$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa File: b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa (raw, json) Hash identifier: ImwHXpaPzpYu+Tos4GaF7huBi89+OGvNoQqNR+4NJkw= Subject key identifier: BF:5A:41:2E:D9:A2:38:FA:FA:15:11:A8:27:0D:E4:6A:CC:DA:64:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154F98DDDE40D748F9C3EA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 67.141.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:f9:8d:dd:e4:0d:74:8f:9c:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=6cc12c87-361b-496a-bb2a-054276c26a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:18:cd:05:19:ed:93:9a:64:2d:e9:e4:88: c9:80:a1:87:5f:8d:e2:06:4d:86:ce:6d:ed:ad:13: 7d:bc:c8:64:34:72:17:e0:28:85:02:bf:e9:ce:8f: 11:dc:51:bf:10:6f:5c:77:7b:50:be:f9:a7:5a:ce: a7:7b:67:86:de:ab:a2:43:eb:8b:34:6c:dd:30:0d: 88:1a:db:48:a4:cd:93:c0:ad:8d:27:11:78:d5:d8: 80:aa:b4:b7:2c:43:db:29:63:95:d4:75:d7:50:6b: aa:53:e5:1b:df:75:85:a1:5b:b5:da:25:f0:61:ad: 01:a1:29:37:9a:64:5f:f1:7b:b0:4e:4f:0f:09:54: 57:32:92:a9:c8:bd:c0:94:2e:e4:66:6a:88:e4:e0: 01:c6:6d:8e:82:ff:c3:6c:91:76:d8:33:02:05:64: 01:2f:82:63:d6:a8:f5:d4:b5:b5:56:f9:f7:6a:a0: 2b:29:a5:7c:c2:84:3e:64:3c:9e:80:8c:b6:d5:20: fd:8a:d4:12:52:22:04:6b:46:ec:ae:24:3f:95:71: 9c:57:ef:29:ea:6a:4b:a2:c4:50:98:67:4e:fb:9c: 00:33:b7:55:36:bf:9e:1e:df:ef:67:59:a7:8f:ed: 87:9a:b6:54:19:76:ff:44:f5:5d:af:fa:a5:cb:cc: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5A:41:2E:D9:A2:38:FA:FA:15:11:A8:27:0D:E4:6A:CC:DA:64:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5e3e350-7e0a-350f-82ff-b89b9ec216fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2b:97:d2:08:68:f8:ba:0d:c9:35:d7:bf:28:19:54:90:e1: ec:35:63:a2:da:a6:61:b7:d6:00:32:93:a3:9c:c5:11:58:92: d2:24:8f:c2:5d:43:fe:4e:52:11:fd:4b:67:dc:06:81:fc:15: b4:6a:fc:df:d1:34:c6:d8:29:76:23:75:a4:66:d7:a4:09:19: 3b:89:ae:b5:3c:2c:b7:6e:5a:b1:40:8b:c4:22:9b:5c:13:85: 4c:b4:b2:ac:1c:78:71:91:fa:91:90:ac:60:51:4b:bf:ec:4f: ad:b3:b9:8c:70:5c:e0:fb:90:45:68:f9:9a:dc:3a:fa:ca:92: aa:4d:f5:d4:19:7f:e4:74:46:b4:7f:63:3d:cc:2d:cf:ca:81: 66:f1:06:c3:60:70:f8:ba:96:fd:ca:39:44:38:08:6c:45:a4: 99:c1:df:fa:b1:2e:52:93:f5:c3:db:68:0e:59:22:9e:d0:ad: 2d:8c:16:4a:3f:fa:38:3f:7c:0c:5f:dd:5a:ca:6d:ac:58:e4: e6:e1:13:02:77:8a:ae:c6:c8:4e:c7:62:8a:ff:e8:2e:36:6a: 03:df:f8:a6:3b:ee:f5:c3:3a:99:59:19:0f:95:41:cc:63:e6: b3:53:4c:30:bc:9b:25:ac:36:29:0c:e8:4a:21:4a:e5:05:cc: f6:27:5c:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVPmN3eQNdI+cPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NmNjMTJjODctMzYxYi00OTZhLWJiMmEtMDU0Mjc2YzI2YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyIYzQUZ7ZOaZC3p5IjJgKGHX43iBk2Gzm3t rRN9vMhkNHIX4CiFAr/pzo8R3FG/EG9cd3tQvvmnWs6ne2eG3quiQ+uLNGzdMA2I GttIpM2TwK2NJxF41diAqrS3LEPbKWOV1HXXUGuqU+Ub33WFoVu12iXwYa0BoSk3 mmRf8XuwTk8PCVRXMpKpyL3AlC7kZmqI5OABxm2Ogv/DbJF22DMCBWQBL4Jj1qj1 1LW1Vvn3aqArKaV8woQ+ZDyegIy21SD9itQSUiIEa0bsriQ/lXGcV+8p6mpLosRQ mGdO+5wAM7dVNr+eHt/vZ1mnj+2HmrZUGXb/RPVdr/qly8xKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9aQS7Zojj6+hURqCcN5GrM2mQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjVlM2UzNTAtN2UwYS0z NTBmLTgyZmYtYjg5YjllYzIxNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ42gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcrl9IIaPi6Dck1178oGVSQ4ew1Y6LapmG31gAyk6OcxRFYktIkj8Jd Q/5OUhH9S2fcBoH8FbRq/N/RNMbYKXYjdaRm16QJGTuJrrU8LLduWrFAi8Qim1wT hUy0sqwceHGR+pGQrGBRS7/sT62zuYxwXOD7kEVo+ZrcOvrKkqpN9dQZf+R0RrR/ Yz3MLc/KgWbxBsNgcPi6lv3KOUQ4CGxFpJnB3/qxLlKT9cPbaA5ZIp7QrS2MFko/ +jg/fAxf3VrKbaxY5ObhEwJ3iq7GyE7HYor/6C42agPf+KY77vXDOplZGQ+VQcxj 5rNTTDC8myWsNikM6EohSuUFzPYnXAU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:07 2024 by rpki-client on console-ams.rpki-client.org