$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa File: b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa (raw, json) Hash identifier: PLoy6Od5vKCe4UThDVNm+bH4VV4sbVlMtnKK2AKESMs= Subject key identifier: 04:DF:3F:75:E1:E7:B8:47:A6:0F:ED:F3:F8:4B:27:A1:81:81:6F:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553A76E24701DD28DEBC90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 208.84.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3a:76:e2:47:01:dd:28:de:bc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=886a6c3c-7b31-41fc-9555-4a09d3e4ec9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:53:91:0f:a9:32:c2:44:1e:dc:e1:93:e2: eb:b6:97:7f:5f:94:d6:ef:4c:8c:e8:f6:8d:76:1b: 7b:1e:7d:ff:e3:01:6b:90:3f:f7:37:bd:a3:32:b4: ab:41:2d:b9:76:aa:96:ac:89:7f:a8:e2:c1:02:e0: 01:8d:e6:31:8d:a7:16:bc:4d:69:cd:5f:ea:82:10: 90:5b:b4:c0:06:8c:d1:31:74:d5:db:fd:3f:f7:8c: 71:5e:51:c7:e0:16:01:d3:54:af:1d:a4:f7:71:e1: 0a:65:b3:5e:43:eb:83:9c:c4:71:a3:16:98:9d:46: 2b:e8:aa:64:8b:1b:07:11:fe:19:c9:fa:aa:3f:5e: f6:d0:ac:33:6f:8c:57:8b:01:3a:60:8c:6a:cf:a0: e1:02:c2:f4:53:ac:48:a4:ce:23:6d:e0:4b:c2:44: 42:be:a6:39:af:14:38:2e:e5:45:ba:5b:3c:94:a6: 7a:97:72:f9:81:e7:a3:c8:6d:0a:db:af:55:5e:67: e0:59:23:57:f5:32:02:17:22:21:37:d2:92:92:87: 3f:73:7a:e5:60:cf:12:5e:92:3e:26:10:9c:d7:32: 4c:48:13:12:2a:bf:1b:aa:c3:6c:ce:20:53:8b:d4: ae:78:e9:a1:f5:a1:48:10:f6:4e:13:08:d9:ce:07: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DF:3F:75:E1:E7:B8:47:A6:0F:ED:F3:F8:4B:27:A1:81:81:6F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.84.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:26:8e:63:ec:4e:43:a5:84:0a:8c:82:1d:cc:30:b5:a2:8b: 94:b0:fc:70:e9:d4:02:ba:df:e6:92:24:c5:6c:51:5b:86:65: 66:5b:f9:24:04:20:31:4a:b4:5e:53:59:ce:ac:6e:31:0c:ca: 81:cc:67:61:33:45:0e:14:fe:d4:38:87:a2:fa:3c:45:6f:22: 36:ff:60:2d:41:43:ea:aa:d7:3f:06:03:9f:76:c0:ca:d0:66: b4:b0:3f:82:5b:11:e6:89:f7:b4:d8:11:2f:cd:0a:52:93:9c: d0:d4:10:b2:04:d4:00:1d:1b:3b:3e:6c:fe:e3:66:38:cc:8f: 0a:97:42:bc:6d:7b:2a:75:c5:4c:b5:ef:57:b2:26:c1:c9:74: 79:a4:ca:2d:0c:17:ab:f8:48:21:87:a9:ee:79:71:d3:80:cf: 60:42:19:9b:ba:1a:b1:b4:d0:0b:3a:50:1d:f3:53:5c:95:0e: 93:55:b9:5d:45:da:be:a9:7e:b4:7c:83:8e:1d:3a:d0:d9:54: 27:b2:d4:e5:a6:eb:a3:d8:49:3b:46:9e:d8:88:6e:2b:8b:c9: dc:81:87:e1:4a:65:e9:01:27:a7:95:68:33:63:27:a4:38:e2: 02:cc:4b:6e:97:74:ad:d6:0c:e3:e6:8d:9d:5b:f9:d1:d3:46: 9e:68:1f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTp24kcB3SjevJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODg2YTZjM2MtN2IzMS00MWZjLTk1NTUtNGEwOWQzZTRlYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGVTkQ+pMsJEHtzhk+Lrtpd/X5TW70yM6PaN dht7Hn3/4wFrkD/3N72jMrSrQS25dqqWrIl/qOLBAuABjeYxjacWvE1pzV/qghCQ W7TABozRMXTV2/0/94xxXlHH4BYB01SvHaT3ceEKZbNeQ+uDnMRxoxaYnUYr6Kpk ixsHEf4ZyfqqP1720Kwzb4xXiwE6YIxqz6DhAsL0U6xIpM4jbeBLwkRCvqY5rxQ4 LuVFuls8lKZ6l3L5geejyG0K269VXmfgWSNX9TICFyIhN9KSkoc/c3rlYM8SXpI+ JhCc1zJMSBMSKr8bqsNsziBTi9SueOmh9aFIEPZOEwjZzgfOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATfP3Xh57hHpg/t8/hLJ6GBgW9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc2NGI4ZjItMzgwOC0z YmQ0LTk1MjctY2M5NWMzMmFlYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgmjmPsTkOlhAqMgh3MMLWii5Sw/HDp1AK63+aSJMVsUVuGZWZb+SQE IDFKtF5TWc6sbjEMyoHMZ2EzRQ4U/tQ4h6L6PEVvIjb/YC1BQ+qq1z8GA592wMrQ ZrSwP4JbEeaJ97TYES/NClKTnNDUELIE1AAdGzs+bP7jZjjMjwqXQrxteyp1xUy1 71eyJsHJdHmkyi0MF6v4SCGHqe55cdOAz2BCGZu6GrG00As6UB3zU1yVDpNVuV1F 2r6pfrR8g44dOtDZVCey1OWm66PYSTtGntiIbiuLydyBh+FKZekBJ6eVaDNjJ6Q4 4gLMS26XdK3WDOPmjZ1b+dHTRp5oH2s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:07 2024 by rpki-client on console-ams.rpki-client.org