$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6a813ca-56f4-3c9e-895f-af1acc5ad5bb.roa File: d6a813ca-56f4-3c9e-895f-af1acc5ad5bb.roa (raw, json) Hash identifier: GzbWhdv94AcohHGfF0iwmEEhNhBQ2fE/bhgIyBjJaJs= Subject key identifier: B0:3D:0A:B1:54:BD:52:B0:13:42:9B:24:44:D5:B2:CC:94:77:47:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155473A2CDF307E0D982400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6a813ca-56f4-3c9e-895f-af1acc5ad5bb.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 395353 IP address blocks: 207.8.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:47:3a:2c:df:30:7e:0d:98:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a931cecb-a35a-4287-96b2-66418e60b125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:cb:d6:96:5d:4f:d1:c2:7b:d5:8d:5c:a3: f7:9f:14:e6:26:e4:3f:4e:c5:82:00:42:e0:56:41: 7f:f2:8c:a5:3e:ef:1b:c7:cb:06:ac:40:80:4b:71: c6:ea:69:b8:05:e8:4f:54:89:0e:25:3e:87:4e:32: f8:d7:f5:3f:b9:9c:fd:57:31:b3:f1:ca:bc:d4:a3: 51:48:14:8b:96:e1:1c:b8:80:93:45:ca:ce:2f:ea: fa:c9:8b:35:9c:ed:67:61:c4:b8:3e:3d:83:78:f0: d2:22:fe:0b:fd:4b:6d:d8:50:3c:04:28:26:53:5e: ff:62:36:6e:b2:d1:f4:4b:5a:a5:db:ea:91:7d:ec: ae:43:8f:97:17:27:41:cc:b0:c2:51:6b:c2:58:24: a5:d8:50:5b:60:62:46:59:0e:f1:a4:93:f4:c8:b7: b7:4b:a1:ce:0d:3d:d0:3d:c9:e3:76:95:36:7e:b0: 15:c4:de:a3:9c:21:92:51:da:a3:b8:95:e5:96:80: d9:d1:ec:be:ff:df:64:4a:f7:4f:01:d2:c7:08:39: f3:85:d4:f1:91:db:83:31:bb:0a:4a:ca:89:cb:ca: d7:fa:56:49:60:be:79:84:85:db:9d:93:f5:f6:6d: 43:9b:68:e1:d8:22:2f:23:b2:4d:df:d4:c5:21:3f: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3D:0A:B1:54:BD:52:B0:13:42:9B:24:44:D5:B2:CC:94:77:47:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6a813ca-56f4-3c9e-895f-af1acc5ad5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.8.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:97:e9:0b:55:79:22:39:14:14:17:1d:a0:a5:c9:75:51:6d: 81:25:8c:4d:65:cb:81:c5:c8:39:63:bd:f2:b2:af:25:3c:f0: 4a:51:38:4b:d5:ae:31:71:71:63:dd:72:bb:47:6a:2a:78:0d: f8:dc:b0:40:80:32:ac:fa:32:fc:7b:dd:10:d2:9a:f3:49:a0: fa:cd:7e:af:c5:8f:86:45:08:71:32:71:4c:79:08:4a:d5:f5: e1:34:ff:39:77:1e:5f:85:c5:06:32:38:21:c8:6e:fb:e4:ff: 95:9f:fd:c6:50:02:18:b1:80:ce:2a:83:c4:4e:ea:4c:56:8b: 56:4c:e1:36:27:fc:d7:16:4c:8e:ab:a2:24:d5:27:eb:f4:0f: 0c:8e:f1:64:ab:23:ab:4c:7c:ef:8e:8e:27:7b:02:b0:47:09: c6:39:88:d2:e7:44:c1:dd:a7:a2:6c:e1:3c:0f:27:34:29:05: a5:2f:0f:5d:1d:41:16:62:18:d1:6c:04:1c:83:a4:0e:13:88: 11:c2:fc:c6:68:a9:9d:92:e2:29:cb:3a:45:f6:1e:50:66:7b: 13:71:5b:5c:21:02:98:f1:ee:a4:86:d3:9d:60:cf:48:84:4e: 38:ae:64:7d:c8:c1:60:16:99:21:c1:ce:24:a2:2b:ba:5a:20: df:43:76:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUc6LN8wfg2YJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTkzMWNlY2ItYTM1YS00Mjg3LTk2YjItNjY0MThlNjBiMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ/L1pZdT9HCe9WNXKP3nxTmJuQ/TsWCAELg VkF/8oylPu8bx8sGrECAS3HG6mm4BehPVIkOJT6HTjL41/U/uZz9VzGz8cq81KNR SBSLluEcuICTRcrOL+r6yYs1nO1nYcS4Pj2DePDSIv4L/Utt2FA8BCgmU17/YjZu stH0S1ql2+qRfeyuQ4+XFydBzLDCUWvCWCSl2FBbYGJGWQ7xpJP0yLe3S6HODT3Q PcnjdpU2frAVxN6jnCGSUdqjuJXlloDZ0ey+/99kSvdPAdLHCDnzhdTxkduDMbsK SsqJy8rX+lZJYL55hIXbnZP19m1Dm2jh2CIvI7JN39TFIT+L0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA9CrFUvVKwE0KbJETVssyUd0exMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZhODEzY2EtNTZmNC0z YzllLTg5NWYtYWYxYWNjNWFkNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwjxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKX6QtVeSI5FBQXHaClyXVRbYEljE1ly4HFyDljvfKyryU88EpROEvV rjFxcWPdcrtHaip4DfjcsECAMqz6Mvx73RDSmvNJoPrNfq/Fj4ZFCHEycUx5CErV 9eE0/zl3Hl+FxQYyOCHIbvvk/5Wf/cZQAhixgM4qg8RO6kxWi1ZM4TYn/NcWTI6r oiTVJ+v0DwyO8WSrI6tMfO+Ojid7ArBHCcY5iNLnRMHdp6Js4TwPJzQpBaUvD10d QRZiGNFsBByDpA4TiBHC/MZoqZ2S4inLOkX2HlBmexNxW1whApjx7qSG051gz0iE TjiuZH3IwWAWmSHBziSiK7paIN9DdkM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:13 2024 by rpki-client on console-fra.rpki-client.org