$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa File: a2db5701-1c70-34d2-895b-b21eb98770cb.roa (raw, json) Hash identifier: 2PXymoWv+HFCMb6PVd6saKb8yZIdH848ONKUJ+/bjL0= Subject key identifier: 5C:7C:AB:EA:DF:07:BF:76:00:2F:13:CB:BB:A6:B4:A3:22:1C:D4:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552DAECAB4D19064881D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 68.143.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2d:ae:ca:b4:d1:90:64:88:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=feee7ab7-605d-44a1-bfb4-d36bc86b9196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:8b:59:85:3e:0e:dc:2f:42:ef:09:01:cc: 02:3b:17:a3:f8:fe:b5:2d:ee:fa:26:59:47:7e:e0: e1:a1:2f:33:b0:9f:fe:a5:84:42:38:5e:62:3f:89: 1e:e2:22:ba:46:25:9e:7d:59:fe:59:89:c6:57:eb: 61:00:94:27:e6:aa:c2:c7:4a:13:e9:31:cf:40:29: 1c:ce:08:31:6f:d8:bb:0a:3d:3e:7f:eb:4f:42:50: b9:39:8e:7b:60:78:b0:ca:6e:63:36:29:6e:bf:77: f8:af:40:c6:6a:5c:b4:39:3c:b7:ce:9a:d2:80:8d: ef:15:77:e0:43:74:02:0b:90:47:12:3b:61:5c:74: 41:f5:20:e5:47:58:02:6f:64:ac:b9:22:d1:7e:b8: f4:13:f5:b3:9f:9c:39:16:2b:bb:c3:8c:2d:1b:ac: 9d:67:83:50:5e:ec:63:01:eb:35:ab:7e:f4:5d:29: dc:ab:33:da:da:fc:19:b8:14:c8:dc:97:6c:d3:0f: d6:c0:50:52:3d:a8:ba:22:a4:83:e7:93:1f:19:ab: ff:01:ae:ae:13:87:75:7b:26:cf:b1:df:77:ba:37: c2:2d:d8:c8:cf:11:fe:f7:73:d0:0c:fa:11:b5:29: d4:c4:00:99:5c:cc:38:11:6a:2d:f0:55:a0:ff:6a: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7C:AB:EA:DF:07:BF:76:00:2F:13:CB:BB:A6:B4:A3:22:1C:D4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 68.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b6:e0:d1:b2:bc:20:f0:4d:6f:be:1e:41:59:51:e8:15:86: 61:35:2f:e0:e5:27:a5:11:53:61:e7:a9:9c:27:22:84:27:95: e2:3e:d2:d8:ef:49:f1:42:75:47:94:43:9e:c8:92:d9:23:c2: 85:d6:2b:7c:34:dd:da:31:c2:9e:dc:86:ac:6c:ed:3e:b4:8b: 3a:b6:a0:67:57:21:1e:18:21:3d:a9:db:19:df:33:75:29:8a: 6a:87:12:97:84:35:c1:59:a9:ad:9b:df:44:92:43:c2:73:e8: cd:91:a3:9d:66:9d:21:28:0f:52:29:42:8e:f1:0b:46:2a:7e: b9:77:90:f7:66:c0:d4:d2:64:bb:d1:33:55:9c:22:89:8f:4a: 82:b1:de:f2:3a:eb:6e:1a:c0:e3:62:83:1a:87:66:70:98:4d: 1d:cc:17:af:0e:68:b7:b8:19:4f:b2:28:3a:c1:34:9d:7c:72: a9:94:b4:c0:82:8b:3d:d3:ef:07:cd:38:35:f8:3d:cb:f7:db: 11:66:a8:65:5f:b8:a0:2b:0d:5c:cb:ca:2c:4a:cf:d4:c1:8a: 49:fc:b2:ce:bd:52:ff:c6:5d:ed:d3:6b:1f:34:fd:70:f8:48: c9:6a:62:4e:98:e2:78:5d:20:d4:f8:70:c7:5e:14:82:79:ea: cf:3e:8c:64 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVS2uyrTRkGSIHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZmVlZTdhYjctNjA1ZC00NGExLWJmYjQtZDM2YmM4NmI5MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqWLWYU+DtwvQu8JAcwCOxej+P61Le76JllH fuDhoS8zsJ/+pYRCOF5iP4ke4iK6RiWefVn+WYnGV+thAJQn5qrCx0oT6THPQCkc zggxb9i7Cj0+f+tPQlC5OY57YHiwym5jNiluv3f4r0DGaly0OTy3zprSgI3vFXfg Q3QCC5BHEjthXHRB9SDlR1gCb2SsuSLRfrj0E/Wzn5w5Fiu7w4wtG6ydZ4NQXuxj Aes1q370XSncqzPa2vwZuBTI3Jds0w/WwFBSPai6IqSD55MfGav/Aa6uE4d1eybP sd93ujfCLdjIzxH+93PQDPoRtSnUxACZXMw4EWot8FWg/2p4twIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFx8q+rfB792AC8Ty7umtKMiHNRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJkYjU3MDEtMWM3MC0z NGQyLTg5NWItYjIxZWI5ODc3MGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARI8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYrbg0bK8IPBNb74eQVlR6BWGYTUv4OUnpRFTYeepnCcihCeV4j7S2O9J 8UJ1R5RDnsiS2SPChdYrfDTd2jHCntyGrGztPrSLOragZ1chHhghPanbGd8zdSmK aocSl4Q1wVmprZvfRJJDwnPozZGjnWadISgPUilCjvELRip+uXeQ92bA1NJku9Ez VZwiiY9KgrHe8jrrbhrA42KDGodmcJhNHcwXrw5ot7gZT7IoOsE0nXxyqZS0wIKL PdPvB804Nfg9y/fbEWaoZV+4oCsNXMvKLErP1MGKSfyyzr1S/8Zd7dNrHzT9cPhI yWpiTpjieF0g1Phwx14Ugnnqzz6MZA== -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:23 2024 by rpki-client on console-fra.rpki-client.org