$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa File: b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa (raw, json) Hash identifier: 46EPTvO5DGAgfwyR0D99lg2MDSb5z94hbmUcewgVvYI= Subject key identifier: D7:2D:85:48:C1:D7:F9:9C:59:74:75:7B:39:49:56:3B:C9:A6:5F:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155098BD8FED593730D0F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 209.155.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:09:8b:d8:fe:d5:93:73:0d:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=7b92dde8-5fc3-438e-a037-75085abdf03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3d:9e:36:48:3d:f1:0e:be:44:71:1e:36:bf: 5c:2d:ed:d1:ea:3d:d0:5d:eb:42:52:81:6a:5a:96: ad:8b:12:12:d2:6f:43:28:21:7d:a5:5d:6a:58:4f: 9e:4d:f0:ec:cf:ad:dc:9b:0f:e2:97:57:e0:30:97: 04:01:08:f4:37:01:b5:2c:e1:a3:90:82:19:20:f6: 7b:3d:a3:df:3d:61:6c:cf:83:6c:c8:c1:ea:2d:7c: 57:10:e1:97:9a:7f:3b:a8:1f:6d:28:3d:70:78:f4: 83:b9:f2:49:d4:69:1c:9e:d8:2e:c2:4f:88:6a:60: 26:19:40:3b:4d:20:6b:87:f0:60:2b:39:7a:20:5b: a4:69:88:5f:bf:49:92:1a:31:45:78:ad:d4:2e:7a: 6a:1d:d8:22:39:53:5d:42:06:61:70:e3:57:55:d4: 24:e3:bf:5c:a6:37:c5:fa:f0:a1:dd:33:bb:01:3f: d3:68:69:fe:1a:0f:4f:01:81:be:a9:91:20:26:0e: 6b:ad:2d:d5:0e:44:96:7d:e4:73:5f:42:57:b1:f9: 6a:34:df:80:bb:05:40:1c:9d:aa:db:37:31:ad:50: a5:7c:85:95:3b:fd:2f:e8:90:fb:34:df:5a:4c:1a: 8d:7b:41:65:08:c3:11:6b:36:07:62:97:84:18:0e: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:85:48:C1:D7:F9:9C:59:74:75:7B:39:49:56:3B:C9:A6:5F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.155.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:2a:50:80:08:02:27:6f:7f:60:05:6b:04:2b:86:cc:2a:b7: c9:96:b4:e1:8f:c5:09:86:3c:5e:d6:f2:e5:40:99:3c:93:a2: 14:eb:f1:bb:ef:bb:ae:63:eb:9d:b7:95:9d:2b:3e:01:5e:40: e7:e7:9b:53:8f:95:dc:50:52:cc:85:eb:7f:ac:3e:20:9d:f4: 5a:91:31:cf:64:4d:75:ab:b8:03:8d:94:49:45:e9:dc:78:b9: fb:02:c1:7b:6d:d0:19:c9:c7:69:bd:55:60:56:0b:ab:00:a2: 2a:43:d4:33:a6:5f:cd:ac:78:7c:a9:b9:d7:d7:7b:2e:04:87: 03:d7:9e:b9:da:ce:57:15:96:67:d2:d1:23:35:41:ca:ec:3d: a4:1b:78:a4:56:95:15:3c:d1:d4:f3:b0:95:1a:b0:c8:4e:2c: fb:65:6e:a5:29:51:3f:98:ee:76:4d:5c:ca:19:33:e8:2c:11: 04:21:b9:ae:3c:82:2d:3f:be:84:5c:b2:f5:d3:af:fc:a6:25: 73:90:47:59:ba:c5:5a:82:d6:b1:49:47:2a:d4:a4:19:87:18: c4:74:51:e4:f8:5a:b8:be:8a:a4:39:10:80:34:e4:3c:3f:7f: cd:a8:19:36:d7:2f:56:03:25:ee:9b:0b:52:92:92:12:31:b9: f6:22:fa:17 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVQmL2P7Vk3MND4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk N2I5MmRkZTgtNWZjMy00MzhlLWEwMzctNzUwODVhYmRmMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD2eNkg98Q6+RHEeNr9cLe3R6j3QXetCUoFq WpatixIS0m9DKCF9pV1qWE+eTfDsz63cmw/il1fgMJcEAQj0NwG1LOGjkIIZIPZ7 PaPfPWFsz4NsyMHqLXxXEOGXmn87qB9tKD1wePSDufJJ1Gkcntguwk+IamAmGUA7 TSBrh/BgKzl6IFukaYhfv0mSGjFFeK3ULnpqHdgiOVNdQgZhcONXVdQk479cpjfF +vCh3TO7AT/TaGn+Gg9PAYG+qZEgJg5rrS3VDkSWfeRzX0JXsflqNN+AuwVAHJ2q 2zcxrVClfIWVO/0v6JD7NN9aTBqNe0FlCMMRazYHYpeEGA7PoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNcthUjB1/mcWXR1ezlJVjvJpl+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjhmNmVlZmMtYjJjMi0z YjYyLWI0OGYtNDJiMTdjNmUyZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0ZswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmCpQgAgCJ29/YAVrBCuGzCq3yZa04Y/FCYY8Xtby5UCZPJOiFOvxu++7 rmPrnbeVnSs+AV5A5+ebU4+V3FBSzIXrf6w+IJ30WpExz2RNdau4A42USUXp3Hi5 +wLBe23QGcnHab1VYFYLqwCiKkPUM6Zfzax4fKm519d7LgSHA9eeudrOVxWWZ9LR IzVByuw9pBt4pFaVFTzR1POwlRqwyE4s+2VupSlRP5judk1cyhkz6CwRBCG5rjyC LT++hFyy9dOv/KYlc5BHWbrFWoLWsUlHKtSkGYcYxHRR5PhauL6KpDkQgDTkPD9/ zagZNtcvVgMl7psLUpKSEjG59iL6Fw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:20 2024 by rpki-client on console-fra.rpki-client.org