$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cb9bbea-3b43-307c-928a-58b7cc76e080.roa File: 9cb9bbea-3b43-307c-928a-58b7cc76e080.roa (raw, json) Hash identifier: eXQUS3GHqUAfLd4fKC/G9J6FwPX7Lrw5W4Cg4u9Ow24= Subject key identifier: FD:82:B8:4A:3D:33:E3:46:BA:9C:EB:87:83:FB:7E:E9:2A:0B:B2:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40DBA16F1321AB0B6FD680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cb9bbea-3b43-307c-928a-58b7cc76e080.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 75.117.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:db:a1:6f:13:21:ab:0b:6f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=cf5fdb5a-771b-472b-ab9e-189841b1821d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:72:67:d9:ae:51:e5:2c:6c:33:27:ec:50:f6: 64:73:04:87:8d:88:7f:13:09:cc:43:81:2c:12:46: 30:85:c3:36:e2:d5:85:93:b5:5c:85:b6:86:e3:79: 0e:08:14:1b:dc:41:61:04:1f:22:b5:b7:09:29:d4: 5f:45:80:cb:be:41:5d:57:32:92:af:e3:b7:b5:9d: cb:16:51:be:fa:5f:92:b0:80:bd:85:b4:d5:4f:03: 9f:61:84:00:97:c2:82:16:3a:02:e8:25:7f:03:83: a6:07:d1:3a:7a:6a:a2:c7:f8:4a:9d:3b:d4:eb:a8: 7e:70:d1:a0:7c:d5:e2:75:e6:5d:9d:20:57:01:9d: eb:c8:26:5e:df:06:1c:db:61:2d:81:a6:57:05:77: 79:5f:84:e9:f3:89:4c:39:a4:d6:9a:ea:db:06:ac: e9:9e:b1:a7:9f:32:34:03:ac:ca:0a:37:fa:21:a1: eb:99:3b:45:33:e5:14:12:ec:0e:49:7d:bb:53:6d: ba:c6:b4:1c:c1:0c:f2:16:01:22:e7:70:8c:b1:c5: 5c:43:ef:20:55:a6:5d:91:7b:46:75:48:5e:8e:bb: 41:bb:b8:b0:88:5b:bc:a7:98:c9:38:04:1b:c4:7a: e0:0e:b6:ed:57:bd:36:5a:78:36:fe:2e:1d:c5:f7: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:82:B8:4A:3D:33:E3:46:BA:9C:EB:87:83:FB:7E:E9:2A:0B:B2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cb9bbea-3b43-307c-928a-58b7cc76e080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4c:d9:30:ed:d7:b0:47:76:bf:5c:b7:64:8c:9a:95:18:4d: bc:1f:96:24:e3:73:c5:1c:c0:91:d6:50:ee:79:24:bb:ae:ba: fe:d0:a4:a1:62:21:bf:58:df:dc:70:b9:f4:95:43:20:c2:e3: 5b:01:ca:35:7a:09:7a:81:99:62:c7:20:1a:7e:01:b9:38:4f: 6c:ac:8b:99:99:49:b5:82:21:26:74:5b:a5:30:a8:d2:c9:92: d0:37:c2:1b:eb:78:d4:c4:43:05:86:75:9c:3e:9f:d4:06:6c: 2c:9a:ad:05:7f:5c:a5:26:31:2f:41:69:1b:b6:23:6a:1c:90: 01:3e:f8:b8:0f:71:c0:31:44:27:84:2f:d8:d1:28:a3:5c:28: 23:36:3c:67:0f:51:72:ee:d2:59:96:2f:d1:25:84:2c:59:c6: b0:e8:f4:c9:b0:ef:49:1a:93:59:ae:2c:c1:db:16:b5:ba:12: 3b:d2:62:d1:03:91:94:88:5e:8a:da:2d:f2:3b:78:87:75:ca: 97:29:57:03:78:0a:b1:54:73:55:5e:b0:8d:0a:12:e0:cb:42: 9e:b1:b6:85:06:27:d9:25:50:48:87:73:2f:e9:28:38:5b:bd: d8:8e:e1:16:58:34:1a:ed:4b:f9:6d:f6:e9:37:9d:82:7d:29: e1:c5:b2:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNuhbxMhqwtv1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2Y1ZmRiNWEtNzcxYi00NzJiLWFiOWUtMTg5ODQxYjE4MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHJn2a5R5SxsMyfsUPZkcwSHjYh/EwnMQ4Es EkYwhcM24tWFk7VchbaG43kOCBQb3EFhBB8itbcJKdRfRYDLvkFdVzKSr+O3tZ3L FlG++l+SsIC9hbTVTwOfYYQAl8KCFjoC6CV/A4OmB9E6emqix/hKnTvU66h+cNGg fNXideZdnSBXAZ3ryCZe3wYc22EtgaZXBXd5X4Tp84lMOaTWmurbBqzpnrGnnzI0 A6zKCjf6IaHrmTtFM+UUEuwOSX27U226xrQcwQzyFgEi53CMscVcQ+8gVaZdkXtG dUhejrtBu7iwiFu8p5jJOAQbxHrgDrbtV702Wng2/i4dxfeDGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2CuEo9M+NGupzrh4P7fukqC7IXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNiOWJiZWEtM2I0My0z MDdjLTkyOGEtNThiN2NjNzZlMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNM2TDt17BHdr9ct2SMmpUYTbwfliTjc8UcwJHWUO55JLuuuv7QpKFi Ib9Y39xwufSVQyDC41sByjV6CXqBmWLHIBp+Abk4T2ysi5mZSbWCISZ0W6UwqNLJ ktA3whvreNTEQwWGdZw+n9QGbCyarQV/XKUmMS9BaRu2I2ockAE++LgPccAxRCeE L9jRKKNcKCM2PGcPUXLu0lmWL9ElhCxZxrDo9Mmw70kak1muLMHbFrW6EjvSYtED kZSIXoraLfI7eId1ypcpVwN4CrFUc1VesI0KEuDLQp6xtoUGJ9klUEiHcy/pKDhb vdiO4RZYNBrtS/lt9uk3nYJ9KeHFsvg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:14 2024 by rpki-client on console-fra.rpki-client.org