$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3d8fce9-72eb-3e8d-8ed6-f50c61d76b32.roa File: b3d8fce9-72eb-3e8d-8ed6-f50c61d76b32.roa (raw, json) Hash identifier: 02pElMIa1ti1aBP5dGt9IMfHXsIDmR9CZeKWXmLqREM= Subject key identifier: A6:FC:30:04:37:75:90:27:4F:D5:50:C0:C5:7C:45:9C:7D:DA:40:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F6755376D9EF6B581140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3d8fce9-72eb-3e8d-8ed6-f50c61d76b32.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 50.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f6:75:53:76:d9:ef:6b:58:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=b9e8b22b-279c-4d6a-bf57-6ad7295e7313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:3f:13:f8:44:0a:0d:a9:32:a7:83:50:82: c7:79:7a:f9:ba:99:e0:8e:f0:0d:92:03:54:b2:66: 72:84:57:72:3f:d5:31:42:dd:11:f9:b6:d8:84:ba: 48:4e:fb:42:49:66:d3:6f:ea:27:82:77:31:3f:e4: 5d:11:6c:ef:4f:a1:bc:ec:57:ca:23:81:02:63:a2: ff:35:ec:fc:b9:4b:26:d0:5b:12:39:0c:b0:33:2d: f1:e5:be:08:c4:b1:df:43:1f:32:66:de:00:91:91: 89:35:9a:1f:95:e9:ce:11:0c:35:6e:ff:98:c8:80: 23:f3:ac:37:a5:02:c5:da:ac:ea:3b:45:69:6d:ea: 31:3e:4a:ae:c4:72:3b:b0:ca:ea:1a:ca:6e:c9:f2: a4:0b:60:b3:f5:32:a6:f8:47:a2:09:cb:3f:67:c8: 79:d0:9e:a2:ea:83:06:e5:23:89:fd:0f:c7:2f:04: 21:cf:cb:bc:6f:e1:ac:8c:15:fd:d5:ee:be:3e:a2: b6:0e:67:0e:b3:b2:7e:0c:00:63:45:bf:bc:d1:4f: 1d:ef:57:f5:95:e9:78:1b:2b:b0:56:80:b5:33:10: 64:05:28:84:25:3f:80:66:70:37:c7:0c:a2:66:c4: cb:f1:62:7f:f0:4c:99:47:91:84:db:6e:23:a1:9a: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FC:30:04:37:75:90:27:4F:D5:50:C0:C5:7C:45:9C:7D:DA:40:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3d8fce9-72eb-3e8d-8ed6-f50c61d76b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ce:97:e9:f1:c5:aa:27:76:a0:36:8d:53:3b:a6:80:c9:ca: 49:27:53:2b:02:da:d4:91:43:0d:0b:0e:ef:af:b3:77:35:90: 3b:14:a9:d2:61:e4:78:97:a1:0e:8b:64:bd:7e:10:a0:d7:ef: 98:41:16:b9:54:d0:d6:fa:bd:9b:68:99:f8:4c:6a:7f:de:d1: 07:11:c2:e9:15:55:7c:2c:0d:4b:bc:d6:d4:be:a9:b6:85:47: 96:d0:5b:70:9d:f1:19:f4:c5:74:c4:8c:68:5b:77:c2:7f:81: 39:97:19:ba:b3:ec:c9:05:b7:3e:25:30:3c:03:25:43:2e:6e: 3f:71:34:1a:54:8f:e8:41:d5:6e:02:a8:33:19:b7:81:03:f1: 4f:bd:b2:bf:73:50:9f:40:66:af:35:76:b6:ea:3f:33:46:4f: b3:3b:77:fc:fc:fc:e3:ce:0b:34:6a:a8:c3:55:5e:c9:1a:2a: 49:b1:b9:82:16:fa:2b:b4:52:2e:c9:3f:26:9b:3d:74:65:2b: d5:a6:17:44:03:ef:40:74:4e:07:a6:66:2e:01:4a:98:55:4f: c5:b9:2e:87:9c:13:86:82:ef:11:e6:31:52:d1:2f:30:13:03: 61:09:e7:91:0b:a4:23:f4:73:e4:ec:6c:f4:3c:82:37:c1:dd: 3a:ce:84:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPZ1U3bZ72tYEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YjllOGIyMmItMjc5Yy00ZDZhLWJmNTctNmFkNzI5NWU3MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wI/E/hECg2pMqeDUILHeXr5upngjvANkgNU smZyhFdyP9UxQt0R+bbYhLpITvtCSWbTb+ongncxP+RdEWzvT6G87FfKI4ECY6L/ Nez8uUsm0FsSOQywMy3x5b4IxLHfQx8yZt4AkZGJNZoflenOEQw1bv+YyIAj86w3 pQLF2qzqO0VpbeoxPkquxHI7sMrqGspuyfKkC2Cz9TKm+EeiCcs/Z8h50J6i6oMG 5SOJ/Q/HLwQhz8u8b+GsjBX91e6+PqK2DmcOs7J+DABjRb+80U8d71f1lel4Gyuw VoC1MxBkBSiEJT+AZnA3xwyiZsTL8WJ/8EyZR5GE224joZoG1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb8MAQ3dZAnT9VQwMV8RZx92kDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjNkOGZjZTktNzJlYi0z ZThkLThlZDYtZjUwYzYxZDc2YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPOl+nxxaondqA2jVM7poDJykknUysC2tSRQw0LDu+vs3c1kDsUqdJh 5HiXoQ6LZL1+EKDX75hBFrlU0Nb6vZtomfhMan/e0QcRwukVVXwsDUu81tS+qbaF R5bQW3Cd8Rn0xXTEjGhbd8J/gTmXGbqz7MkFtz4lMDwDJUMubj9xNBpUj+hB1W4C qDMZt4ED8U+9sr9zUJ9AZq81drbqPzNGT7M7d/z8/OPOCzRqqMNVXskaKkmxuYIW +iu0Ui7JPyabPXRlK9WmF0QD70B0TgemZi4BSphVT8W5LoecE4aC7xHmMVLRLzAT A2EJ55ELpCP0c+TsbPQ8gjfB3TrOhAY= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:27 2024 by rpki-client on console-fra.rpki-client.org