$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa File: b5514b8f-46aa-3af8-998f-2a0964724887.roa (raw, json) Hash identifier: rmhSdITYW8WdzYyV4a+4VzSX7UfZqoeEvOi9wHuHmbc= Subject key identifier: A5:D2:3E:82:1A:A8:25:F0:3A:FF:91:90:7B:5F:2F:AE:FB:21:34:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15508C3CF92086308656380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 207.222.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:08:c3:cf:92:08:63:08:65:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=18f9c8f6-4c80-4792-9940-d907a49e7a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:35:79:7f:b3:68:e0:9d:91:d1:ad:6d:32: 5c:aa:b5:ef:8a:a6:88:e9:8a:f0:6b:33:02:b8:3b: 45:67:01:3b:5b:10:d0:62:24:31:36:47:b4:80:c7: 92:b0:e0:5f:72:84:e0:0b:3b:65:ff:89:2a:40:a2: 28:cc:25:bc:da:89:f2:28:bc:a9:47:92:29:24:c3: 50:94:0b:8a:a2:e9:54:08:1c:17:d8:c5:1d:35:94: d1:12:29:ef:64:d1:0a:4b:dc:09:a4:ff:d2:90:b6: f1:6d:19:f1:11:c0:7a:08:b4:6e:04:5f:0a:3a:85: 43:ee:91:9c:a0:12:63:34:b0:cc:d3:42:c3:0b:13: 14:1c:b5:4c:19:cd:9a:ee:37:a7:3a:7e:0e:b3:18: 1b:f8:1d:53:ec:93:a4:a6:71:2f:b3:cf:1e:8e:56: ae:94:be:30:2a:59:53:41:5b:d4:51:e7:44:11:9e: 12:8e:26:39:eb:5a:6c:6a:96:7e:0b:18:4d:d4:87: 01:b6:ce:d8:00:8b:46:ed:f6:ff:f5:9b:1d:74:27: 8b:86:cb:a6:24:5d:e4:6c:bc:bc:c6:fa:51:47:51: 83:a9:28:68:41:43:39:b3:65:c1:a2:21:be:9a:c5: 8f:dd:27:cf:35:2d:76:dc:da:9c:71:1e:13:fb:13: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D2:3E:82:1A:A8:25:F0:3A:FF:91:90:7B:5F:2F:AE:FB:21:34:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5514b8f-46aa-3af8-998f-2a0964724887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:98:98:b5:16:31:36:1c:d6:54:02:13:d2:f6:ce:6d:37:55: 59:9b:b8:63:0b:0a:33:d3:8c:24:11:d0:99:c6:8f:db:56:c3: 3f:ba:d2:54:0b:ba:09:9d:94:b6:c9:2f:84:7b:64:4f:88:78: d9:81:4c:55:58:7c:0f:f9:33:0b:38:0e:48:b9:a7:73:0a:ef: fc:eb:2d:38:a6:85:63:e6:4c:b7:c2:a1:8c:68:48:6c:47:a8: 97:04:c9:a6:8a:b3:d4:4b:9d:06:bd:61:f0:f9:a6:14:3a:05: bb:83:f9:6e:fe:25:50:59:40:5a:38:45:79:e6:e8:d5:17:e0: 11:49:46:23:e1:b5:45:08:dd:d4:8d:d6:de:d3:bd:86:35:6a: f4:f2:98:d0:6c:cf:87:d3:81:37:9e:5c:f7:53:5a:6c:0d:3a: c7:b9:c5:50:cf:12:54:6f:8a:44:1c:86:69:89:af:10:44:16: 34:49:ef:5b:44:cd:c0:23:1a:31:96:5f:91:e8:d5:5c:f0:8e: ab:ea:b8:34:96:8d:a1:c0:79:53:ac:51:92:31:bc:e9:42:70: 9f:6c:b2:e5:d8:b9:42:36:13:e6:f7:f1:f8:dd:8c:9a:a8:e4: ec:c0:a1:9b:f6:8e:32:85:69:44:99:62:fc:8d:6b:26:11:18: 52:b6:6c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQjDz5IIYwhlY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MThmOWM4ZjYtNGM4MC00NzkyLTk5NDAtZDkwN2E0OWU3YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d41eX+zaOCdkdGtbTJcqrXviqaI6YrwazMC uDtFZwE7WxDQYiQxNke0gMeSsOBfcoTgCztl/4kqQKIozCW82onyKLypR5IpJMNQ lAuKoulUCBwX2MUdNZTREinvZNEKS9wJpP/SkLbxbRnxEcB6CLRuBF8KOoVD7pGc oBJjNLDM00LDCxMUHLVMGc2a7jenOn4Osxgb+B1T7JOkpnEvs88ejlaulL4wKllT QVvUUedEEZ4SjiY561psapZ+CxhN1IcBts7YAItG7fb/9ZsddCeLhsumJF3kbLy8 xvpRR1GDqShoQUM5s2XBoiG+msWP3SfPNS123NqccR4T+xNStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXSPoIaqCXwOv+RkHtfL677ITQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjU1MTRiOGYtNDZhYS0z YWY4LTk5OGYtMmEwOTY0NzI0ODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz96gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWYmLUWMTYc1lQCE9L2zm03VVmbuGMLCjPTjCQR0JnGj9tWwz+60lQL ugmdlLbJL4R7ZE+IeNmBTFVYfA/5Mws4Dki5p3MK7/zrLTimhWPmTLfCoYxoSGxH qJcEyaaKs9RLnQa9YfD5phQ6BbuD+W7+JVBZQFo4RXnm6NUX4BFJRiPhtUUI3dSN 1t7TvYY1avTymNBsz4fTgTeeXPdTWmwNOse5xVDPElRvikQchmmJrxBEFjRJ71tE zcAjGjGWX5Ho1VzwjqvquDSWjaHAeVOsUZIxvOlCcJ9ssuXYuUI2E+b38fjdjJqo 5OzAoZv2jjKFaUSZYvyNayYRGFK2bCU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:07 2024 by rpki-client on console-ams.rpki-client.org