$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa File: a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa (raw, json) Hash identifier: LyzH2KB5u/M2njpV9zYGkQLNEGVVTXymc01Vm1+lF20= Subject key identifier: 3C:B6:CB:51:C4:87:00:C8:59:29:73:90:48:DD:97:8E:C9:FB:95:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550CB308CF63EA81606280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.176.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0c:b3:08:cf:63:ea:81:60:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=2896d71f-9a96-40dc-9c8b-fafa9a8b8e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:dd:5a:08:3b:80:17:5f:71:95:71:79:ed: 00:ed:b5:c2:a5:84:b8:95:21:a5:7e:01:e9:73:a0: 77:19:78:2e:95:72:9a:1c:d5:35:e4:a7:e0:9e:b7: 6d:6d:58:b1:0e:62:1c:44:c4:53:9b:0e:9d:73:26: f1:11:b3:6a:75:ae:6a:b6:67:1f:f3:b4:8c:f9:37: cb:29:cc:60:35:e9:4c:f2:20:1c:9f:d1:aa:b7:e0: e0:a9:4b:ec:1b:6f:f3:8a:0f:95:d8:d1:c1:61:d1: f1:52:a6:b2:5b:04:9d:ce:47:66:63:e5:49:95:99: d3:ce:2f:11:2d:27:ac:b8:88:f5:c5:89:be:db:aa: 63:26:2f:b1:27:e1:18:af:7b:9b:0a:9b:d5:72:5c: 67:67:b0:b5:6d:0a:9f:df:3c:7a:17:94:91:56:4e: 43:e7:b6:d9:93:52:dd:f7:24:bd:ab:59:c4:d4:c2: 53:80:f6:a9:25:10:bd:fb:36:30:8d:6e:e2:2c:24: cb:4a:83:20:47:28:b9:36:9b:98:64:1a:52:a1:98: 6d:21:1a:96:cc:da:3f:c7:3c:2b:e0:d4:c5:18:1e: e8:16:26:8c:b6:e0:a1:05:2d:d5:74:ef:99:aa:81: 34:23:46:9e:cc:20:6a:40:ba:e7:4a:31:43:a9:5e: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B6:CB:51:C4:87:00:C8:59:29:73:90:48:DD:97:8E:C9:FB:95:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.176.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9f:5c:dc:7d:2d:7d:00:70:23:b6:8f:bd:4e:8b:ac:0f:79: 43:d2:ba:12:fa:3c:2b:a1:e6:d8:86:11:9a:ab:4a:90:c0:3d: 4b:8b:82:c1:a1:0a:af:9b:45:05:51:20:07:b9:51:45:02:b9: 84:2e:e4:3c:66:22:f6:8d:25:60:99:b8:49:2d:49:b9:db:e1: cb:cd:dc:f5:95:ab:f2:64:2a:b3:20:b7:5d:b9:38:3f:e4:1c: db:25:14:c6:7d:b3:ba:22:42:88:50:a7:76:3c:30:e4:bb:96: a6:e9:5c:16:76:bf:f3:f9:7a:df:15:b6:de:81:41:0c:ee:d3: f2:96:77:52:89:cd:b7:f2:f7:8b:58:cb:e8:a3:b0:77:c6:cd: 0c:a9:ae:90:ec:5d:5f:f8:ac:15:82:5a:bb:81:f7:7b:47:d7: b5:0a:7a:c1:a9:46:53:0e:38:6e:57:75:c5:2d:31:7d:02:55: 7f:1b:39:6f:15:a4:f4:c9:e4:eb:3b:fd:5e:51:31:c1:d9:76: 54:c9:ba:4c:a9:ba:44:a2:be:09:16:52:88:f9:ce:03:c4:8a: ed:30:e4:5d:b1:70:2d:0a:be:de:81:95:2b:8f:cb:fa:ee:6c: 17:d5:22:e0:71:84:ef:4c:e4:08:6c:1d:81:37:c1:f0:0e:3c: ef:fd:9c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQyzCM9j6oFgYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk Mjg5NmQ3MWYtOWE5Ni00MGRjLTljOGItZmFmYTlhOGI4ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFbdWgg7gBdfcZVxee0A7bXCpYS4lSGlfgHp c6B3GXgulXKaHNU15KfgnrdtbVixDmIcRMRTmw6dcybxEbNqda5qtmcf87SM+TfL KcxgNelM8iAcn9Gqt+DgqUvsG2/zig+V2NHBYdHxUqayWwSdzkdmY+VJlZnTzi8R LSesuIj1xYm+26pjJi+xJ+EYr3ubCpvVclxnZ7C1bQqf3zx6F5SRVk5D57bZk1Ld 9yS9q1nE1MJTgPapJRC9+zYwjW7iLCTLSoMgRyi5NpuYZBpSoZhtIRqWzNo/xzwr 4NTFGB7oFiaMtuChBS3VdO+ZqoE0I0aezCBqQLrnSjFDqV7MqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy2y1HEhwDIWSlzkEjdl47J+5WGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTg3ZDg0NjMtMTM3ZS0z YTQzLWEzOWItNWI1YWJmZDA4ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6fXNx9LX0AcCO2j71Oi6wPeUPSuhL6PCuh5tiGEZqrSpDAPUuLgsGh Cq+bRQVRIAe5UUUCuYQu5DxmIvaNJWCZuEktSbnb4cvN3PWVq/JkKrMgt125OD/k HNslFMZ9s7oiQohQp3Y8MOS7lqbpXBZ2v/P5et8Vtt6BQQzu0/KWd1KJzbfy94tY y+ijsHfGzQyprpDsXV/4rBWCWruB93tH17UKesGpRlMOOG5XdcUtMX0CVX8bOW8V pPTJ5Os7/V5RMcHZdlTJukypukSivgkWUoj5zgPEiu0w5F2xcC0Kvt6BlSuPy/ru bBfVIuBxhO9M5AhsHYE3wfAOPO/9nLE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:52 2024 by rpki-client on console-ams.rpki-client.org