$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa File: a0faf63f-7c57-3279-8a19-b5c4db997e94.roa (raw, json) Hash identifier: idQuNQPzjijA71KVkBTAVugNdpnc+XdKfXtd1ExUC7I= Subject key identifier: 99:4C:47:9F:68:A9:3E:84:15:9D:1D:74:A1:79:3B:54:90:09:51:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847FB1A2BC475E7749678721300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa Signing time: Sun 24 Nov 2024 02:00:27 +0000 ROA not before: Sun 24 Nov 2024 02:00:27 +0000 ROA not after: Sat 22 Feb 2025 02:00:27 +0000 asID: 7029 IP address blocks: 69.40.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fb:1a:2b:c4:75:e7:74:96:78:72:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 24 02:00:27 2024 GMT Not After : Feb 22 02:00:27 2025 GMT Subject: CN=14c4a02e-dd56-4ea0-a48d-d11c03e5eaf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:cf:b0:59:ad:77:16:98:b2:ca:09:e9:1b: 62:f6:07:fb:17:8b:c5:18:56:a0:cb:21:81:24:4d: 87:8d:59:4b:51:9c:4b:de:2d:e5:dc:de:74:8d:5c: 2a:aa:ce:46:ee:c3:b8:58:1f:ee:b8:53:a6:62:81: ab:6c:61:31:0c:89:e8:bd:18:08:8c:92:74:e3:5c: 0f:72:4c:75:db:63:13:77:b3:31:2b:81:c1:74:e6: 45:3f:d2:5a:72:bf:c4:02:b4:b2:a1:46:ff:cb:3f: 91:44:80:2a:1d:18:d8:3d:9c:1c:40:b4:52:18:68: eb:80:c9:d8:31:f2:3e:e2:0e:94:66:96:1b:c2:95: d4:c2:8c:89:fb:b3:b0:a6:1f:57:46:5a:f3:bf:42: f1:b6:a9:cc:64:a9:f9:c9:9a:48:16:04:c7:4c:f0: b0:24:80:4f:a5:c9:d2:f4:69:0d:e3:b4:a4:c7:a3: ed:63:41:08:6d:6f:c4:d9:df:e4:67:a9:27:ae:73: 8c:53:7e:10:36:41:d9:7f:f6:1b:3d:3a:7e:78:69: 02:7e:e5:e4:53:65:51:2f:4e:4b:40:c9:6a:a2:ba: 26:89:aa:1d:e4:43:22:ca:17:5d:07:d1:e4:3b:50: b7:54:d8:1f:c7:7a:54:46:39:90:aa:86:38:9f:66: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4C:47:9F:68:A9:3E:84:15:9D:1D:74:A1:79:3B:54:90:09:51:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:82:62:a8:9c:d0:a7:2c:b3:65:8b:ee:d5:68:98:9a:25:8c: ac:93:5d:7a:fc:57:08:be:fc:25:9c:1e:89:d4:db:e3:6d:cf: b7:51:4b:ce:1f:b0:ec:73:3f:92:db:9a:2d:a0:d0:da:17:46: 08:31:0c:8d:43:8c:f5:de:b0:8f:4a:47:34:43:3f:62:53:af: f6:79:99:bb:0a:e5:6f:d6:c6:e1:96:ce:2e:ca:04:24:e8:d1: e1:10:c6:b5:7c:84:19:a1:86:1d:d3:3b:20:ee:48:ef:5d:78: 43:3f:02:59:b9:2a:99:1e:5e:ef:e3:94:b6:e2:6b:6e:48:b6: e7:14:87:5c:44:32:3b:1e:0c:35:69:65:c6:7f:72:50:f2:8b: 6a:ec:87:11:28:3c:87:32:ce:8c:e8:9b:3f:d8:ba:e8:a3:f3: f0:16:7a:fa:08:97:d8:92:9a:ba:44:d2:5c:ba:3f:19:09:bc: 09:d5:6a:e2:10:1f:f5:43:bb:6a:a0:a0:37:ba:95:cf:40:d5: c8:3b:a4:97:c0:ce:05:a3:1a:9c:4e:e8:06:9b:0e:bb:4f:cc: 66:a6:d4:b4:16:6d:c3:43:26:a6:a2:1c:87:a1:8b:f1:ec:d1: e1:d9:aa:0d:4e:77:96:44:e5:3a:30:fd:91:3d:0c:ab:f1:20: 03:5c:d6:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GivEded0lnhyEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk MTRjNGEwMmUtZGQ1Ni00ZWEwLWE0OGQtZDExYzAzZTVlYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKjPsFmtdxaYssoJ6Rti9gf7F4vFGFagyyGB JE2HjVlLUZxL3i3l3N50jVwqqs5G7sO4WB/uuFOmYoGrbGExDInovRgIjJJ041wP ckx122MTd7MxK4HBdOZFP9Jacr/EArSyoUb/yz+RRIAqHRjYPZwcQLRSGGjrgMnY MfI+4g6UZpYbwpXUwoyJ+7Owph9XRlrzv0LxtqnMZKn5yZpIFgTHTPCwJIBPpcnS 9GkN47Skx6PtY0EIbW/E2d/kZ6knrnOMU34QNkHZf/YbPTp+eGkCfuXkU2VRL05L QMlqoromiaod5EMiyhddB9HkO1C3VNgfx3pURjmQqoY4n2ZYlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlMR59oqT6EFZ0ddKF5O1SQCVFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBmYWY2M2YtN2M1Ny0z Mjc5LThhMTktYjVjNGRiOTk3ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASCYqic0Kcss2WL7tVomJoljKyTXXr8Vwi+/CWcHonU2+Ntz7dRS84f sOxzP5Lbmi2g0NoXRggxDI1DjPXesI9KRzRDP2JTr/Z5mbsK5W/WxuGWzi7KBCTo 0eEQxrV8hBmhhh3TOyDuSO9deEM/Alm5KpkeXu/jlLbia25ItucUh1xEMjseDDVp ZcZ/clDyi2rshxEoPIcyzozomz/Yuuij8/AWevoIl9iSmrpE0ly6PxkJvAnVauIQ H/VDu2qgoDe6lc9A1cg7pJfAzgWjGpxO6AabDrtPzGam1LQWbcNDJqaiHIehi/Hs 0eHZqg1Od5ZE5Tow/ZE9DKvxIANc1vo= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:23 2024 by rpki-client on console-fra.rpki-client.org