$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa File: a7029d70-d556-3ba1-983d-457b97a89e40.roa (raw, json) Hash identifier: X7sXS+26nhmZ3iXXAsM9lna7atNHB1sp0NqS1MMiKKA= Subject key identifier: 86:85:B9:F9:23:66:5D:CF:68:AE:5C:08:ED:BA:9D:37:F4:78:ED:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AA068A3D504B0AB516757C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa Signing time: Sat 26 Oct 2024 01:00:31 +0000 ROA not before: Sat 26 Oct 2024 01:00:31 +0000 ROA not after: Fri 24 Jan 2025 02:00:31 +0000 asID: 27338 IP address blocks: 74.8.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:aa:06:8a:3d:50:4b:0a:b5:16:75:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 01:00:31 2024 GMT Not After : Jan 24 02:00:31 2025 GMT Subject: CN=942a927d-7bfc-4018-97a1-1e3df5db99de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fe:8b:91:b0:24:43:4d:b5:dd:6c:3c:8a:74: 03:3d:c2:f3:27:75:17:ad:b6:12:1d:8d:79:7b:58: 87:1c:28:28:b5:15:77:55:89:38:b1:cd:b4:1a:51: fd:83:ef:7e:fb:6a:32:d9:83:73:0a:50:61:32:5b: 12:99:2c:c1:43:61:3f:24:ce:e7:76:9b:fb:d0:b9: 91:28:0c:d7:90:32:8e:40:9d:d8:52:bc:11:cd:01: fd:3c:46:9c:6f:20:81:3d:5f:52:53:79:2d:fa:97: f6:00:f0:59:33:b2:0b:dd:0d:75:64:8f:32:ed:d1: d4:19:49:4c:16:52:73:f8:a6:60:83:e1:e3:b9:4c: 65:f8:bf:82:5e:a5:ed:bd:85:e7:fd:18:23:46:0f: c2:3d:43:fd:3c:b8:ca:1a:d0:f6:01:1a:fb:bd:6b: f1:75:1a:35:b8:fc:d3:48:42:8f:09:59:5f:39:7c: cb:0d:b6:dc:c2:3c:f6:32:bd:41:2b:9f:66:f7:e4: a4:cf:c9:39:11:ad:5a:97:7f:b8:f8:ab:d1:0e:30: 9d:fc:45:3f:66:c6:24:fa:c5:a6:2e:96:8f:c5:7e: b7:20:34:05:af:60:38:eb:0d:e1:b0:17:02:86:ad: 1b:ba:f1:b7:39:b0:17:69:ee:19:2d:1e:16:78:16: dc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:85:B9:F9:23:66:5D:CF:68:AE:5C:08:ED:BA:9D:37:F4:78:ED:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7029d70-d556-3ba1-983d-457b97a89e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7a:1d:9b:5d:4f:55:eb:90:b1:39:30:be:f6:70:4a:d7:0b: 97:9d:b7:51:5e:dd:09:3e:bb:04:06:32:19:8c:c5:d7:d8:13: a6:29:04:4e:64:c7:80:c1:c9:bd:7c:ab:ea:de:89:b3:a3:4d: bf:33:95:ac:52:88:76:4b:d2:ac:d1:ee:0f:76:7a:0e:e4:72: 82:a1:4a:67:49:10:2f:55:92:ca:b4:97:39:e4:31:f8:de:3f: 02:59:c2:5d:f0:fc:35:2d:1c:eb:67:0c:c6:ca:ba:a8:46:27: a5:1d:33:ca:e1:7c:ff:d6:9f:cb:be:3c:82:53:9b:bf:ed:9c: 8b:fc:1a:cc:66:03:1c:1e:fe:04:8b:27:89:f6:53:81:ac:6e: c5:d7:29:e0:5f:26:71:a5:9a:4b:72:0d:e8:6a:6f:c5:d0:55: 26:cb:f5:58:63:1c:7e:57:6b:3f:ac:d9:99:cb:64:8b:29:8e: bf:de:4f:da:ac:5f:ac:eb:cd:f4:4d:17:8a:fc:32:d6:80:3a: 0b:15:a0:a6:6e:3e:62:b2:0a:04:71:e5:9e:cc:08:0c:6f:04: e0:6e:15:d3:92:04:62:ef:a4:0b:1a:f8:b2:34:65:9b:06:75: 87:ae:8a:1e:0a:24:69:3d:66:11:96:ca:a3:76:e5:1b:d8:71: 88:36:f0:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeqBoo9UEsKtRZ1fEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjAxMDAzMVoXDTI1MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk OTQyYTkyN2QtN2JmYy00MDE4LTk3YTEtMWUzZGY1ZGI5OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv6LkbAkQ0213Ww8inQDPcLzJ3UXrbYSHY15 e1iHHCgotRV3VYk4sc20GlH9g+9++2oy2YNzClBhMlsSmSzBQ2E/JM7ndpv70LmR KAzXkDKOQJ3YUrwRzQH9PEacbyCBPV9SU3kt+pf2APBZM7IL3Q11ZI8y7dHUGUlM FlJz+KZgg+HjuUxl+L+CXqXtvYXn/RgjRg/CPUP9PLjKGtD2ARr7vWvxdRo1uPzT SEKPCVlfOXzLDbbcwjz2Mr1BK59m9+Skz8k5Ea1al3+4+KvRDjCd/EU/ZsYk+sWm LpaPxX63IDQFr2A46w3hsBcChq0buvG3ObAXae4ZLR4WeBbcLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaFufkjZl3PaK5cCO26nTf0eO0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTcwMjlkNzAtZDU1Ni0z YmExLTk4M2QtNDU3Yjk3YTg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgheMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB6HZtdT1XrkLE5ML72cErXC5edt1Fe3Qk+uwQGMhmMxdfYE6YpBE5k x4DByb18q+reibOjTb8zlaxSiHZL0qzR7g92eg7kcoKhSmdJEC9Vksq0lznkMfje PwJZwl3w/DUtHOtnDMbKuqhGJ6UdM8rhfP/Wn8u+PIJTm7/tnIv8GsxmAxwe/gSL J4n2U4GsbsXXKeBfJnGlmktyDehqb8XQVSbL9VhjHH5Xaz+s2ZnLZIspjr/eT9qs X6zrzfRNF4r8MtaAOgsVoKZuPmKyCgRx5Z7MCAxvBOBuFdOSBGLvpAsa+LI0ZZsG dYeuih4KJGk9ZhGWyqN25RvYcYg28Ns= -----END CERTIFICATE-----Generated at Fri Nov 22 04:21:56 2024 by rpki-client on console-fra.rpki-client.org