$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa File: db315c54-2d45-3c4c-a01d-39465b270b1e.roa (raw, json) Hash identifier: uMZZ/D8fGh7A/sbRjMLL6l0h5pNBxTikAEFvCJCgxQc= Subject key identifier: 9E:A3:2B:3C:2A:2A:CD:BB:67:41:2C:50:10:FD:F2:8E:7F:AD:E0:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847B2669B6595F5239C787C7000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa Signing time: Tue 29 Oct 2024 01:00:32 +0000 ROA not before: Tue 29 Oct 2024 01:00:32 +0000 ROA not after: Mon 27 Jan 2025 02:00:32 +0000 asID: 27338 IP address blocks: 209.192.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:66:9b:65:95:f5:23:9c:78:7c:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 29 01:00:32 2024 GMT Not After : Jan 27 02:00:32 2025 GMT Subject: CN=d1a668b4-6c80-4c6e-8380-5b90d742ebf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:19:83:32:07:51:d6:0b:b2:39:58:c8:56: c0:a7:a9:fe:3f:78:42:c8:c5:e3:92:21:5d:fd:c4: 55:3a:ef:07:6e:9f:1a:99:c0:55:c6:d8:98:47:3a: 46:0a:b8:71:1a:a4:00:07:1b:4a:be:a9:ca:2d:93: c7:6b:bb:e4:d2:fc:db:dc:60:52:d7:69:4a:95:51: e0:75:e8:0c:ba:b7:8c:c8:a5:4a:62:8c:a9:50:80: 91:98:11:77:13:9f:0a:cd:0b:43:ff:3b:d9:5a:93: 48:ae:96:f9:25:e9:c8:d5:99:e5:1c:9d:c7:8c:61: d1:25:7d:7b:43:a9:5e:6a:5a:e7:25:d5:41:31:62: 00:e7:80:c7:a0:f5:46:5a:0b:f9:86:f2:81:e4:9d: d4:32:81:e9:74:52:ff:fa:0e:cc:9f:df:8b:ff:2f: b9:4d:62:9c:8a:81:74:11:38:82:1d:35:0f:08:01: db:bf:11:e6:88:3b:68:69:b3:3b:27:b9:e7:53:3e: 28:4e:76:64:70:ef:5f:9d:94:ea:34:51:b5:bd:72: e7:9a:3b:f4:66:b5:10:16:6d:10:a0:c8:c2:58:d8: df:08:ac:33:70:77:91:b4:af:92:55:69:f4:e3:a5: 42:f8:48:d9:d5:ba:8f:31:ac:ba:0f:23:14:41:d4: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A3:2B:3C:2A:2A:CD:BB:67:41:2C:50:10:FD:F2:8E:7F:AD:E0:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db315c54-2d45-3c4c-a01d-39465b270b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4d:bd:d7:d1:fb:8b:4e:80:f9:e0:fb:37:a3:84:d7:17:ee: ab:6e:9d:af:a7:c1:2c:b4:a4:88:40:5c:82:01:74:c8:07:c0: 3b:fc:44:59:67:dd:b2:b6:7e:73:dd:92:91:4f:55:ac:b5:71: 7a:a9:bb:88:d0:f4:7d:80:39:6d:4d:8d:6f:94:1d:12:5a:ef: 71:f8:20:d4:65:9c:58:a6:9a:40:c2:d6:bf:35:4e:e7:d2:62: 90:83:d2:d3:45:17:3a:3b:66:11:13:35:42:d8:f5:c2:30:14: 1c:1a:ed:c0:2a:d5:3c:ec:4d:3b:b9:b3:07:22:38:8b:fd:6e: c9:ca:b7:a5:44:fd:f2:aa:89:1d:9f:f3:ca:f7:65:aa:49:3c: 66:7c:ad:8c:c1:0b:93:ae:82:73:8e:3f:cf:3c:29:fd:a8:36: cf:62:ce:bf:06:4d:df:81:8c:43:dd:0f:d2:07:5d:cd:57:94: 92:b6:a9:3e:13:9f:b3:9a:81:2b:c0:2c:1e:51:6c:58:84:c4: 46:48:51:e8:f3:d1:c8:23:b5:6a:89:34:84:48:06:ee:5d:dc: ce:3a:ba:0a:51:92:ae:c4:21:d3:b5:de:c0:e7:0d:51:66:5f: 7e:60:fa:34:67:1f:f0:5a:f1:00:b2:6d:f8:07:30:d7:05:64: 61:46:34:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeyZptllfUjnHh8cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk ZDFhNjY4YjQtNmM4MC00YzZlLTgzODAtNWI5MGQ3NDJlYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdEZgzIHUdYLsjlYyFbAp6n+P3hCyMXjkiFd /cRVOu8Hbp8amcBVxtiYRzpGCrhxGqQABxtKvqnKLZPHa7vk0vzb3GBS12lKlVHg degMureMyKVKYoypUICRmBF3E58KzQtD/zvZWpNIrpb5JenI1ZnlHJ3HjGHRJX17 Q6lealrnJdVBMWIA54DHoPVGWgv5hvKB5J3UMoHpdFL/+g7Mn9+L/y+5TWKcioF0 ETiCHTUPCAHbvxHmiDtoabM7J7nnUz4oTnZkcO9fnZTqNFG1vXLnmjv0ZrUQFm0Q oMjCWNjfCKwzcHeRtK+SVWn046VC+EjZ1bqPMay6DyMUQdT+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6jKzwqKs27Z0EsUBD98o5/reDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIzMTVjNTQtMmQ0NS0z YzRjLWEwMWQtMzk0NjViMjcwYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5NvdfR+4tOgPng+zejhNcX7qtuna+nwSy0pIhAXIIBdMgHwDv8RFln 3bK2fnPdkpFPVay1cXqpu4jQ9H2AOW1NjW+UHRJa73H4INRlnFimmkDC1r81TufS YpCD0tNFFzo7ZhETNULY9cIwFBwa7cAq1TzsTTu5swciOIv9bsnKt6VE/fKqiR2f 88r3ZapJPGZ8rYzBC5OugnOOP888Kf2oNs9izr8GTd+BjEPdD9IHXc1XlJK2qT4T n7OagSvALB5RbFiExEZIUejz0cgjtWqJNIRIBu5d3M46ugpRkq7EIdO13sDnDVFm X35g+jRnH/Ba8QCybfgHMNcFZGFGNKw= -----END CERTIFICATE-----Generated at Mon Nov 25 15:58:41 2024 by rpki-client on console-fra.rpki-client.org