$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa File: dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa (raw, json) Hash identifier: 0IDdCx40iH7TIsMKqGLtjo8BF7bgdxCbTQbZ9z+psZ8= Subject key identifier: 3E:42:8F:78:C9:57:13:99:47:38:02:66:6B:0C:2D:39:82:5C:CF:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15539B07C3A3B9525ABEEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 207.59.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:39:b0:7c:3a:3b:95:25:ab:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=3bc8d3fb-b34e-4f3a-b562-bc08612b70ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:1d:b1:e6:79:3a:ff:12:3f:fc:04:e3:d7: fa:28:21:21:6b:a4:dc:e7:44:be:86:bf:46:f2:48: 4d:10:bb:da:1b:18:7f:b4:b7:41:3e:74:3f:50:5e: 68:d9:e7:f3:37:2f:6f:f6:0a:20:41:f2:1e:e8:ae: 90:c2:44:e7:b0:35:46:8c:98:b5:0e:88:6e:85:f3: 13:93:7e:e0:b3:ec:e7:b7:b9:3d:e8:f8:65:5b:da: 14:4c:97:90:52:25:64:b7:31:10:02:b3:a3:6f:cd: f5:ff:e3:04:4e:ff:8b:f9:02:b2:c0:c3:41:5d:9f: fb:bf:92:c2:6a:b8:5c:84:e8:23:98:63:91:1c:c6: b8:75:07:2f:11:1a:7c:c0:08:0b:eb:ac:b1:20:86: 55:21:e1:22:10:98:30:76:d9:1e:20:03:09:ae:b7: ee:fe:8a:d8:9f:ed:3e:dc:ed:32:04:f3:77:a8:79: d2:cf:72:71:55:b4:90:55:1c:a9:a3:a1:2c:43:a6: e2:cf:7b:60:28:3c:80:52:da:a4:e0:5e:70:ee:e4: 3f:2f:cd:c1:2b:99:c1:84:af:cb:64:62:90:51:2a: 72:0a:bc:2d:87:1d:0c:68:8f:5d:06:04:33:5e:2d: 96:fc:b7:08:10:27:4c:18:6b:64:26:21:81:0e:23: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:8F:78:C9:57:13:99:47:38:02:66:6B:0C:2D:39:82:5C:CF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:89:13:b6:d0:2f:41:13:9d:34:63:c5:53:aa:87:e0:7a:19: cb:dc:3b:ee:82:19:18:7d:72:86:a2:81:d2:aa:f8:68:1a:c6: 14:83:6f:15:f4:71:1b:a5:27:16:cb:c6:4c:5f:c3:26:89:b6: 9f:d1:32:13:0e:64:c2:9f:a1:0d:77:df:a0:7f:2b:60:4b:2a: 96:6b:48:eb:ed:2f:c5:47:ff:2e:f0:5d:be:45:66:5b:ac:69: 21:dc:06:ca:97:3e:89:58:ec:4c:d7:54:c9:53:93:d3:6a:d3: 84:c4:76:28:fb:53:92:5f:e7:54:e3:88:26:38:34:58:c9:88: af:19:4a:68:47:e1:8f:b0:95:4d:55:b8:40:bc:8d:51:79:e0: 4c:9b:94:26:5c:dd:6c:66:8a:29:a6:2c:0c:c0:3d:1a:60:c1: fe:f9:fe:75:6d:8b:a9:48:3c:fa:eb:e8:71:2b:5a:b2:35:38: c5:8f:f8:cb:ac:81:1c:c1:4e:f0:01:51:8d:dd:d3:3c:29:24: 8a:85:5d:f2:d1:0f:9b:e4:c0:26:00:aa:df:72:a0:7d:6c:b8: c5:83:5f:0e:69:20:27:b5:b7:ce:85:58:34:29:d4:2f:60:51: f2:72:74:3e:ad:fa:a6:b4:d0:34:bc:1c:1d:1f:c1:bc:51:bb: f9:c7:1a:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTmwfDo7lSWr7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk M2JjOGQzZmItYjM0ZS00ZjNhLWI1NjItYmMwODYxMmI3MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYMdseZ5Ov8SP/wE49f6KCEha6Tc50S+hr9G 8khNELvaGxh/tLdBPnQ/UF5o2efzNy9v9gogQfIe6K6QwkTnsDVGjJi1DohuhfMT k37gs+znt7k96PhlW9oUTJeQUiVktzEQArOjb831/+METv+L+QKywMNBXZ/7v5LC arhchOgjmGORHMa4dQcvERp8wAgL66yxIIZVIeEiEJgwdtkeIAMJrrfu/orYn+0+ 3O0yBPN3qHnSz3JxVbSQVRypo6EsQ6biz3tgKDyAUtqk4F5w7uQ/L83BK5nBhK/L ZGKQUSpyCrwthx0MaI9dBgQzXi2W/LcIECdMGGtkJiGBDiNkPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Cj3jJVxOZRzgCZmsMLTmCXM/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFiNTNjODktNmMxZS0z YjRkLThkMWMtNDFjYTJiNTRiZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzuvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuJE7bQL0ETnTRjxVOqh+B6GcvcO+6CGRh9coaigdKq+GgaxhSDbxX0 cRulJxbLxkxfwyaJtp/RMhMOZMKfoQ1336B/K2BLKpZrSOvtL8VH/y7wXb5FZlus aSHcBsqXPolY7EzXVMlTk9Nq04TEdij7U5Jf51TjiCY4NFjJiK8ZSmhH4Y+wlU1V uEC8jVF54EyblCZc3WxmiimmLAzAPRpgwf75/nVti6lIPPrr6HErWrI1OMWP+Mus gRzBTvABUY3d0zwpJIqFXfLRD5vkwCYAqt9yoH1suMWDXw5pICe1t86FWDQp1C9g UfJydD6t+qa00DS8HB0fwbxRu/nHGlI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:26 2024 by rpki-client on console-fra.rpki-client.org