$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa File: abeb276b-390d-319e-8b39-73e7483a65f9.roa (raw, json) Hash identifier: tdModbyJiFkdDb/wNvRjyNrdwI+VGjN5tfVgW3r4yQQ= Subject key identifier: 4C:9C:E7:67:2A:A4:DD:03:E1:42:95:1B:1E:C3:BD:73:07:F5:3A:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40D28CF11FC9394C8A5D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:d2:8c:f1:1f:c9:39:4c:8a:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=f3773289-ce8b-4a1e-a298-df1feca6cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:51:9c:cf:1e:8a:08:f2:8d:bb:de:f0:2e: 93:90:41:59:c0:e5:34:1c:19:5e:5a:61:20:dc:b3: 08:a0:e9:12:ae:d4:fb:f3:e0:c9:d2:ac:54:ca:0f: 48:86:c3:db:63:ba:d3:15:cc:33:d2:c5:ed:42:24: 9d:b3:c7:d5:89:47:53:9a:23:ba:c6:cf:b0:37:a2: ea:57:2a:ed:97:98:0f:f2:a1:ff:f1:24:08:ad:fa: c3:46:69:78:70:0a:f5:6e:73:7a:4e:91:7f:f5:c6: ae:2d:15:42:aa:10:17:69:23:47:f9:ac:69:6b:02: d6:61:84:96:8b:5b:9e:39:da:93:7e:69:bd:32:54: 97:06:6f:81:24:58:9b:1f:f8:03:e4:b4:76:0e:d7: c5:d5:f9:ab:66:41:16:75:0d:f7:f4:a9:04:e6:eb: eb:7c:d1:40:77:90:73:42:c4:a6:78:5b:3d:47:22: f3:40:fd:7f:15:1f:e7:05:2f:ff:6a:de:00:f1:9e: 51:57:8f:50:a1:6c:29:75:e8:b8:96:11:7b:49:3b: 2e:37:2b:8f:eb:45:39:99:f0:73:52:5a:87:dc:d3: 17:b3:ff:b9:6d:9d:08:d1:95:b3:72:7c:8f:5e:19: 32:28:86:3f:35:2e:1b:d4:f8:63:25:5f:a3:99:2e: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9C:E7:67:2A:A4:DD:03:E1:42:95:1B:1E:C3:BD:73:07:F5:3A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3a:1d:78:09:c2:ea:b4:22:41:54:88:07:c7:ce:25:92:b4: b9:dc:81:a7:e7:6d:2f:47:b1:b7:ea:0d:44:cb:5f:45:1d:e6: 95:b9:ce:6d:fb:c7:33:4b:0c:73:7f:6b:1c:f1:c3:67:a0:09: 4b:1a:80:e9:e2:96:a9:bb:4f:f5:43:44:27:b4:c7:58:79:9d: 75:59:7a:90:34:8b:16:4d:9f:82:b0:63:5e:2b:d1:fc:6d:81: be:e4:ee:c6:32:c1:44:f2:1b:98:bf:37:7d:53:67:39:31:7d: 22:10:e3:36:38:e9:f0:15:88:f5:19:fd:51:d6:c9:c8:92:9d: a3:51:06:94:05:85:f2:9c:cd:24:6b:ee:2d:fa:67:b2:8f:f5: a1:38:d6:ff:27:b8:b2:62:4d:17:ba:a7:e6:f5:9d:7a:1b:da: 75:c0:60:41:4c:6e:d4:14:78:fd:35:58:05:7d:87:b6:92:67: 02:22:b2:e1:77:b5:7e:d0:4e:ad:10:66:6a:3b:c1:f6:71:c7: 56:81:71:bd:36:84:97:14:22:27:36:67:03:cd:a7:6b:f7:49: 6e:5c:b0:fb:b9:e9:2c:f5:98:78:87:88:15:c8:14:eb:85:dc: 0e:a4:cf:93:b4:09:dc:e2:68:d2:98:88:e6:bf:72:e9:03:21: 25:69:48:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNKM8R/JOUyKXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjM3NzMyODktY2U4Yi00YTFlLWEyOTgtZGYxZmVjYTZjYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFpRnM8eigjyjbve8C6TkEFZwOU0HBleWmEg 3LMIoOkSrtT78+DJ0qxUyg9IhsPbY7rTFcwz0sXtQiSds8fViUdTmiO6xs+wN6Lq Vyrtl5gP8qH/8SQIrfrDRml4cAr1bnN6TpF/9cauLRVCqhAXaSNH+axpawLWYYSW i1ueOdqTfmm9MlSXBm+BJFibH/gD5LR2DtfF1fmrZkEWdQ339KkE5uvrfNFAd5Bz QsSmeFs9RyLzQP1/FR/nBS//at4A8Z5RV49QoWwpdei4lhF7STsuNyuP60U5mfBz UlqH3NMXs/+5bZ0I0ZWzcnyPXhkyKIY/NS4b1PhjJV+jmS6gzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyc52cqpN0D4UKVGx7DvXMH9TrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJlYjI3NmItMzkwZC0z MTllLThiMzktNzNlNzQ4M2E2NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH86HXgJwuq0IkFUiAfHziWStLncgafnbS9HsbfqDUTLX0Ud5pW5zm37 xzNLDHN/axzxw2egCUsagOnilqm7T/VDRCe0x1h5nXVZepA0ixZNn4KwY14r0fxt gb7k7sYywUTyG5i/N31TZzkxfSIQ4zY46fAViPUZ/VHWyciSnaNRBpQFhfKczSRr 7i36Z7KP9aE41v8nuLJiTRe6p+b1nXob2nXAYEFMbtQUeP01WAV9h7aSZwIisuF3 tX7QTq0QZmo7wfZxx1aBcb02hJcUIic2ZwPNp2v3SW5csPu56Sz1mHiHiBXIFOuF 3A6kz5O0CdziaNKYiOa/cukDISVpSO4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:17 2024 by rpki-client on console-fra.rpki-client.org