$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa File: d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa (raw, json) Hash identifier: hQ+zp5kgEaM9uCAgWT51K1hhHdeg0sGgZvDdGRm5qW0= Subject key identifier: 5F:FC:83:86:7C:3F:17:5A:86:68:1B:A1:D6:DF:10:2F:94:D6:74:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EA1D11943FB0C0CC95B994D8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa Signing time: Sun 17 Nov 2024 23:57:40 +0000 ROA not before: Sun 17 Nov 2024 23:57:40 +0000 ROA not after: Sat 15 Feb 2025 23:57:40 +0000 asID: 7029 IP address blocks: 71.30.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ea:1d:11:94:3f:b0:c0:cc:95:b9:94:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 17 23:57:40 2024 GMT Not After : Feb 15 23:57:40 2025 GMT Subject: CN=00e44bb4-d1f8-4e72-a86a-49ba4cdfc6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:e9:d3:cc:f5:1f:7c:44:97:3c:35:0e:41: 2f:fc:87:2d:3c:58:a0:dd:36:6a:bb:92:e9:06:55: d1:1d:62:d1:0f:c8:fc:ee:74:09:e2:0d:93:c1:60: fd:d7:2e:0c:3c:c4:0e:b9:60:f0:e1:a0:32:bc:18: 8f:b0:b0:25:54:64:e6:96:8a:92:1d:f3:01:80:be: b0:33:8e:b3:41:c4:c3:1c:c9:ec:92:ff:9d:95:d5: 3e:e6:64:06:d0:b8:ac:2a:35:1c:8c:8d:1e:b3:c7: fa:2e:6d:e2:b5:ac:d8:a0:84:c7:44:77:18:42:79: 17:bc:5d:df:f1:8f:09:d2:0a:f7:61:87:10:ec:a1: c6:0b:0b:a1:99:79:07:3e:a9:d4:27:98:b1:27:a7: 31:73:af:0c:6e:2e:64:c3:d9:56:dc:41:fb:0e:b0: f4:5c:06:47:d5:87:a5:a5:e0:5c:0d:45:5a:ef:d7: 7b:45:31:c9:5d:12:78:fa:cb:89:a7:6b:8f:11:4f: 51:bc:87:be:df:5d:94:b8:91:8f:4a:76:a0:f7:a2: ad:f7:16:32:ec:df:74:4f:ac:25:ac:a4:5b:66:75: 65:07:2e:4b:e7:ad:a9:f4:5e:29:b8:18:be:e9:81: fb:b8:f8:7b:34:cb:05:06:40:88:f7:81:9b:1a:10: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:83:86:7C:3F:17:5A:86:68:1B:A1:D6:DF:10:2F:94:D6:74:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e5:07:5b:6e:ec:36:42:53:7e:b0:53:80:91:52:ed:73:35: e4:9e:2a:02:d5:6b:01:a5:f2:04:06:7b:64:fe:1f:a8:8d:24: 43:ba:94:2b:08:1f:79:4f:a5:34:1c:0c:fd:44:d4:a0:7f:d8: 9c:2a:2a:27:a2:b2:fe:ef:39:24:e7:4e:a0:c5:76:d4:20:f0: 29:56:fe:39:c3:4f:aa:6e:2a:05:6a:52:e1:02:b8:f0:b3:e7: 2f:57:cc:6e:3e:35:77:06:f5:b0:70:6f:f6:2f:ec:9b:ff:87: c6:62:3b:14:05:3e:86:f0:e4:8e:61:96:52:b7:33:d4:f8:d2: 15:6b:28:31:c8:fb:9b:23:b5:3b:c8:0e:3c:ab:c8:e1:71:13: ba:47:01:e6:2a:64:9f:da:33:14:47:37:0e:d9:1c:67:7c:64: 19:bd:46:d0:74:b0:31:cd:c5:eb:25:5d:d5:8d:ca:fc:7c:14: 92:ee:b3:40:9c:04:95:ef:e7:0f:fe:69:04:d6:4f:05:e0:0d: ee:39:12:2d:62:d4:8b:d8:66:8a:cf:46:62:56:2c:a1:7b:b1: dd:4d:02:27:62:94:56:4f:7c:61:e5:2b:8b:ae:24:65:d4:97: 5c:c3:06:0f:ec:2a:bb:8b:78:86:20:49:ad:8d:f2:4e:02:60: 2b:d9:86:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqHRGUP7DAzJW5lNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExNzIzNTc0MFoXDTI1MDIxNTIzNTc0MFowLzEtMCsGA1UEAxMk MDBlNDRiYjQtZDFmOC00ZTcyLWE4NmEtNDliYTRjZGZjNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3rp08z1H3xElzw1DkEv/IctPFig3TZqu5Lp BlXRHWLRD8j87nQJ4g2TwWD91y4MPMQOuWDw4aAyvBiPsLAlVGTmloqSHfMBgL6w M46zQcTDHMnskv+dldU+5mQG0LisKjUcjI0es8f6Lm3itazYoITHRHcYQnkXvF3f 8Y8J0gr3YYcQ7KHGCwuhmXkHPqnUJ5ixJ6cxc68Mbi5kw9lW3EH7DrD0XAZH1Yel peBcDUVa79d7RTHJXRJ4+suJp2uPEU9RvIe+312UuJGPSnag96Kt9xYy7N90T6wl rKRbZnVlBy5L562p9F4puBi+6YH7uPh7NMsFBkCI94GbGhA7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/8g4Z8PxdahmgbodbfEC+U1nShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDkwZWIyMjUtY2IzZS0z NGQ1LTkyYmYtY2ZkY2U3OWU3YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXlB1tu7DZCU36wU4CRUu1zNeSeKgLVawGl8gQGe2T+H6iNJEO6lCsI H3lPpTQcDP1E1KB/2JwqKieisv7vOSTnTqDFdtQg8ClW/jnDT6puKgVqUuECuPCz 5y9XzG4+NXcG9bBwb/Yv7Jv/h8ZiOxQFPobw5I5hllK3M9T40hVrKDHI+5sjtTvI DjyryOFxE7pHAeYqZJ/aMxRHNw7ZHGd8ZBm9RtB0sDHNxeslXdWNyvx8FJLus0Cc BJXv5w/+aQTWTwXgDe45Ei1i1IvYZorPRmJWLKF7sd1NAidilFZPfGHlK4uuJGXU l1zDBg/sKruLeIYgSa2N8k4CYCvZhs0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:25 2024 by rpki-client on console-fra.rpki-client.org