$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d0cf02-759a-3af9-acc4-2bb92fd0f2f6.roa File: c2d0cf02-759a-3af9-acc4-2bb92fd0f2f6.roa (raw, json) Hash identifier: CsgazGkWsLL1o2pnXlpDvaiLKr4PRmHqFWhBIR2P6VQ= Subject key identifier: FF:C4:0D:8F:27:3E:7C:FF:9F:C1:68:38:46:66:C3:47:CF:6C:12:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155066DDEBEA105342F2480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d0cf02-759a-3af9-acc4-2bb92fd0f2f6.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 198.211.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:06:6d:de:be:a1:05:34:2f:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=60625768-0846-4b38-a9bd-2fd985c5f882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:95:05:ee:7f:19:7f:2f:9f:f5:b9:dc:18: f3:2b:b3:b6:3a:35:e7:2f:3e:e5:9a:46:20:64:2c: 57:50:84:07:c8:cf:cf:0a:ed:3f:22:81:d2:c3:e8: 23:63:4b:28:2d:ab:0a:8b:a4:59:09:6b:b0:c4:f9: 24:3d:79:17:92:c8:f2:54:c0:a0:e3:33:3c:53:5d: 5e:99:a1:2f:1c:83:b9:98:d1:02:ec:cc:2b:aa:ba: 07:87:53:6e:01:19:31:a6:39:b4:ea:fa:4d:ac:a0: 1f:a9:98:9b:bf:39:90:52:8a:72:c0:2c:46:a3:d4: e0:9f:6a:ac:fb:97:e4:b8:d4:83:81:cf:e4:37:2b: 5a:2e:d7:0f:76:bc:d2:b9:a2:cc:66:cf:4f:3b:05: da:d5:8a:b6:0f:49:28:17:09:7a:0f:e2:12:3c:c8: f3:dd:03:cb:b6:8e:60:e3:d2:78:5d:9a:1c:cf:6e: a3:36:11:47:07:99:42:aa:55:c0:af:16:07:9b:86: 50:84:98:11:d9:78:9d:d7:0f:e4:7b:f4:5b:24:3d: e3:3e:9a:80:8c:27:d3:24:14:28:c5:87:3c:e8:8e: 0d:63:73:a1:7a:84:a5:bf:c3:2b:36:17:a0:05:fa: 7a:f1:3f:36:cf:9f:96:2d:fb:f3:45:aa:13:24:50: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C4:0D:8F:27:3E:7C:FF:9F:C1:68:38:46:66:C3:47:CF:6C:12:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d0cf02-759a-3af9-acc4-2bb92fd0f2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.211.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:df:08:f6:3a:b4:05:0d:16:c8:5e:38:2e:26:0b:45:a9:fe: 05:d5:67:ff:2c:78:f7:e1:90:34:42:41:eb:af:91:5e:a1:46: 6a:fc:40:30:19:bd:ae:5b:a3:61:e0:0f:98:98:b1:1d:41:23: 89:d5:11:b3:2f:9a:05:8f:14:70:39:c9:53:5a:8b:f9:2d:c2: 3f:ba:cd:ea:12:93:12:e1:50:33:fc:e0:24:88:c9:d5:3e:25: c0:98:b4:8e:24:08:54:3c:0c:ea:40:c3:20:4a:65:14:10:b5: 54:ec:27:4b:6d:ca:c1:3f:c4:88:4c:a9:a3:73:d8:59:53:92: a5:87:bf:e8:ca:4a:6e:2c:11:b8:55:cd:22:47:26:4e:55:54: e6:53:b6:29:b5:dd:7f:e6:0b:0d:b8:d7:64:b1:85:27:db:a5: 17:a4:84:eb:c9:d3:9d:68:2d:25:d9:36:ed:af:e3:12:1d:92: 23:7b:4c:92:2f:e5:48:2f:b2:78:79:a8:fc:55:ac:7c:64:fe: c4:f5:37:05:b7:b4:27:81:d3:e4:cf:73:bb:55:70:fd:76:9d: af:ff:fc:f7:a6:dc:44:59:0a:8d:05:e7:3a:a6:f2:a6:30:f1: 12:4e:84:21:20:14:cd:f9:86:65:2e:c8:2b:94:f4:5c:50:28: e9:bf:c8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQZt3r6hBTQvJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NjA2MjU3NjgtMDg0Ni00YjM4LWE5YmQtMmZkOTg1YzVmODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJuVBe5/GX8vn/W53BjzK7O2OjXnLz7lmkYg ZCxXUIQHyM/PCu0/IoHSw+gjY0soLasKi6RZCWuwxPkkPXkXksjyVMCg4zM8U11e maEvHIO5mNEC7MwrqroHh1NuARkxpjm06vpNrKAfqZibvzmQUopywCxGo9Tgn2qs +5fkuNSDgc/kNytaLtcPdrzSuaLMZs9POwXa1Yq2D0koFwl6D+ISPMjz3QPLto5g 49J4XZocz26jNhFHB5lCqlXArxYHm4ZQhJgR2Xid1w/ke/RbJD3jPpqAjCfTJBQo xYc86I4NY3OheoSlv8MrNhegBfp68T82z5+WLfvzRaoTJFC4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/EDY8nPnz/n8FoOEZmw0fPbBJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJkMGNmMDItNzU5YS0z YWY5LWFjYzQtMmJiOTJmZDBmMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxtOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnfCPY6tAUNFsheOC4mC0Wp/gXVZ/8sePfhkDRCQeuvkV6hRmr8QDAZ va5bo2HgD5iYsR1BI4nVEbMvmgWPFHA5yVNai/ktwj+6zeoSkxLhUDP84CSIydU+ JcCYtI4kCFQ8DOpAwyBKZRQQtVTsJ0ttysE/xIhMqaNz2FlTkqWHv+jKSm4sEbhV zSJHJk5VVOZTtim13X/mCw2412SxhSfbpRekhOvJ051oLSXZNu2v4xIdkiN7TJIv 5Ugvsnh5qPxVrHxk/sT1NwW3tCeB0+TPc7tVcP12na///Pem3ERZCo0F5zqm8qYw 8RJOhCEgFM35hmUuyCuU9FxQKOm/yEk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:59 2024 by rpki-client on console-ams.rpki-client.org