$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecea0a96-77a0-3f01-aa75-d18b403053a3.roa File: ecea0a96-77a0-3f01-aa75-d18b403053a3.roa (raw, json) Hash identifier: yHEQ4WqlRwuEFkDvmPGuZ2OUCC3IwzMUakjxvnNx2ow= Subject key identifier: 31:C6:C9:EB:3A:CD:89:99:43:5E:4E:5B:D6:EE:74:21:11:D6:9A:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553B104D380BB2185EC9D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecea0a96-77a0-3f01-aa75-d18b403053a3.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 209.92.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3b:10:4d:38:0b:b2:18:5e:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=63d22a09-ffdd-4a27-8238-542b9a442a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:a5:24:17:a5:07:26:79:90:ef:ac:88:9c: ba:4d:a8:ce:b0:fa:fd:d9:4e:6a:ae:24:11:c4:bc: ae:a7:18:03:6d:52:64:6e:f8:ea:d3:18:77:83:27: dd:59:31:22:85:7a:e0:38:7c:87:46:7d:3a:b3:99: 3e:85:34:50:df:45:08:1b:b3:05:31:f2:e2:e1:3b: 95:8a:4d:94:3f:76:05:dc:3a:b7:d8:bf:7e:86:0a: a9:27:37:8e:60:72:14:79:08:de:a3:df:88:68:d1: 5a:6c:ad:4e:09:3c:59:28:4e:3a:5d:c4:10:b2:bd: d4:33:19:fb:8c:39:06:bf:a1:98:ed:4e:84:dd:68: b5:2e:ba:20:69:5c:1b:aa:38:57:be:f7:2c:53:c4: 0e:5c:30:ce:99:5c:b1:2d:79:8c:7d:02:04:03:55: 07:17:48:8f:06:43:09:5e:11:13:41:49:9c:ba:b2: bd:af:77:78:e0:e2:26:0d:24:1b:2e:ac:8d:ff:d4: 66:ab:63:f3:00:79:5c:5a:c6:94:6d:21:c5:3a:78: 1d:9a:72:4e:e9:ea:c0:4f:26:2b:c4:de:6d:28:20: 69:7c:60:02:6f:8c:0d:fb:20:5c:2f:a7:45:b7:94: 2b:86:c8:72:e1:ea:6c:78:71:b8:0d:15:63:9c:67: 8a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C6:C9:EB:3A:CD:89:99:43:5E:4E:5B:D6:EE:74:21:11:D6:9A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecea0a96-77a0-3f01-aa75-d18b403053a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0e:ee:e2:40:c8:85:70:8d:1d:eb:fc:f9:21:40:c7:07:49: 30:51:e4:34:87:40:74:7e:8c:05:f1:8a:29:a4:b0:fe:fe:ac: 60:af:0e:c1:0f:40:dd:b9:8d:40:0d:84:a6:1e:d2:6c:86:41: 06:e3:7f:6c:3e:9d:ec:0c:ee:10:a0:05:92:bb:b1:7c:bd:27: 8e:60:b5:cb:ea:ed:9f:aa:17:aa:29:5e:7b:ce:2f:53:bf:7c: 3b:8b:f0:c1:c1:13:a2:3b:74:bc:bc:0a:7c:fb:ad:3c:d1:c8: df:83:da:24:17:3d:1e:d4:3c:1a:21:04:57:b2:35:d8:81:ea: 24:65:ec:d8:57:ca:25:8d:aa:52:41:3e:2a:ca:58:2d:59:21: 0c:cb:f6:c6:44:33:79:ab:60:2b:2f:04:93:4a:f9:d8:16:dc: 05:1d:ca:1a:44:4c:a6:2d:a3:55:2b:94:24:b5:1c:35:50:6d: 33:03:ef:aa:43:00:0f:91:bd:53:a6:36:a4:36:02:0a:f2:a2: 29:5a:65:a9:02:f9:c8:fa:4f:23:ee:85:8d:35:01:85:c1:5a: 4c:1f:e1:3b:2b:b6:f0:83:75:1c:a3:29:f5:eb:08:d8:e1:38: fd:c1:f2:b6:29:f7:81:30:e0:e6:a9:79:f7:b1:23:df:fd:40: 1a:31:02:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTsQTTgLshheydAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NjNkMjJhMDktZmZkZC00YTI3LTgyMzgtNTQyYjlhNDQyYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhulJBelByZ5kO+siJy6TajOsPr92U5qriQR xLyupxgDbVJkbvjq0xh3gyfdWTEihXrgOHyHRn06s5k+hTRQ30UIG7MFMfLi4TuV ik2UP3YF3Dq32L9+hgqpJzeOYHIUeQjeo9+IaNFabK1OCTxZKE46XcQQsr3UMxn7 jDkGv6GY7U6E3Wi1LrogaVwbqjhXvvcsU8QOXDDOmVyxLXmMfQIEA1UHF0iPBkMJ XhETQUmcurK9r3d44OImDSQbLqyN/9Rmq2PzAHlcWsaUbSHFOngdmnJO6erATyYr xN5tKCBpfGACb4wN+yBcL6dFt5Qrhshy4epseHG4DRVjnGeKuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHGyes6zYmZQ15OW9budCER1pqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNlYTBhOTYtNzdhMC0z ZjAxLWFhNzUtZDE4YjQwMzA1M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkO7uJAyIVwjR3r/PkhQMcHSTBR5DSHQHR+jAXxiimksP7+rGCvDsEP QN25jUANhKYe0myGQQbjf2w+newM7hCgBZK7sXy9J45gtcvq7Z+qF6opXnvOL1O/ fDuL8MHBE6I7dLy8Cnz7rTzRyN+D2iQXPR7UPBohBFeyNdiB6iRl7NhXyiWNqlJB PirKWC1ZIQzL9sZEM3mrYCsvBJNK+dgW3AUdyhpETKYto1UrlCS1HDVQbTMD76pD AA+RvVOmNqQ2AgryoilaZakC+cj6TyPuhY01AYXBWkwf4TsrtvCDdRyjKfXrCNjh OP3B8rYp94Ew4OapefexI9/9QBoxAjc= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:07 2024 by rpki-client on console-ams.rpki-client.org