$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa File: db1a757d-af18-3aaa-9e08-520d47c74438.roa (raw, json) Hash identifier: kzWmiQisTrSS8jk4bjLSZNU8drlZ0wOochkpP0M0d9M= Subject key identifier: 20:2F:F1:61:D1:41:8E:83:31:FA:FE:58:C2:F9:49:5C:40:BC:4C:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15543C8AC9F8B9CA9129F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 29877 IP address blocks: 74.207.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:43:c8:ac:9f:8b:9c:a9:12:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=53b1cf13-2d7d-42ba-a543-4b59c83a3189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:f8:15:04:2a:b9:25:d2:a6:d6:18:a2:3e: 21:b9:34:cd:cc:fb:c3:f8:92:08:cc:fb:fe:57:ba: 11:62:84:ba:fd:88:e5:a4:ac:83:65:33:4a:9f:5e: 9f:ef:d7:c2:ea:e4:48:76:b2:1d:09:19:aa:20:8c: d2:67:db:0c:94:81:09:4c:eb:d4:91:26:15:97:7a: 4c:74:af:a7:0a:fa:55:34:bb:2c:91:66:fa:69:33: f8:0b:35:43:d6:d3:6e:8f:52:11:b5:3c:3b:7b:7b: 17:4e:c7:a1:0d:db:5a:ba:b7:ce:84:e4:9e:46:7c: dc:68:a3:27:83:c4:c9:61:44:70:55:f7:04:59:e5: fc:9b:2e:c0:85:80:47:df:74:08:11:e9:b3:57:86: 8d:ce:8f:63:48:f7:c0:a0:ce:76:bf:98:4c:4d:c8: cc:9c:51:51:fb:bc:b4:a6:c5:2e:32:ba:27:63:ec: 1f:bf:f6:33:6c:ac:fc:85:73:1f:fb:53:0b:ce:3e: 26:87:b2:d0:11:b4:38:cb:eb:74:95:a9:f2:4f:9b: 7d:c0:df:69:c3:b2:99:ca:45:e4:dd:e1:9d:ac:5f: 9a:ca:ef:fd:d8:08:b9:49:2f:d9:3b:44:6d:11:bf: f3:fa:6b:b1:3e:9a:13:3e:0c:7d:35:f4:1b:a1:ff: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2F:F1:61:D1:41:8E:83:31:FA:FE:58:C2:F9:49:5C:40:BC:4C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.207.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:34:7d:42:33:63:35:7f:bc:d4:0a:79:d6:a3:9e:8a:12:b6: 07:9e:cb:2d:f7:1e:30:f2:45:d3:fb:25:5f:e3:05:05:3f:14: 7b:17:09:e4:a9:df:8c:63:7f:0e:f8:9a:cb:e8:be:be:31:16: 26:6b:50:cf:95:34:8a:89:6e:35:72:01:9e:7d:f2:f7:7a:64: a8:c3:2f:a6:ca:9e:75:b2:15:e7:61:9f:78:51:7b:8a:36:3d: 3f:82:33:37:0d:57:de:b2:c4:6d:13:d3:51:95:67:22:0b:6f: e3:99:7c:9c:56:ee:b8:69:d6:43:a1:7b:af:9e:0f:f4:90:53: e5:d8:1d:e4:3b:83:ab:3b:04:de:f0:99:50:5a:18:a8:ea:db: 01:01:85:cf:df:b0:d1:c1:31:fd:b5:d7:5d:78:5d:94:0b:b7: 08:76:3d:92:e0:09:c5:18:cd:58:de:b6:4f:b1:1e:52:b3:59: 63:72:84:69:46:9c:67:34:b0:9a:f4:96:cc:25:42:4a:d2:37: 74:c9:a1:c9:72:80:bd:21:a9:49:16:96:60:a7:4d:f5:a8:22: 9f:26:d4:10:3a:a7:95:c0:34:b9:ac:f6:33:26:3e:a2:5f:46: d2:c2:99:f5:1c:29:a9:71:16:62:af:bc:41:06:6e:5d:4c:b5: f9:b3:a1:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUPIrJ+LnKkSnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NTNiMWNmMTMtMmQ3ZC00MmJhLWE1NDMtNGI1OWM4M2EzMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj34FQQquSXSptYYoj4huTTNzPvD+JIIzPv+ V7oRYoS6/YjlpKyDZTNKn16f79fC6uRIdrIdCRmqIIzSZ9sMlIEJTOvUkSYVl3pM dK+nCvpVNLsskWb6aTP4CzVD1tNuj1IRtTw7e3sXTsehDdtaurfOhOSeRnzcaKMn g8TJYURwVfcEWeX8my7AhYBH33QIEemzV4aNzo9jSPfAoM52v5hMTcjMnFFR+7y0 psUuMronY+wfv/YzbKz8hXMf+1MLzj4mh7LQEbQ4y+t0lanyT5t9wN9pw7KZykXk 3eGdrF+ayu/92Ai5SS/ZO0RtEb/z+muxPpoTPgx9NfQbof+n2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAv8WHRQY6DMfr+WML5SVxAvEzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIxYTc1N2QtYWYxOC0z YWFhLTllMDgtNTIwZDQ3Yzc0NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSs/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc0fUIzYzV/vNQKedajnooStgeeyy33HjDyRdP7JV/jBQU/FHsXCeSp 34xjfw74msvovr4xFiZrUM+VNIqJbjVyAZ598vd6ZKjDL6bKnnWyFedhn3hRe4o2 PT+CMzcNV96yxG0T01GVZyILb+OZfJxW7rhp1kOhe6+eD/SQU+XYHeQ7g6s7BN7w mVBaGKjq2wEBhc/fsNHBMf211114XZQLtwh2PZLgCcUYzVjetk+xHlKzWWNyhGlG nGc0sJr0lswlQkrSN3TJoclygL0hqUkWlmCnTfWoIp8m1BA6p5XANLms9jMmPqJf RtLCmfUcKalxFmKvvEEGbl1MtfmzoTo= -----END CERTIFICATE-----Generated at Mon Nov 25 15:58:41 2024 by rpki-client on console-fra.rpki-client.org