$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json) Hash identifier: i92ZZNzGBVt77PGG4MGeBHzDNqy8uUd17CChIujUlAQ= Subject key identifier: 58:FD:4C:28:20:5F:66:C6:53:52:AE:2C:6A:E3:9B:FB:62:9C:15:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553CE996AE613F55C3F500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 216.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3c:e9:96:ae:61:3f:55:c3:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=8c789948-2e20-422a-99e9-965cd29736c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:bb:7d:df:80:3d:e2:6c:a0:8a:ac:9f:7f: 9f:d6:06:52:36:d2:63:44:5c:5c:b2:47:77:28:17: 19:65:dc:e6:d5:d4:7f:53:a9:ea:f5:4a:b1:0a:3b: 81:f9:29:b7:98:17:9d:07:b3:2d:ce:3c:dc:7f:87: 7d:84:a9:ac:e0:90:0a:a0:c7:c6:f2:79:88:a5:ba: ce:76:a6:19:8f:ee:e6:8c:94:d2:04:66:ef:06:bb: 16:59:a9:bf:45:fc:13:66:69:79:48:16:86:96:03: 90:ee:a7:4d:10:e2:04:8e:64:f8:d6:03:9f:bd:a3: 04:5d:9f:4f:93:d1:13:39:09:3b:a7:08:6d:92:5f: 45:37:76:8f:27:6a:70:05:a9:f0:33:63:58:ed:b5: 35:3b:24:5c:73:bf:ae:21:93:a2:78:41:5d:b4:66: 26:9b:92:d6:e9:2d:8b:32:ce:0a:c8:4c:a4:db:80: bc:da:a8:88:8e:5d:88:1b:0a:ea:5c:b7:37:47:b1: 4e:1b:7c:06:57:18:fc:de:4a:75:32:6f:26:cd:ff: c6:8f:64:0d:d1:95:e5:9b:26:8e:58:31:c6:62:de: 43:33:2d:95:cd:22:b6:c0:7a:cd:58:ff:66:05:25: 10:a5:94:94:25:7f:12:c2:6c:87:00:c6:6e:4f:29: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:4C:28:20:5F:66:C6:53:52:AE:2C:6A:E3:9B:FB:62:9C:15:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:08:f0:75:f3:82:03:4a:24:b4:ff:d8:42:98:09:62:30:85: 62:68:5b:51:4d:44:39:1e:f5:36:3a:65:93:ee:26:40:3b:42: 12:b2:27:84:29:0d:f1:4e:f3:b6:50:f7:cc:5d:ad:91:d5:11: 52:db:eb:e9:7a:29:22:e4:84:ec:9f:95:c6:f6:45:43:68:66: 95:52:1b:08:69:5e:a9:30:68:76:7a:60:d7:98:c1:0c:34:5f: e0:19:17:41:5d:4f:82:5b:d1:c0:1c:33:96:af:11:4b:86:04: 8e:31:2b:76:f8:d2:87:b9:1a:4b:19:7c:14:0f:6b:53:c4:62: c4:5e:0c:fa:f5:98:f0:8a:d1:17:54:c6:85:b0:94:7f:e8:eb: ea:b3:b2:31:66:51:fa:30:4a:1c:36:62:cf:51:8d:0e:9c:b3: 97:55:0a:f6:19:0f:87:70:0b:3e:75:63:f4:a0:55:cf:d7:9f: 09:99:4e:52:bc:e4:16:df:ae:b8:f5:d3:b9:13:c0:98:02:50: 6c:3f:3d:35:c1:d7:19:d0:d8:6c:b3:db:25:31:59:67:a7:e8: 38:5e:ec:9b:78:51:c0:18:ee:18:4f:0d:a9:6a:93:76:79:1d: 8c:b6:3f:58:e8:ef:21:05:e7:e3:a6:f5:97:92:01:5b:4b:43: 8d:34:f4:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTzplq5hP1XD9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OGM3ODk5NDgtMmUyMC00MjJhLTk5ZTktOTY1Y2QyOTczNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva27fd+APeJsoIqsn3+f1gZSNtJjRFxcskd3 KBcZZdzm1dR/U6nq9UqxCjuB+Sm3mBedB7Mtzjzcf4d9hKms4JAKoMfG8nmIpbrO dqYZj+7mjJTSBGbvBrsWWam/RfwTZml5SBaGlgOQ7qdNEOIEjmT41gOfvaMEXZ9P k9ETOQk7pwhtkl9FN3aPJ2pwBanwM2NY7bU1OyRcc7+uIZOieEFdtGYmm5LW6S2L Ms4KyEyk24C82qiIjl2IGwrqXLc3R7FOG3wGVxj83kp1Mm8mzf/Gj2QN0ZXlmyaO WDHGYt5DMy2VzSK2wHrNWP9mBSUQpZSUJX8SwmyHAMZuTynC0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj9TCggX2bGU1KuLGrjm/tinBXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E1YmY1YjEtNjE3Yy0z ZGM2LWIzYTgtZDQ5M2M0YTA3MzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwI8HXzggNKJLT/2EKYCWIwhWJoW1FNRDke9TY6ZZPuJkA7QhKyJ4Qp DfFO87ZQ98xdrZHVEVLb6+l6KSLkhOyflcb2RUNoZpVSGwhpXqkwaHZ6YNeYwQw0 X+AZF0FdT4Jb0cAcM5avEUuGBI4xK3b40oe5GksZfBQPa1PEYsReDPr1mPCK0RdU xoWwlH/o6+qzsjFmUfowShw2Ys9RjQ6cs5dVCvYZD4dwCz51Y/SgVc/XnwmZTlK8 5Bbfrrj107kTwJgCUGw/PTXB1xnQ2Gyz2yUxWWen6Dhe7Jt4UcAY7hhPDalqk3Z5 HYy2P1jo7yEF5+Om9ZeSAVtLQ4009Ig= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:23 2024 by rpki-client on console-fra.rpki-client.org