$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa File: a1550d1f-e3fe-3776-a892-790b38196ecf.roa (raw, json) Hash identifier: nA6EXQP1XcXGfCVU+koOtxpYIhragiJLCTFmfyojz48= Subject key identifier: 1E:45:BE:0B:B2:59:78:0B:E9:DE:C4:B8:5D:6B:18:73:26:8E:4A:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553AE1B71F356A7A17D900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 209.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3a:e1:b7:1f:35:6a:7a:17:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=4a12102b-ec40-445e-8d8b-14df66198280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:c0:6b:ae:04:7b:f9:97:16:f2:e7:2c:d6: 69:36:69:67:85:3d:96:f0:f8:a6:f8:99:84:a5:68: e5:94:ab:69:87:33:f3:8e:a5:7e:a3:86:dc:e7:f4: 9a:cc:c4:fe:14:b6:9a:92:69:45:58:54:7b:0d:e7: 2c:91:fb:0c:49:95:45:a1:36:9c:e9:56:1d:12:86: f9:4c:9c:2e:38:b2:66:92:74:bf:11:5d:97:90:2c: 9a:83:2d:69:2a:8d:fe:63:36:d0:55:ad:b9:f1:06: a6:52:a3:a6:0a:16:2b:c8:40:9b:43:d0:f8:9d:b6: 3e:7f:6f:ab:c8:c4:87:55:ef:2e:6b:bc:82:8c:74: 26:63:be:16:2f:03:df:3b:a9:04:27:9e:59:7f:b1: b1:29:3a:97:6e:df:75:66:1a:2d:7a:ca:be:17:d9: bf:e8:0b:aa:07:22:d3:92:83:81:f7:08:9f:d8:cd: 06:37:02:4b:ae:e9:4d:62:37:e1:34:dd:f5:da:c8: 2d:73:31:11:52:a4:00:d9:d1:8f:33:a1:9a:2d:4c: b3:d8:c9:5e:a7:29:be:d3:30:21:1e:b8:ca:a9:51: 6a:c9:dd:3a:52:92:77:15:c2:dd:2b:8b:33:64:25: 0c:06:c3:a0:95:69:5a:94:5b:50:8b:e3:a7:c6:66: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:BE:0B:B2:59:78:0B:E9:DE:C4:B8:5D:6B:18:73:26:8E:4A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1550d1f-e3fe-3776-a892-790b38196ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f8:12:c9:b1:af:c9:21:ab:f9:8a:7c:22:b2:ac:93:b6:17: 42:82:e0:31:3b:a3:97:92:d3:1a:2c:e6:1b:48:ff:56:37:17: 8a:12:c8:ee:f8:2e:25:95:c2:24:0a:fb:36:5d:f9:de:32:94: a0:4c:13:d4:6d:87:a0:f2:fd:4c:05:41:f6:45:56:d1:00:bd: 0e:3c:69:e4:6a:bd:02:d9:d4:22:aa:9d:73:00:16:cc:fa:d3: f6:99:2a:72:72:ab:88:be:9a:a0:36:37:e2:06:50:37:f6:9a: 4c:2b:af:15:2b:93:e2:f6:59:fe:41:ae:ef:61:24:8b:9d:9e: eb:f4:ff:66:c9:0e:4b:da:ba:63:c6:f3:af:ae:ec:ac:35:fd: 53:0b:83:52:d7:8e:28:18:15:0f:9c:bf:4a:f2:9f:27:4b:08: ed:f6:fc:46:4a:66:b7:29:1e:ac:f9:a3:71:01:f8:a0:ff:f9: b4:11:f6:42:fc:c9:a8:93:f2:51:af:d2:8c:3e:3f:c5:0b:f6: 95:fa:cb:9f:20:a5:4d:2c:91:a6:af:9e:2f:0e:76:44:45:5a: e4:29:0e:a7:71:f5:4e:96:2d:29:d9:c9:a5:dd:02:b9:69:10: 3d:9d:34:35:1b:94:31:9e:ea:42:eb:f5:4c:9c:f7:72:70:89: 41:3c:b5:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVTrhtx81anoX2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NGExMjEwMmItZWM0MC00NDVlLThkOGItMTRkZjY2MTk4MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQbAa64Ee/mXFvLnLNZpNmlnhT2W8Pim+JmE pWjllKtphzPzjqV+o4bc5/SazMT+FLaakmlFWFR7DecskfsMSZVFoTac6VYdEob5 TJwuOLJmknS/EV2XkCyagy1pKo3+YzbQVa258QamUqOmChYryECbQ9D4nbY+f2+r yMSHVe8ua7yCjHQmY74WLwPfO6kEJ55Zf7GxKTqXbt91Zhotesq+F9m/6AuqByLT koOB9wif2M0GNwJLrulNYjfhNN312sgtczERUqQA2dGPM6GaLUyz2Mlepym+0zAh HrjKqVFqyd06UpJ3FcLdK4szZCUMBsOglWlalFtQi+OnxmZX/QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB5FvguyWXgL6d7EuF1rGHMmjkq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1NTBkMWYtZTNmZS0z Nzc2LWE4OTItNzkwYjM4MTk2ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0TwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATPgSybGvySGr+Yp8IrKsk7YXQoLgMTujl5LTGizmG0j/VjcXihLI7vgu JZXCJAr7Nl353jKUoEwT1G2HoPL9TAVB9kVW0QC9Djxp5Gq9AtnUIqqdcwAWzPrT 9pkqcnKriL6aoDY34gZQN/aaTCuvFSuT4vZZ/kGu72Eki52e6/T/ZskOS9q6Y8bz r67srDX9UwuDUteOKBgVD5y/SvKfJ0sI7fb8RkpmtykerPmjcQH4oP/5tBH2QvzJ qJPyUa/SjD4/xQv2lfrLnyClTSyRpq+eLw52REVa5CkOp3H1TpYtKdnJpd0CuWkQ PZ00NRuUMZ7qQuv1TJz3cnCJQTy1tQ== -----END CERTIFICATE-----Generated at Mon Nov 25 03:27:13 2024 by rpki-client on console-fra.rpki-client.org