$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa File: cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa (raw, json) Hash identifier: 0Kg04TuxW2CRsbDbKvLgreZKO7jTnKBQVOPfNInN1fM= Subject key identifier: C5:4D:80:DB:77:5A:C1:AD:DC:E6:2F:67:75:44:6A:0D:CC:7C:5F:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6BF956C7B9C4C034049F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 71.28.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6b:f9:56:c7:b9:c4:c0:34:04:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=50f98c92-c176-4865-807b-4930641b7b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:ae:14:a0:78:47:56:d7:33:2e:76:c1:a5: 8a:59:a5:9b:3b:8a:df:63:64:77:b6:e1:1e:4d:f5: 1b:67:33:0b:25:34:ca:4e:e9:93:41:a5:25:5b:bd: c4:0d:46:f2:93:5a:9a:90:12:df:c6:82:01:bd:7d: 54:3f:d6:f0:c6:77:7c:2c:ea:62:d7:b2:45:1c:9f: ee:12:d3:09:71:af:a6:62:7d:fd:ab:24:02:4b:64: 2b:d9:17:ef:de:f4:60:1b:f7:44:59:97:3d:5e:04: 6a:ec:f8:e7:2f:25:35:8f:4a:80:51:e4:f3:ae:7f: 3b:0a:12:78:13:2a:af:28:74:3f:8c:3c:e2:32:24: 8d:59:bc:8d:c0:87:5e:8b:e4:e8:0c:39:4c:3c:6e: e1:c4:f6:0f:0a:e0:9b:f5:49:51:1e:1e:2f:16:a5: 39:e8:0a:c6:79:e3:2c:48:2a:a0:1e:6d:70:f3:9b: 05:65:6f:18:2e:45:8d:0d:34:d4:0e:fc:dc:40:c7: e4:c5:92:43:07:57:96:86:03:20:94:3b:27:39:54: 03:23:35:f1:59:ff:ab:36:79:96:11:41:46:1a:e8: d0:1b:8e:23:7a:73:39:08:26:8d:a6:55:78:56:ca: 24:d2:e0:eb:49:26:5f:4e:95:7f:41:8d:90:8a:04: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:80:DB:77:5A:C1:AD:DC:E6:2F:67:75:44:6A:0D:CC:7C:5F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:39:89:98:80:e7:71:de:9c:c6:5a:f5:52:7e:96:a7:42:da: 83:79:2e:cf:e9:3e:f2:ac:ad:f8:01:3d:c5:38:94:57:a2:0f: 81:20:05:6f:ce:cc:f3:95:31:bf:c8:78:91:44:4d:18:5f:e3: 99:a0:78:95:77:8b:26:dd:79:fb:1a:f8:42:0c:02:3e:1c:c9: e6:25:15:8d:13:2f:9e:53:09:3e:17:7c:e3:7c:ba:52:19:e4: ce:e9:eb:4d:3e:7c:3f:31:d9:9c:c2:ed:ba:c5:d6:e3:88:15: c0:46:b0:2b:86:fc:23:bc:18:3b:1e:9c:21:9d:aa:2d:20:cf: a1:96:9b:b4:e5:09:d7:fe:27:cc:7f:e0:8b:bd:66:5c:a8:f2: e6:1e:97:66:f9:87:9c:3d:b6:07:35:d0:3d:16:a3:08:98:d8: d3:93:55:c1:b9:b0:03:f9:58:7c:54:53:d3:60:c1:ae:76:e7: a2:bb:e0:de:85:39:03:ce:ad:03:3f:d6:69:98:d3:28:0e:80: 74:a4:be:89:86:b6:85:4a:7a:db:c7:c0:80:10:30:73:47:35: fa:fe:de:a5:a8:98:3e:d9:a2:4a:af:c3:72:6a:79:05:b2:2f: 84:c0:5e:2a:31:b6:68:eb:96:48:b7:43:0e:3b:48:46:8e:a4: f8:45:2e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEera/lWx7nEwDQEnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk NTBmOThjOTItYzE3Ni00ODY1LTgwN2ItNDkzMDY0MWI3YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXeuFKB4R1bXMy52waWKWaWbO4rfY2R3tuEe TfUbZzMLJTTKTumTQaUlW73EDUbyk1qakBLfxoIBvX1UP9bwxnd8LOpi17JFHJ/u EtMJca+mYn39qyQCS2Qr2Rfv3vRgG/dEWZc9XgRq7PjnLyU1j0qAUeTzrn87ChJ4 EyqvKHQ/jDziMiSNWbyNwIdei+ToDDlMPG7hxPYPCuCb9UlRHh4vFqU56ArGeeMs SCqgHm1w85sFZW8YLkWNDTTUDvzcQMfkxZJDB1eWhgMglDsnOVQDIzXxWf+rNnmW EUFGGujQG44jenM5CCaNplV4Vsok0uDrSSZfTpV/QY2QigSddQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVNgNt3WsGt3OYvZ3VEag3MfF/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y2ZjYxNDgtMDZiZC0z MWVhLTkwZDQtYTY4M2I3ZmEzN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE45iZiA53HenMZa9VJ+lqdC2oN5Ls/pPvKsrfgBPcU4lFeiD4EgBW/O zPOVMb/IeJFETRhf45mgeJV3iybdefsa+EIMAj4cyeYlFY0TL55TCT4XfON8ulIZ 5M7p600+fD8x2ZzC7brF1uOIFcBGsCuG/CO8GDsenCGdqi0gz6GWm7TlCdf+J8x/ 4Iu9Zlyo8uYel2b5h5w9tgc10D0WowiY2NOTVcG5sAP5WHxUU9Ngwa5256K74N6F OQPOrQM/1mmY0ygOgHSkvomGtoVKetvHwIAQMHNHNfr+3qWomD7Zokqvw3JqeQWy L4TAXioxtmjrlki3Qw47SEaOpPhFLgE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:24 2024 by rpki-client on console-fra.rpki-client.org