$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa File: acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa (raw, json) Hash identifier: qFVpURUAoFmdeODelJuDXQH/LITwL3KolEwsQVjoEVM= Subject key identifier: 11:8E:D5:C8:30:50:C5:98:38:74:2D:23:E1:0F:61:BD:86:F5:A7:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EA3CE9E726D9E7FBFA3C3E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa Signing time: Mon 18 Nov 2024 01:01:50 +0000 ROA not before: Mon 18 Nov 2024 01:01:50 +0000 ROA not after: Sun 16 Feb 2025 01:01:50 +0000 asID: 7029 IP address blocks: 71.30.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:3c:e9:e7:26:d9:e7:fb:fa:3c:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 18 01:01:50 2024 GMT Not After : Feb 16 01:01:50 2025 GMT Subject: CN=550f0a38-362e-4773-bfec-0e5d843505ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0d:85:5b:e2:8f:a1:63:e4:17:fe:d8:cf:4b: 6a:2b:8b:4b:e5:73:8d:3a:2b:1d:11:6f:ef:aa:a1: 5f:b6:76:49:1d:9d:a9:1e:d7:1c:38:19:11:a6:95: 5d:e9:5b:91:5c:96:b8:64:dd:7b:6e:e0:03:c1:d8: 2e:4b:fb:2c:e8:d0:4c:de:f5:73:70:c7:51:d8:97: 66:2a:15:dd:dd:d9:26:cc:23:0b:76:1e:38:9f:07: 84:50:df:85:9d:3f:a9:0f:b7:cb:d5:68:d7:2f:62: 3f:94:79:ad:92:9a:f6:c0:cb:8e:69:ae:e7:72:67: 3f:73:67:71:32:88:7b:63:8a:c0:71:96:c9:14:69: 44:37:ae:fe:27:c4:0f:2a:04:85:b2:e6:13:fe:77: a7:fa:91:5a:5b:15:2d:10:cf:64:ca:15:d4:d5:f9: e5:c1:e3:20:34:67:95:4b:d0:64:8f:a8:14:c6:0e: 95:cd:b8:ac:29:87:2e:2a:b4:59:59:7a:ce:51:d5: 04:aa:1b:73:ec:64:e0:7a:c3:71:79:91:0d:13:18: 2f:7c:ef:c3:8d:40:f6:c0:3a:6b:b3:f8:9e:f3:85: 78:04:cb:07:94:d1:a2:c6:e3:f4:e5:26:46:fa:15: 21:ee:56:ef:30:7c:39:1a:bf:b1:05:5b:5f:b8:b4: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8E:D5:C8:30:50:C5:98:38:74:2D:23:E1:0F:61:BD:86:F5:A7:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:49:eb:40:4d:b0:c5:dd:a4:b8:06:74:e7:66:b5:74:e2:f3: fb:76:e3:77:09:f6:3e:20:b7:23:55:0d:3c:41:82:1e:f1:67: 99:b1:fb:62:8f:70:e4:2e:87:4b:63:3a:d3:bc:1c:19:1f:aa: 70:80:a4:06:93:33:52:df:a0:98:1c:f4:27:1d:07:09:ed:f9: 7c:d6:35:5a:b4:09:e0:ee:be:d7:8e:5e:db:b4:37:bf:48:c9: 14:1c:83:f3:f6:67:de:c1:6a:d7:ea:3f:8b:c8:1e:ff:c9:34: c5:48:ce:bc:4e:96:c6:f4:72:46:ee:a9:17:a7:25:52:81:5c: 44:de:24:54:a9:c5:42:79:b9:9b:c7:43:a7:23:0b:a6:ee:94: 9f:e4:05:cb:cc:ac:29:2c:8e:bb:d6:26:d7:06:4b:61:ba:59: ad:4f:de:1a:d8:c4:be:25:30:c1:72:01:fd:cc:9c:13:cb:76: 76:26:4a:df:40:44:c7:e0:af:7b:61:48:3f:79:5d:87:0e:3e: e7:18:c0:c6:a2:99:26:bc:00:f9:9f:5b:33:7a:bd:66:eb:26: fb:ac:64:32:b9:d6:c4:08:69:1f:35:38:d0:dd:46:d6:0e:f0: 45:1a:30:a3:7a:ac:9b:51:b9:cc:28:29:5e:82:08:73:d8:7b: b8:e6:2a:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqPOnnJtnn+/o8PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExODAxMDE1MFoXDTI1MDIxNjAxMDE1MFowLzEtMCsGA1UEAxMk NTUwZjBhMzgtMzYyZS00NzczLWJmZWMtMGU1ZDg0MzUwNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg2FW+KPoWPkF/7Yz0tqK4tL5XONOisdEW/v qqFftnZJHZ2pHtccOBkRppVd6VuRXJa4ZN17buADwdguS/ss6NBM3vVzcMdR2Jdm KhXd3dkmzCMLdh44nweEUN+FnT+pD7fL1WjXL2I/lHmtkpr2wMuOaa7ncmc/c2dx Moh7Y4rAcZbJFGlEN67+J8QPKgSFsuYT/nen+pFaWxUtEM9kyhXU1fnlweMgNGeV S9Bkj6gUxg6VzbisKYcuKrRZWXrOUdUEqhtz7GTgesNxeZENExgvfO/DjUD2wDpr s/ie84V4BMsHlNGixuP05SZG+hUh7lbvMHw5Gr+xBVtfuLRGtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGO1cgwUMWYOHQtI+EPYb2G9aeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNmZGIzMTgtZTgyYy0z NmM5LWFjNGUtNTYzNmVjNDc1ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZJ60BNsMXdpLgGdOdmtXTi8/t243cJ9j4gtyNVDTxBgh7xZ5mx+2KP cOQuh0tjOtO8HBkfqnCApAaTM1LfoJgc9CcdBwnt+XzWNVq0CeDuvteOXtu0N79I yRQcg/P2Z97BatfqP4vIHv/JNMVIzrxOlsb0ckbuqRenJVKBXETeJFSpxUJ5uZvH Q6cjC6bulJ/kBcvMrCksjrvWJtcGS2G6Wa1P3hrYxL4lMMFyAf3MnBPLdnYmSt9A RMfgr3thSD95XYcOPucYwMaimSa8APmfWzN6vWbrJvusZDK51sQIaR81ONDdRtYO 8EUaMKN6rJtRucwoKV6CCHPYe7jmKrQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:04 2024 by rpki-client on console-ams.rpki-client.org