$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa File: aa02ecbb-d6aa-3708-9e14-93c170317571.roa (raw, json) Hash identifier: XsEG8oi4HizVakt3QwJm8wWav0KiUDTbJ/oQ9zDRTLU= Subject key identifier: AD:B9:E0:45:D5:30:96:5E:4F:4F:2F:12:07:B8:8C:5B:46:7B:1A:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EE8A3469155C80505B930860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 71.28.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:34:69:15:5c:80:50:5b:93:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=2e14035a-2a58-4ddc-ae48-15d3889059bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:a9:d8:7c:8d:ec:86:c6:a7:1e:56:9a:98: e9:8f:45:05:ed:91:51:ff:11:43:aa:60:30:d6:7c: d5:6b:25:00:65:f8:35:9a:95:cb:ed:4b:8a:03:a0: c3:06:c1:43:7d:13:c8:e0:44:92:c5:94:09:54:56: 68:13:b2:da:4d:83:fa:d5:c2:33:b2:52:ba:ac:52: d7:2f:fe:7e:32:7c:26:bf:00:bc:e0:c3:e0:8c:5a: a4:6c:ca:6f:1b:9b:7f:8f:2b:e8:b1:41:a7:a7:d9: bb:22:ea:48:9b:78:cc:2b:f9:be:42:0d:fc:b0:b8: 2b:4b:35:4d:27:63:ae:28:37:33:d8:3e:02:82:cd: 8f:79:47:51:cd:29:7e:e6:01:34:f0:66:d6:aa:55: f4:20:b7:6a:68:af:2a:61:06:c2:08:cb:28:6f:01: 7e:be:15:56:7e:72:76:57:87:f8:9b:d7:c8:63:01: 9f:d7:9e:2d:47:a3:d3:d5:fd:1a:54:a9:54:19:2e: 47:9f:f2:0a:07:79:a3:f1:2b:39:cb:ce:de:e0:8e: b2:91:07:ba:f1:f8:50:eb:87:d8:b8:ca:3d:85:a8: ac:64:77:63:9c:c3:91:f9:e9:3a:12:aa:e2:e6:33: 35:ef:d2:8f:13:1b:d0:48:42:eb:0f:1b:d1:04:63: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B9:E0:45:D5:30:96:5E:4F:4F:2F:12:07:B8:8C:5B:46:7B:1A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:75:08:05:a7:5c:60:96:74:a1:e3:26:d2:c2:96:ac:ba:9d: 62:4f:61:a8:1c:79:e0:35:57:94:11:63:0f:22:d1:9a:d8:c2: fe:e3:62:ca:c6:ac:68:a9:b9:85:23:ae:ad:7f:6f:f2:f7:29: c4:4c:85:ef:91:db:56:10:f8:62:c0:34:c6:c1:ba:66:36:0e: c9:97:5a:ad:39:2e:ed:e1:aa:44:d8:c8:12:57:d8:76:fe:9d: 65:85:2d:2c:8d:05:b6:c5:71:99:c0:43:48:ca:d2:ed:91:c7: 66:1c:a2:d5:fd:df:00:3c:02:96:d7:e4:28:22:64:7c:fd:1f: 8d:a6:06:b1:7e:54:a1:fb:d2:2b:05:28:d0:3a:93:b2:88:9c: 66:0a:7d:25:7e:67:fd:7c:e9:4a:8b:3e:34:65:46:38:32:56: 8f:28:15:a1:1d:da:f9:d0:3d:aa:59:4c:1b:1c:8b:22:a6:a3: 54:5c:89:f2:df:a8:5c:3e:43:f7:85:de:2d:d8:34:1a:15:bc: a1:36:6a:9f:db:38:1b:1f:ce:ba:3a:87:20:d5:7a:08:a6:d2: 09:81:20:8c:88:70:7d:a9:92:31:00:29:e2:71:fa:cc:b3:b5: 03:5f:03:ec:f4:74:1c:b9:25:4b:ac:1c:9e:e2:36:3b:ac:96: 9d:1b:0f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijRpFVyAUFuTCGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk MmUxNDAzNWEtMmE1OC00ZGRjLWFlNDgtMTVkMzg4OTA1OWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmep2HyN7IbGpx5Wmpjpj0UF7ZFR/xFDqmAw 1nzVayUAZfg1mpXL7UuKA6DDBsFDfRPI4ESSxZQJVFZoE7LaTYP61cIzslK6rFLX L/5+MnwmvwC84MPgjFqkbMpvG5t/jyvosUGnp9m7IupIm3jMK/m+Qg38sLgrSzVN J2OuKDcz2D4Cgs2PeUdRzSl+5gE08GbWqlX0ILdqaK8qYQbCCMsobwF+vhVWfnJ2 V4f4m9fIYwGf154tR6PT1f0aVKlUGS5Hn/IKB3mj8Ss5y87e4I6ykQe68fhQ64fY uMo9haisZHdjnMOR+ek6Eqri5jM179KPExvQSELrDxvRBGMH5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK254EXVMJZeT08vEge4jFtGexpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEwMmVjYmItZDZhYS0z NzA4LTllMTQtOTNjMTcwMzE3NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp1CAWnXGCWdKHjJtLClqy6nWJPYagceeA1V5QRYw8i0ZrYwv7jYsrG rGipuYUjrq1/b/L3KcRMhe+R21YQ+GLANMbBumY2DsmXWq05Lu3hqkTYyBJX2Hb+ nWWFLSyNBbbFcZnAQ0jK0u2Rx2YcotX93wA8ApbX5CgiZHz9H42mBrF+VKH70isF KNA6k7KInGYKfSV+Z/186UqLPjRlRjgyVo8oFaEd2vnQPapZTBsciyKmo1RcifLf qFw+Q/eF3i3YNBoVvKE2ap/bOBsfzro6hyDVegim0gmBIIyIcH2pkjEAKeJx+syz tQNfA+z0dBy5JUusHJ7iNjuslp0bDxA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:17 2024 by rpki-client on console-fra.rpki-client.org