$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d120bc7f-1c63-3b8d-ae28-e43e985181ca.roa File: d120bc7f-1c63-3b8d-ae28-e43e985181ca.roa (raw, json) Hash identifier: BpGbBNbweg752xORo59PZ+7d2GzRRUFeUUGyvDV4Its= Subject key identifier: B2:2E:B2:A1:91:5A:DE:66:9A:2C:43:42:B9:EC:AC:C7:F5:32:D8:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6C002EE1F4197929B63200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d120bc7f-1c63-3b8d-ae28-e43e985181ca.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 166.102.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:00:2e:e1:f4:19:79:29:b6:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=07a033a0-ec00-4ac1-bd53-b5da78706bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:29:e5:65:3b:1e:e4:4e:7c:13:9f:7d:aa: 3d:d2:65:70:6e:b4:39:29:a1:4e:42:02:24:e7:2c: 6d:f4:0b:7d:f3:0f:76:b7:79:69:a0:5b:73:36:ad: 22:c3:a7:da:90:dc:e4:a2:5c:04:95:81:2f:49:d2: ff:75:c8:c6:19:cc:14:e7:a3:33:a0:dc:ac:cf:ef: 95:bd:a8:21:bf:b8:32:9e:72:b7:74:42:28:da:43: 03:89:eb:a5:23:07:a2:d8:6b:68:da:ac:14:48:d3: 89:44:45:f6:29:55:98:e4:56:8e:ff:9c:1e:8c:f1: 6a:79:72:b7:cb:c8:f3:43:6b:f8:aa:ef:2f:54:91: 22:51:5c:d0:46:ad:72:e3:c2:77:f9:4e:4f:da:34: fe:48:de:fd:3b:a1:cf:19:5a:b5:1e:60:d8:6f:8e: f8:e6:20:ea:54:14:11:0a:d7:7e:bd:42:21:2d:55: 3d:ed:5f:10:f4:72:33:c0:dd:dc:0d:50:95:23:bd: 09:cb:92:22:3b:8a:89:d3:68:75:7e:21:40:62:a5: f2:4b:1e:78:08:33:82:48:01:35:dc:d5:54:eb:5c: 9c:6d:3a:8e:f0:3b:3b:82:36:14:c3:1e:b6:3d:71: 1a:2e:76:9d:1f:c1:bc:cb:47:de:18:5a:fe:9c:ea: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2E:B2:A1:91:5A:DE:66:9A:2C:43:42:B9:EC:AC:C7:F5:32:D8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d120bc7f-1c63-3b8d-ae28-e43e985181ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:04:d2:8b:2d:d2:56:c4:d3:71:82:b5:7b:6b:71:8a:df:29: 45:a3:5e:15:3b:a7:ff:2b:5e:59:89:55:41:30:9f:af:b8:58: 7d:82:fe:9a:35:eb:0a:92:92:f9:ac:52:a2:2d:bc:f8:9d:70: 3b:13:94:2c:1e:c8:68:b2:9c:a4:59:94:c5:3d:6f:97:df:63: 59:ef:f2:01:94:71:00:77:31:13:ce:c3:ae:0c:1a:16:14:76: f6:ac:8b:20:a6:10:a2:07:cc:6a:fc:ba:dc:98:f4:11:12:c1: 11:1c:9d:53:73:4b:43:83:74:5a:e6:01:f7:5a:69:c3:d6:96: 80:ac:3e:30:70:b4:ce:7b:8f:fd:c2:47:bc:e9:c6:a1:c5:cc: f8:10:60:42:7e:3f:fa:5f:4c:93:ad:a4:6e:a0:7d:e8:93:eb: 14:11:99:fc:c4:f5:3e:90:e5:38:45:3c:6c:8f:3d:aa:58:a1: 58:16:3d:d6:db:b8:15:d5:e5:65:41:e3:30:7e:12:4e:05:cc: 25:fb:3d:5c:78:41:28:9b:f3:e0:70:13:31:b1:17:76:04:cc: 8c:5b:4a:d8:1e:55:9a:28:1b:57:7e:07:b5:29:ef:99:cd:33: b8:f1:e6:10:eb:5a:d5:d7:09:69:c0:30:93:da:ba:f2:3f:fd: d0:f9:c0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbAAu4fQZeSm2MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk MDdhMDMzYTAtZWMwMC00YWMxLWJkNTMtYjVkYTc4NzA2YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUIp5WU7HuROfBOffao90mVwbrQ5KaFOQgIk 5yxt9At98w92t3lpoFtzNq0iw6fakNzkolwElYEvSdL/dcjGGcwU56MzoNysz++V vaghv7gynnK3dEIo2kMDieulIwei2Gto2qwUSNOJREX2KVWY5FaO/5wejPFqeXK3 y8jzQ2v4qu8vVJEiUVzQRq1y48J3+U5P2jT+SN79O6HPGVq1HmDYb4745iDqVBQR Ctd+vUIhLVU97V8Q9HIzwN3cDVCVI70Jy5IiO4qJ02h1fiFAYqXySx54CDOCSAE1 3NVU61ycbTqO8Ds7gjYUwx62PXEaLnadH8G8y0feGFr+nOpyxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIusqGRWt5mmixDQrnsrMf1MtggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDEyMGJjN2YtMWM2My0z YjhkLWFlMjgtZTQzZTk4NTE4MWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpmYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYE0ost0lbE03GCtXtrcYrfKUWjXhU7p/8rXlmJVUEwn6+4WH2C/po1 6wqSkvmsUqItvPidcDsTlCweyGiynKRZlMU9b5ffY1nv8gGUcQB3MRPOw64MGhYU dvasiyCmEKIHzGr8utyY9BESwREcnVNzS0ODdFrmAfdaacPWloCsPjBwtM57j/3C R7zpxqHFzPgQYEJ+P/pfTJOtpG6gfeiT6xQRmfzE9T6Q5ThFPGyPPapYoVgWPdbb uBXV5WVB4zB+Ek4FzCX7PVx4QSib8+BwEzGxF3YEzIxbStgeVZooG1d+B7Up75nN M7jx5hDrWtXXCWnAMJPauvI//dD5wLg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:11 2024 by rpki-client on console-ams.rpki-client.org