$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa File: db864009-5792-3ef2-ae28-c97e5430da9a.roa (raw, json) Hash identifier: A5jfNze7xR256y/L/mS6e4VD4rJMCjaN+wy5vdgzBHI= Subject key identifier: E4:1A:32:D1:89:34:65:27:7B:F5:34:28:CE:65:7E:02:70:B5:BB:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117C19A8A88DE2A8AB3E380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa Signing time: Thu 12 Sep 2024 17:22:25 +0000 ROA not before: Thu 12 Sep 2024 17:22:25 +0000 ROA not after: Wed 11 Dec 2024 18:22:25 +0000 asID: 7029 IP address blocks: 75.91.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:c1:9a:8a:88:de:2a:8a:b3:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:25 2024 GMT Not After : Dec 11 18:22:25 2024 GMT Subject: CN=2c621f1a-fea6-4610-9c27-e3894dc3f032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:d4:a0:14:61:bf:90:9f:bf:3f:ea:42:8c: 99:e1:ba:4e:73:c6:22:07:04:61:eb:f2:61:e0:c9: 57:84:c7:6b:ab:93:0b:ed:23:f4:20:15:9f:7c:2d: dd:fb:0f:d5:6d:c4:ad:7c:5a:31:c9:ce:24:ec:cb: 97:39:8e:50:ae:33:1b:f4:8c:80:4a:76:7f:d0:9c: ad:f7:a3:6d:af:cd:8c:19:40:40:bb:6e:e8:39:d0: 11:31:43:8c:eb:f0:0e:90:f9:30:8b:02:7a:fe:e5: 68:5f:de:e3:82:d1:12:22:1f:b9:c1:f2:fb:9a:92: c4:92:4c:02:cb:a0:e4:83:b1:88:5e:e9:53:36:2d: b0:45:1f:0a:05:05:56:29:f4:d9:12:1a:42:e6:8f: 2a:94:26:86:f0:68:e7:b5:fb:0a:0c:65:8f:92:38: ea:d7:80:14:2d:f4:9f:8e:e1:53:b3:0b:fd:36:74: 5c:5f:26:44:81:3c:8e:cf:52:a2:10:c7:98:f2:de: e7:81:82:cc:16:f8:33:20:7d:c8:10:9d:15:ba:78: 63:fd:2a:78:08:3f:68:7b:07:ae:bc:97:22:5a:35: 9e:d2:19:bb:09:1f:96:7e:10:2d:30:4e:21:18:d5: 54:1e:00:ca:46:39:3f:14:35:c7:4f:22:da:1f:9c: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1A:32:D1:89:34:65:27:7B:F5:34:28:CE:65:7E:02:70:B5:BB:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:10:45:5f:26:61:4f:aa:2f:4c:df:cb:8a:15:08:7c:cd:f8: 07:1a:1f:6a:c3:0f:13:d2:96:c2:98:4f:4b:63:a6:f0:a6:05: b9:f2:a1:be:8d:3c:5e:c5:a3:08:b6:bd:f8:bf:2a:01:7f:0f: b8:dd:2d:14:fd:7d:e1:9b:de:23:9a:dc:e0:27:09:e1:09:07: dc:9f:94:2d:22:aa:b1:be:de:59:d0:51:0d:42:07:be:7f:d6: 21:56:2f:b3:2c:f6:17:0a:32:91:48:4e:a3:4b:b8:10:84:2b: 5b:78:65:64:ec:49:3c:5a:2d:3b:c3:d3:79:64:bc:c4:f4:80: 7c:fc:a7:21:db:12:64:be:6b:d1:39:01:f7:1a:d2:36:11:62: 05:9d:91:04:8c:f1:6a:48:14:16:6b:34:31:4e:f8:4b:be:80: ee:0c:35:ff:10:6d:c1:e3:72:e0:c5:28:a3:5e:70:08:65:e9: 5b:02:c3:2f:01:46:38:e7:fa:dd:cf:18:43:4c:ba:b7:4e:6c: 05:87:6c:71:74:2d:cc:e9:9f:a2:4c:ee:11:90:44:84:58:b4: 6d:83:65:a4:38:5a:74:ad:d0:91:d2:0e:71:ee:52:09:e1:c6: 7b:1d:64:0a:f1:67:ef:ed:d0:2c:5c:22:a0:ee:c2:62:ce:bd: b9:ee:73:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF8GaiojeKoqz44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIyNVoXDTI0MTIxMTE4MjIyNVowLzEtMCsGA1UEAxMk MmM2MjFmMWEtZmVhNi00NjEwLTljMjctZTM4OTRkYzNmMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsXUoBRhv5Cfvz/qQoyZ4bpOc8YiBwRh6/Jh 4MlXhMdrq5ML7SP0IBWffC3d+w/VbcStfFoxyc4k7MuXOY5QrjMb9IyASnZ/0Jyt 96Ntr82MGUBAu27oOdARMUOM6/AOkPkwiwJ6/uVoX97jgtESIh+5wfL7mpLEkkwC y6Dkg7GIXulTNi2wRR8KBQVWKfTZEhpC5o8qlCaG8GjntfsKDGWPkjjq14AULfSf juFTswv9NnRcXyZEgTyOz1KiEMeY8t7ngYLMFvgzIH3IEJ0Vunhj/Sp4CD9oeweu vJciWjWe0hm7CR+WfhAtME4hGNVUHgDKRjk/FDXHTyLaH5xmvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQaMtGJNGUne/U0KM5lfgJwtbvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI4NjQwMDktNTc5Mi0z ZWYyLWFlMjgtYzk3ZTU0MzBkYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1uwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMQRV8mYU+qL0zfy4oVCHzN+AcaH2rDDxPSlsKYT0tjpvCmBbnyob6N PF7Fowi2vfi/KgF/D7jdLRT9feGb3iOa3OAnCeEJB9yflC0iqrG+3lnQUQ1CB75/ 1iFWL7Ms9hcKMpFITqNLuBCEK1t4ZWTsSTxaLTvD03lkvMT0gHz8pyHbEmS+a9E5 Afca0jYRYgWdkQSM8WpIFBZrNDFO+Eu+gO4MNf8QbcHjcuDFKKNecAhl6VsCwy8B Rjjn+t3PGENMurdObAWHbHF0Lczpn6JM7hGQRIRYtG2DZaQ4WnSt0JHSDnHuUgnh xnsdZArxZ+/t0CxcIqDuwmLOvbnuc/k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:26 2024 by rpki-client on console-fra.rpki-client.org