$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa File: c35273ee-a67b-389a-abed-e2f536761270.roa (raw, json) Hash identifier: fKVVz4167u114Qh2Gqtbj9G6EWPQYgpQJWxEbE+Q6wY= Subject key identifier: E0:97:C2:99:96:AB:F6:6D:C6:AB:9B:BF:AE:7B:C0:6A:C4:26:61:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15542966CC694F2ED2B1C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 26914 IP address blocks: 66.32.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:42:96:6c:c6:94:f2:ed:2b:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=d4bbbdf8-a738-43e3-bff1-9f62957d500a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2d:0a:e7:71:45:29:ea:11:1d:7c:bc:bc:da: fb:d1:08:bf:d8:2c:14:a8:36:c0:b9:d7:40:cf:12: 53:03:d6:ec:22:90:e9:aa:e3:50:85:b8:1f:a3:ec: a1:ac:70:ed:c9:66:a2:79:b5:45:75:fa:d1:e4:1f: 1e:7b:86:07:4a:3a:ca:b9:ca:68:a8:61:fe:91:be: f9:26:93:9e:8d:9d:31:6d:0f:03:b2:c1:72:9f:ae: 6b:72:37:50:8c:e6:6e:78:1c:c2:c4:59:16:42:23: f3:38:d4:82:87:b9:be:fb:b5:85:2f:11:7f:a6:11: e4:8c:ea:b5:3d:23:be:45:2a:2c:ed:c3:c1:b6:82: 29:67:03:27:3d:87:ef:47:a4:01:fa:3a:fb:f4:2a: 9f:77:cf:0d:2f:d9:54:ef:d9:f1:e7:cf:cf:ce:cb: 47:7a:3b:6e:67:6e:6a:46:73:1a:e7:ca:a3:b6:76: f6:3f:f7:2f:ef:2b:2b:e2:d4:cd:c3:66:84:b0:6c: a2:57:b6:4a:77:d4:17:2f:21:25:ba:53:db:60:9b: 97:3c:da:a5:c6:55:66:cc:6c:92:42:60:d4:5c:8a: ff:f7:35:62:63:59:ca:35:fa:39:be:fa:62:c6:b6: c3:9c:1f:7d:fe:74:9e:8f:30:a0:af:d1:05:92:31: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:C2:99:96:AB:F6:6D:C6:AB:9B:BF:AE:7B:C0:6A:C4:26:61:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:26:9c:d8:c4:9f:66:d1:f8:30:bb:83:9c:a0:23:f0:c3:38: 9a:f8:53:ba:51:29:2e:50:0c:1b:47:4d:61:d7:ab:0e:7e:6c: e6:03:21:a1:6b:24:66:62:27:11:a9:61:f1:0e:d5:7f:d7:c8: a4:84:80:66:d5:c5:f8:c5:67:55:a5:37:7c:b6:0c:06:f1:d6: 0a:f0:dd:7d:47:82:b2:d5:8f:cd:9b:e8:17:39:31:f3:f9:5d: af:0b:41:a0:56:99:ce:22:9d:53:e0:89:9b:c1:69:e1:01:fe: 63:8b:6b:45:62:77:92:af:b0:bb:97:c6:c3:cb:a2:d4:d1:14: f6:21:96:d2:48:82:28:0b:87:81:15:56:bb:df:37:99:f7:dc: 40:83:75:cb:8c:91:f1:b3:ec:dd:05:50:66:4a:ec:d3:ba:56: 73:ba:88:d9:84:73:de:dc:01:39:61:b5:48:b0:94:fd:47:c2: 1a:27:f4:a0:7f:39:44:cb:b0:a2:e7:93:10:56:4a:74:28:8b: b9:ed:5c:7d:44:8e:8b:59:4f:ef:57:75:95:42:f4:5a:62:a1: e5:61:4c:70:6a:99:31:fd:73:10:7b:4d:fb:6d:31:70:37:c3: dc:05:bc:ba:90:28:ce:c0:8b:ef:c1:f8:30:6e:20:fd:b5:90: 0c:d0:ad:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUKWbMaU8u0rHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZDRiYmJkZjgtYTczOC00M2UzLWJmZjEtOWY2Mjk1N2Q1MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy0K53FFKeoRHXy8vNr70Qi/2CwUqDbAuddA zxJTA9bsIpDpquNQhbgfo+yhrHDtyWaiebVFdfrR5B8ee4YHSjrKucpoqGH+kb75 JpOejZ0xbQ8DssFyn65rcjdQjOZueBzCxFkWQiPzONSCh7m++7WFLxF/phHkjOq1 PSO+RSos7cPBtoIpZwMnPYfvR6QB+jr79Cqfd88NL9lU79nx58/PzstHejtuZ25q RnMa58qjtnb2P/cv7ysr4tTNw2aEsGyiV7ZKd9QXLyElulPbYJuXPNqlxlVmzGyS QmDUXIr/9zViY1nKNfo5vvpixrbDnB99/nSejzCgr9EFkjG4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCXwpmWq/Ztxqubv657wGrEJmEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzM1MjczZWUtYTY3Yi0z ODlhLWFiZWQtZTJmNTM2NzYxMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQmnNjEn2bR+DC7g5ygI/DDOJr4U7pRKS5QDBtHTWHXqw5+bOYDIaFr JGZiJxGpYfEO1X/XyKSEgGbVxfjFZ1WlN3y2DAbx1grw3X1HgrLVj82b6Bc5MfP5 Xa8LQaBWmc4inVPgiZvBaeEB/mOLa0Vid5KvsLuXxsPLotTRFPYhltJIgigLh4EV VrvfN5n33ECDdcuMkfGz7N0FUGZK7NO6VnO6iNmEc97cATlhtUiwlP1Hwhon9KB/ OUTLsKLnkxBWSnQoi7ntXH1EjotZT+9XdZVC9FpioeVhTHBqmTH9cxB7TfttMXA3 w9wFvLqQKM7Ai+/B+DBuIP21kAzQrdY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:45 2024 by rpki-client on console-ams.rpki-client.org