$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa File: abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa (raw, json) Hash identifier: X1pRXPd+fFJUqEYZCQe+QEuFtICd0oHMeuWbJKHX1Is= Subject key identifier: DC:82:AB:47:84:59:16:59:83:06:37:AA:D8:01:E7:DA:98:F3:80:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858471A436CFFF9ACC40CD4EF1E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa Signing time: Wed 04 Sep 2024 13:06:49 +0000 ROA not before: Wed 04 Sep 2024 13:06:49 +0000 ROA not after: Tue 03 Dec 2024 14:06:49 +0000 asID: 7029 IP address blocks: 50.96.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:43:6c:ff:f9:ac:c4:0c:d4:ef:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 13:06:49 2024 GMT Not After : Dec 3 14:06:49 2024 GMT Subject: CN=ba138e0f-5822-46a1-8efe-b914036d58d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:1c:4d:f1:ba:63:ac:bc:10:92:22:e2:88: f9:4a:6c:8d:22:c5:fc:b2:8c:a2:fe:0a:f4:11:3b: 16:46:e4:52:fb:f3:6d:5d:03:01:f0:fb:68:39:89: 2d:82:f4:91:84:6f:4f:c9:ad:b2:ec:20:6d:7f:99: eb:f5:ca:a4:b3:dd:57:aa:ae:63:40:78:22:c6:a6: 33:8b:c9:de:50:c6:85:80:47:eb:e1:df:06:99:1c: a7:9b:b5:88:d3:11:2a:57:47:d4:46:17:26:71:c9: cf:fd:90:40:79:32:a5:50:31:55:25:95:b4:94:c7: d1:56:be:28:83:8d:5e:2c:3c:2a:20:45:69:f2:af: 6e:6d:4c:a5:42:d9:28:30:26:99:48:35:c7:c7:e1: 97:57:94:f7:95:b3:73:59:42:79:6a:c0:39:06:cc: e1:b1:d8:c0:a5:97:cf:5a:2a:a4:c8:3b:e0:f6:ae: e4:4a:a8:c2:9f:92:c0:a1:22:84:9a:ac:6a:c4:76: 07:91:15:cd:5f:e6:f9:56:9a:92:fc:e1:4b:00:c3: 6f:01:fb:4f:21:5b:7b:b4:ab:23:e5:d0:fa:b0:9e: 19:70:35:85:49:af:6b:93:1a:a2:d5:18:14:eb:ce: 76:44:0e:ea:6b:6a:31:19:01:68:c4:73:48:0e:87: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:AB:47:84:59:16:59:83:06:37:AA:D8:01:E7:DA:98:F3:80:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ee:e0:e9:67:1a:20:ac:d3:b3:c2:40:eb:2c:5b:61:ac:cd: 96:6a:ef:da:e6:14:cc:60:63:d7:b5:da:82:b1:ba:06:e2:3d: 63:6f:29:4d:d3:f6:50:89:f1:fe:41:d7:88:3a:85:8a:d3:4e: b9:03:a7:c1:c9:a9:6d:89:a8:d9:7b:72:0a:9c:39:ff:ae:89: 1d:41:2d:72:fe:52:1e:b8:b2:f8:43:86:01:41:d1:ce:0d:28: b7:02:78:ab:3f:99:02:4a:9c:8c:73:4e:d2:15:63:fc:c2:c9: 48:cf:79:a1:00:05:b0:9c:89:ef:ce:9e:1f:16:a4:e9:ca:75: 39:55:d0:be:d8:07:37:54:f5:90:02:e6:8e:81:26:59:6e:90: 33:0b:ca:90:ef:17:24:a3:bf:a9:1b:87:00:a7:81:0f:e3:7b: 98:0c:db:1e:ed:77:8b:39:cd:76:a6:34:af:02:33:d8:6d:86: 2b:98:32:28:1a:61:83:da:4a:00:b4:50:4a:e8:14:9a:a8:53: 2b:98:53:e3:cc:b3:74:0a:65:5e:e6:64:07:a8:eb:c4:f4:8f: ed:90:0f:92:2f:ff:e2:f4:ac:b1:4c:b8:c7:23:9e:30:09:05: 75:8e:37:e6:34:e2:64:1b:7e:c9:4a:3f:1f:48:af:a5:0d:8a: 9e:05:0f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcaQ2z/+azEDNTvHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNDEzMDY0OVoXDTI0MTIwMzE0MDY0OVowLzEtMCsGA1UEAxMk YmExMzhlMGYtNTgyMi00NmExLThlZmUtYjkxNDAzNmQ1OGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAococTfG6Y6y8EJIi4oj5SmyNIsX8soyi/gr0 ETsWRuRS+/NtXQMB8PtoOYktgvSRhG9Pya2y7CBtf5nr9cqks91Xqq5jQHgixqYz i8neUMaFgEfr4d8GmRynm7WI0xEqV0fURhcmccnP/ZBAeTKlUDFVJZW0lMfRVr4o g41eLDwqIEVp8q9ubUylQtkoMCaZSDXHx+GXV5T3lbNzWUJ5asA5BszhsdjApZfP WiqkyDvg9q7kSqjCn5LAoSKEmqxqxHYHkRXNX+b5VpqS/OFLAMNvAftPIVt7tKsj 5dD6sJ4ZcDWFSa9rkxqi1RgU6852RA7qa2oxGQFoxHNIDofz6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyCq0eEWRZZgwY3qtgB59qY84CxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJjYzlmMDAtYjE2ZS0z YTlhLTg0YTQtMGFjNmViMmMwNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnu4OlnGiCs07PCQOssW2GszZZq79rmFMxgY9e12oKxugbiPWNvKU3T 9lCJ8f5B14g6hYrTTrkDp8HJqW2JqNl7cgqcOf+uiR1BLXL+Uh64svhDhgFB0c4N KLcCeKs/mQJKnIxzTtIVY/zCyUjPeaEABbCcie/Onh8WpOnKdTlV0L7YBzdU9ZAC 5o6BJllukDMLypDvFySjv6kbhwCngQ/je5gM2x7td4s5zXamNK8CM9hthiuYMiga YYPaSgC0UEroFJqoUyuYU+PMs3QKZV7mZAeo68T0j+2QD5Iv/+L0rLFMuMcjnjAJ BXWON+Y04mQbfslKPx9Ir6UNip4FD6g= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:04 2024 by rpki-client on console-ams.rpki-client.org