyZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7PQiCgLs01x9mVhBlTSlHJLhQNsHpAaKay/ 6KBHFLQYhQ/vKPp/zKT+Io/rp1j0TvoHqy50x1v76X8WSg001elKuHkkN0qpSGU7 9g8yQ12aWD9Wgw0EUpzkii+c2V+x3tPWAYziCElvj8qLmJG8N4BBELf4c092k4nD IqzmAzGU+RqGSruq3L/cE1GcJWzWHUoFo65IeXnCDk+Lx6S6KMNSr4/0In0V8f1H ARXt6lnMlWn6t0G+eLNo1rCb5umqANSisnc+IsIxmRJb8JmXNuocNG2tsaYFAurN UFoPbQFlw/VSEXxUzT7+TSYTRIMiolFzTzv27ngpkGxZhbSskQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7+SlJlXU8E4GkTU0bDqj9V0tSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2MWQ1MzEtNmIzMS0z MzUxLWIxOWQtZjU5NzdhZTExZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmIqSg7vlpBq+itd2n8XtbS0Ges5T6qF7RkjZnpRVUv/u9BgT4sW7C2 1ovJNEBJ4DSMBXkYx+cyx6mT33iu/wiNvDpZHGRIkkwkLYBI6DZ6mZ+teajoR4Aj xaR6NhR39o+XU5i/mo1U4u6bo32p9vYWblMRBNtHo6OPFcIiSErx+n/lRNR8o8X6 mtRocwKGVuu12rX4K034wYGeApnLQAhW9UAXkq8a4zDJrRjGoMbzGHQSMPCWW5ng TGnTpKFs9DknoFZHN75NsOruL+8J8nZVfnIxrhiVMWkcplpoZNKOodmCwGss822x rKnh5VglCmhBxqBWx1Ep0yzVkyQWdtc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:13 2024 by rpki-client on console-fra.rpki-client.org