$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0c85033-78ce-3861-98db-29ae55821aa0.roa File: e0c85033-78ce-3861-98db-29ae55821aa0.roa (raw, json) Hash identifier: DxsM9q1/TwghXWUYbcDQoIRiNCVeYQCOByTAXUs9lp8= Subject key identifier: 9E:22:54:89:71:72:35:A5:5C:C1:28:85:52:67:C6:19:52:5C:5D:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155300F0BC6CBFA0E4D0D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0c85033-78ce-3861-98db-29ae55821aa0.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 72.16.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:30:0f:0b:c6:cb:fa:0e:4d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=81577e5f-4e26-4284-a2e7-0456a6365c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:f9:c3:81:99:9e:51:26:a8:df:b6:67:39: 3b:1e:13:1b:76:ed:53:38:39:f3:96:24:e3:d8:43: 9f:ee:9c:92:a5:96:81:b7:c3:9a:f6:d2:31:91:05: 2d:84:2f:88:82:ff:9a:cb:78:9d:11:f5:be:ef:44: 79:79:ae:5f:81:e4:aa:28:ae:41:61:51:b1:27:f5: bf:72:de:66:94:29:81:16:99:cb:ca:ec:d2:b8:ed: 95:82:a5:bb:03:cd:89:0a:4f:98:2f:a7:15:ea:b2: d4:51:b3:cd:3c:07:fb:53:11:a4:51:fb:11:c4:dd: 06:c3:b1:d6:1e:dd:7f:05:67:7a:2a:36:e9:e3:27: c5:9e:a0:dc:1b:f5:9f:68:5a:ba:cb:5b:a4:b1:04: 16:3a:e8:21:7b:30:fc:e7:ae:55:e4:28:c0:46:5e: 6b:84:bd:b5:27:31:68:15:df:64:ed:e6:8d:7a:a1: 0b:8c:d4:7a:ce:6b:1b:74:34:2a:3c:26:50:c9:9c: 58:2b:63:c5:60:f9:15:e6:68:c2:b1:1b:0a:6d:91: 59:08:f1:7a:7c:8c:0a:6e:17:48:f7:eb:7a:62:03: 6d:93:16:b4:29:40:05:58:41:44:80:ec:50:18:98: 60:59:4f:a3:4a:0e:0a:98:cc:18:ab:e1:41:e7:6e: 4f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:54:89:71:72:35:A5:5C:C1:28:85:52:67:C6:19:52:5C:5D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0c85033-78ce-3861-98db-29ae55821aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0e:82:f2:70:89:e7:1f:cb:58:3e:6a:38:d1:b6:1c:9c:9c: 72:70:03:e8:ea:e3:63:19:54:c6:c5:28:95:95:25:c7:38:35: 88:71:b7:2f:10:d3:82:54:07:6d:76:7b:d4:14:c1:58:c1:d6: 02:c9:29:a0:1c:15:c4:aa:a9:cc:4e:02:4e:47:5d:1c:fe:7e: 4e:83:a9:52:28:12:52:77:41:45:76:15:7b:87:38:70:44:37: 16:35:84:dc:a3:f2:2d:e2:03:8b:c6:98:2c:37:e2:2e:17:35: 1f:2d:1e:4c:68:09:d0:c3:01:53:9d:b8:14:1e:91:c4:0d:51: bf:70:eb:9b:bd:30:82:e5:08:08:11:e0:b0:3c:5e:aa:e8:7a: 44:02:95:64:7d:4e:49:92:d8:58:b9:00:48:7c:26:47:4c:fe: b6:64:fd:88:fe:21:c6:2e:d9:3f:b4:5c:8c:4a:a2:34:8c:3a: ed:b3:db:5d:ff:b4:a6:98:c1:15:26:07:96:ea:5c:11:f0:a6: 80:2d:4f:06:85:3f:d1:a8:f3:72:f9:94:13:e9:a1:d1:32:5b: 01:d3:3f:dc:2f:d6:94:4a:bf:d6:1c:ad:33:e9:a5:11:9f:e6: 7a:2a:15:58:c1:e7:74:f2:05:01:ef:4d:6e:64:10:97:db:4e: 47:67:96:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTAPC8bL+g5NDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ODE1NzdlNWYtNGUyNi00Mjg0LWEyZTctMDQ1NmE2MzY1YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+D5w4GZnlEmqN+2Zzk7HhMbdu1TODnzliTj 2EOf7pySpZaBt8Oa9tIxkQUthC+Igv+ay3idEfW+70R5ea5fgeSqKK5BYVGxJ/W/ ct5mlCmBFpnLyuzSuO2VgqW7A82JCk+YL6cV6rLUUbPNPAf7UxGkUfsRxN0Gw7HW Ht1/BWd6Kjbp4yfFnqDcG/WfaFq6y1uksQQWOughezD8565V5CjARl5rhL21JzFo Fd9k7eaNeqELjNR6zmsbdDQqPCZQyZxYK2PFYPkV5mjCsRsKbZFZCPF6fIwKbhdI 9+t6YgNtkxa0KUAFWEFEgOxQGJhgWU+jSg4KmMwYq+FB525PRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4iVIlxcjWlXMEohVJnxhlSXF1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTBjODUwMzMtNzhjZS0z ODYxLTk4ZGItMjlhZTU1ODIxYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4OgvJwiecfy1g+ajjRthycnHJwA+jq42MZVMbFKJWVJcc4NYhxty8Q 04JUB212e9QUwVjB1gLJKaAcFcSqqcxOAk5HXRz+fk6DqVIoElJ3QUV2FXuHOHBE NxY1hNyj8i3iA4vGmCw34i4XNR8tHkxoCdDDAVOduBQekcQNUb9w65u9MILlCAgR 4LA8XqroekQClWR9TkmS2Fi5AEh8JkdM/rZk/Yj+IcYu2T+0XIxKojSMOu2z213/ tKaYwRUmB5bqXBHwpoAtTwaFP9Go83L5lBPpodEyWwHTP9wv1pRKv9YcrTPppRGf 5noqFVjB53TyBQHvTW5kEJfbTkdnlnc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:14 2024 by rpki-client on console-ams.rpki-client.org