$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa File: d75928b4-5f67-3862-b915-b7ac40de473d.roa (raw, json) Hash identifier: bu8DrNAED+fh5wxP3j5VECGjC06OqjqbgarmgSObMdo= Subject key identifier: 00:BA:83:49:62:72:D0:79:90:09:D7:0D:3D:0B:B8:67:E6:70:1D:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847B961658D11ECA6FA24C0D180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.31.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:65:8d:11:ec:a6:fa:24:c0:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=6a30550b-4b15-4b36-ac68-fb75dee3914c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:fb:ab:e6:ff:fa:fe:d2:08:3f:77:f1:e2: 86:d3:2d:dd:f4:fd:4c:5e:b3:cc:6e:15:59:b8:b7: 5a:4c:b0:63:41:28:fe:f4:08:16:d2:04:bd:fd:69: 1f:4e:43:4f:9e:01:6d:0e:b5:5d:28:57:11:d4:27: 9b:1d:12:33:6d:1b:47:30:fe:d3:e0:7c:b7:83:38: 84:b1:6a:80:21:5f:57:79:4d:a1:3d:9c:4c:4b:c1: 80:63:2c:e1:68:95:ad:05:92:69:22:d3:14:a1:e7: 8c:e3:22:88:67:7f:e1:b6:f6:7c:00:1a:b4:67:ad: e8:1b:d7:cc:3b:b1:4c:18:eb:04:00:45:14:d2:22: eb:6b:30:db:7b:d8:19:1b:a9:ca:70:07:70:75:c4: 51:7f:99:0f:28:1a:f6:47:bf:2e:46:61:c1:25:f5: 4f:83:63:ab:7a:38:02:b2:57:e1:47:c5:a4:80:2e: 35:ac:26:1b:02:98:2c:80:2f:7c:b5:2b:27:31:55: db:9b:9b:cb:36:3d:86:dd:94:e1:ff:27:01:25:f5: c6:ba:d2:38:be:24:e9:5f:7d:d3:66:43:a1:fb:ec: 3e:c7:b3:7e:ff:f8:4b:60:5f:d3:d0:64:e7:ae:bf: 7c:dd:08:74:ed:df:b2:b3:7b:e2:5d:dd:70:eb:ef: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BA:83:49:62:72:D0:79:90:09:D7:0D:3D:0B:B8:67:E6:70:1D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6c:73:dd:a1:ac:7b:53:36:6b:63:96:f8:cf:02:fc:ab:bf: 34:14:f5:91:aa:1e:41:db:16:20:b9:ef:c8:4f:9b:a6:15:bc: 5f:8c:87:ae:c9:ac:6d:4c:2b:f3:71:c7:97:ef:45:1b:db:12: 04:b9:d8:fe:9f:1c:cb:da:af:49:b2:92:74:a5:63:f9:6f:37: e6:64:2d:72:6c:b7:1d:e0:cd:19:fe:ea:ea:5d:90:b1:2f:62: 5d:75:29:39:61:99:cd:5e:71:a9:21:eb:c2:d0:7d:db:f0:f5: 63:d9:6f:c8:14:65:6a:0c:59:07:39:31:b2:ad:e9:9e:69:5e: 9b:6a:27:35:ad:31:1a:a2:75:23:18:7b:2d:32:73:75:28:cc: 2e:4c:dd:75:8e:4c:c3:b4:b2:9f:b1:7d:ff:af:4c:59:38:58: fe:2a:64:9d:53:7a:9d:33:92:d1:0e:24:1a:99:30:77:c1:d5: ee:41:6b:17:43:df:18:91:d2:61:43:2c:5d:f3:d7:8f:b5:8e: e8:bb:79:de:2b:ca:ca:e1:51:bd:73:2a:b6:58:af:5f:75:66: 31:bc:6d:80:8a:4a:49:d1:ac:0f:cb:50:2c:63:2e:eb:33:bd: 8c:37:af:bc:5d:b8:64:9d:b8:d6:c6:5f:e7:a9:7a:23:32:e8: e4:61:8c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YWWNEeym+iTA0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk NmEzMDU1MGItNGIxNS00YjM2LWFjNjgtZmI3NWRlZTM5MTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksn7q+b/+v7SCD938eKG0y3d9P1MXrPMbhVZ uLdaTLBjQSj+9AgW0gS9/WkfTkNPngFtDrVdKFcR1CebHRIzbRtHMP7T4Hy3gziE sWqAIV9XeU2hPZxMS8GAYyzhaJWtBZJpItMUoeeM4yKIZ3/htvZ8ABq0Z63oG9fM O7FMGOsEAEUU0iLrazDbe9gZG6nKcAdwdcRRf5kPKBr2R78uRmHBJfVPg2OrejgC slfhR8WkgC41rCYbApgsgC98tSsnMVXbm5vLNj2G3ZTh/ycBJfXGutI4viTpX33T ZkOh++w+x7N+//hLYF/T0GTnrr983Qh07d+ys3viXd1w6+9N/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC6g0lictB5kAnXDT0LuGfmcB1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDc1OTI4YjQtNWY2Ny0z ODYyLWI5MTUtYjdhYzQwZGU0NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBsc92hrHtTNmtjlvjPAvyrvzQU9ZGqHkHbFiC578hPm6YVvF+Mh67J rG1MK/Nxx5fvRRvbEgS52P6fHMvar0myknSlY/lvN+ZkLXJstx3gzRn+6updkLEv Yl11KTlhmc1ecakh68LQfdvw9WPZb8gUZWoMWQc5MbKt6Z5pXptqJzWtMRqidSMY ey0yc3UozC5M3XWOTMO0sp+xff+vTFk4WP4qZJ1Tep0zktEOJBqZMHfB1e5BaxdD 3xiR0mFDLF3z14+1jui7ed4rysrhUb1zKrZYr191ZjG8bYCKSknRrA/LUCxjLusz vYw3r7xduGSduNbGX+epeiMy6ORhjLI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:25 2024 by rpki-client on console-fra.rpki-client.org