$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa File: dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa (raw, json) Hash identifier: lEqFw9TujSL0d+VrCj6FQVf+Jjer2Q+Fhwy2v457Bsk= Subject key identifier: 5E:D9:2B:D8:64:ED:DE:0E:30:15:AB:DC:44:BC:13:D3:53:44:34:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1552C13E0DA01DBAF174B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 66.6.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:2c:13:e0:da:01:db:af:17:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=848ad9ff-db0a-48d5-a776-37b0dd632c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1f:3d:df:56:dd:7a:2f:76:b0:32:2c:0a:82: cd:dc:73:03:02:50:79:54:bd:cd:a0:a0:48:56:33: 49:d2:3d:c3:cf:61:ad:7f:1e:58:ba:b3:c7:75:98: 2a:61:78:c1:3b:9e:bc:07:ec:80:9a:2e:ce:79:00: 93:31:1f:d5:9b:07:22:b8:54:b3:7f:f0:69:d2:01: 9d:6d:d0:f6:4e:42:73:3c:05:9a:b9:ff:92:d2:fc: ed:ad:9d:3a:ff:32:d6:a3:70:41:c8:db:d2:d8:48: b2:0c:b2:f4:1f:b0:4c:88:4a:85:75:45:f0:c7:ee: 32:e8:fb:86:16:f9:49:5d:28:4b:4d:43:a8:7e:d6: 20:fe:9f:83:a0:14:01:a7:a7:73:1a:bd:e1:16:2b: 9b:dc:81:73:0a:4e:e1:52:51:f9:3e:5e:ce:24:5f: 54:89:70:5f:9d:51:6e:77:ed:7d:74:3b:60:fc:df: a2:f5:02:f5:6a:a6:8f:b7:08:0c:cc:3c:75:dd:06: 21:b4:f4:d9:8e:ec:7b:37:c2:6d:17:6b:55:5b:18: 3a:ee:88:c7:1f:e0:70:61:4b:ac:ed:19:cb:eb:30: df:1d:e9:56:50:29:43:df:25:34:53:ab:1f:10:07: 78:20:88:87:cf:47:0e:c0:77:04:64:04:77:79:97: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D9:2B:D8:64:ED:DE:0E:30:15:AB:DC:44:BC:13:D3:53:44:34:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfdea3f9-0bd9-3f41-8ecb-bd4f501f9860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.6.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e4:05:bc:8c:cb:7b:05:35:0f:56:a1:41:88:b2:ce:b6:65: 43:d4:f8:2b:97:0d:d8:a1:a9:f4:4c:85:82:7a:ca:33:d7:37: 39:3f:b9:84:a8:dc:8a:1b:84:21:aa:4b:96:4d:69:87:33:ea: ca:c9:e9:6e:d9:84:af:4c:1d:71:d9:40:3f:5d:28:10:33:78: 7c:78:27:b7:63:85:51:4a:d4:e9:b5:41:c8:0a:12:89:d9:44: 03:ad:fb:73:38:d0:79:00:d9:7f:a5:43:29:36:f7:ed:18:93: 24:83:72:3d:c3:2c:64:bc:4b:24:f5:50:24:f0:90:9f:3e:a7: 92:12:c7:b3:d2:59:2a:5a:87:0a:47:0a:0f:7e:8e:f5:85:61: 04:94:7b:fe:f8:4d:6b:00:69:fd:41:ed:a7:bc:0e:f2:9e:95: 4d:ee:6b:f8:e9:69:59:b6:9a:7c:d2:58:b6:19:53:d4:6d:88: 0a:5c:01:0b:8e:00:cb:4b:c3:b5:10:1b:33:a1:c0:4d:9d:ec: d9:83:12:ac:71:cf:a2:a2:3a:5e:19:5c:e1:1c:1f:91:46:9b: 6d:ae:48:44:75:23:15:25:fd:0c:68:ab:c3:d7:56:28:ba:ca: c7:49:e4:89:8a:ef:97:71:85:6d:48:01:63:06:b8:bf:ed:1a: 2b:fe:68:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVSwT4NoB268XSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODQ4YWQ5ZmYtZGIwYS00OGQ1LWE3NzYtMzdiMGRkNjMyYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih8931bdei92sDIsCoLN3HMDAlB5VL3NoKBI VjNJ0j3Dz2Gtfx5YurPHdZgqYXjBO568B+yAmi7OeQCTMR/VmwciuFSzf/Bp0gGd bdD2TkJzPAWauf+S0vztrZ06/zLWo3BByNvS2EiyDLL0H7BMiEqFdUXwx+4y6PuG FvlJXShLTUOoftYg/p+DoBQBp6dzGr3hFiub3IFzCk7hUlH5Pl7OJF9UiXBfnVFu d+19dDtg/N+i9QL1aqaPtwgMzDx13QYhtPTZjux7N8JtF2tVWxg67ojHH+BwYUus 7RnL6zDfHelWUClD3yU0U6sfEAd4IIiHz0cOwHcEZAR3eZfK+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7ZK9hk7d4OMBWr3ES8E9NTRDTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZkZWEzZjktMGJkOS0z ZjQxLThlY2ItYmQ0ZjUwMWY5ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPkBbyMy3sFNQ9WoUGIss62ZUPU+CuXDdihqfRMhYJ6yjPXNzk/uYSo 3IobhCGqS5ZNaYcz6srJ6W7ZhK9MHXHZQD9dKBAzeHx4J7djhVFK1Om1QcgKEonZ RAOt+3M40HkA2X+lQyk29+0YkySDcj3DLGS8SyT1UCTwkJ8+p5ISx7PSWSpahwpH Cg9+jvWFYQSUe/74TWsAaf1B7ae8DvKelU3ua/jpaVm2mnzSWLYZU9RtiApcAQuO AMtLw7UQGzOhwE2d7NmDEqxxz6KiOl4ZXOEcH5FGm22uSER1IxUl/Qxoq8PXVii6 ysdJ5ImK75dxhW1IAWMGuL/tGiv+aMM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:27 2024 by rpki-client on console-fra.rpki-client.org