$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa File: edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa (raw, json) Hash identifier: csqrBA+wsVfCD75uQIFz1ZK/iU4iyH2bF6Pg/wy1TjA= Subject key identifier: 02:A8:12:35:19:9E:E4:CB:64:5F:86:E8:8C:4A:12:99:2A:28:E1:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EFEF87285D8629E9E08296C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 7029 IP address blocks: 207.155.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:87:28:5d:86:29:e9:e0:82:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=0ce1455f-6d43-43ce-9fdb-6a736be1541d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:c1:54:7b:72:70:a6:ff:c0:f5:42:b6:6d: 4a:52:d1:c2:e4:ab:c1:24:dc:bc:c8:06:f0:7d:56: 64:a8:5f:85:e8:40:0b:c7:80:a4:56:95:cd:ee:16: 04:cf:3a:8b:6c:20:1e:82:9a:3b:02:66:63:04:e4: 43:fb:51:55:d2:89:53:65:75:5e:db:92:82:a1:0f: 9b:ff:31:4e:37:d1:c3:49:de:a9:24:fe:ff:1a:3b: 52:aa:b7:38:a1:75:90:6c:cc:21:3d:1d:65:4d:24: 46:6b:2b:3c:25:8c:0b:73:6b:29:48:a8:f9:5f:62: 30:15:5c:0c:06:fa:14:03:ea:07:90:7f:1f:eb:7a: 65:81:29:44:9c:57:ae:2b:e9:51:a9:90:cf:08:09: aa:3c:01:e6:80:9b:d7:e3:2d:6e:b6:80:c6:b7:a3: 18:51:21:57:76:01:d6:2e:f4:96:57:10:7b:59:a7: 32:ae:75:09:e7:a8:f0:10:12:94:a6:2c:53:87:8b: 03:cb:1b:08:0f:e2:9e:f7:9e:73:f4:9b:6f:a4:20: 11:75:05:66:ab:4e:85:2b:9d:c2:e7:bb:8c:0c:0b: 20:df:03:fd:9d:fb:31:bd:dd:ea:86:0b:78:0b:3c: 9e:15:f2:f1:40:45:55:5d:f5:85:b6:df:53:46:21: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A8:12:35:19:9E:E4:CB:64:5F:86:E8:8C:4A:12:99:2A:28:E1:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8e:64:b4:62:48:de:c5:95:71:9a:61:93:ad:a5:b3:c1:a0: 78:f8:a8:3b:8a:c2:16:ed:3d:03:79:e4:e7:cb:71:1b:5f:f8: 72:27:38:00:4a:f9:f2:4d:b8:35:58:81:c9:3f:dd:d5:16:30: dd:bd:99:5e:70:49:03:82:1e:97:ba:16:3d:f9:0d:52:95:55: b5:5e:d3:9a:76:a4:af:46:c3:e2:e3:81:0b:1f:ec:0d:ed:8b: b2:43:67:de:7e:5f:37:ba:a9:66:17:fa:dd:17:30:08:02:30: 3c:ce:8d:df:5c:23:20:60:cd:cd:56:3f:a3:5e:0d:ae:de:90: 4f:d8:93:aa:c5:f5:49:6f:d5:de:10:d4:f5:07:91:af:b5:dd: 67:a2:63:8f:b4:8d:b0:38:2f:bf:11:a3:ed:7c:af:1a:0b:12: c2:86:26:74:f5:10:b4:8a:4f:9a:13:99:16:49:ef:51:48:cb: 1b:db:e1:2b:c9:84:e0:df:9a:e4:18:2d:54:4f:c1:23:1d:92: d5:fb:dc:1c:3f:cd:6c:be:29:27:6a:b3:b6:fe:99:b1:1f:64: 70:af:9d:7f:bd:d7:19:f0:c9:af:f4:9e:3b:2d:24:60:43:73: e1:c5:45:82:ca:c2:80:db:08:0c:89:91:73:2b:6c:0d:ea:b9: c5:77:1a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74coXYYp6eCClsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk MGNlMTQ1NWYtNmQ0My00M2NlLTlmZGItNmE3MzZiZTE1NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLjBVHtycKb/wPVCtm1KUtHC5KvBJNy8yAbw fVZkqF+F6EALx4CkVpXN7hYEzzqLbCAegpo7AmZjBORD+1FV0olTZXVe25KCoQ+b /zFON9HDSd6pJP7/GjtSqrc4oXWQbMwhPR1lTSRGays8JYwLc2spSKj5X2IwFVwM BvoUA+oHkH8f63plgSlEnFeuK+lRqZDPCAmqPAHmgJvX4y1utoDGt6MYUSFXdgHW LvSWVxB7WacyrnUJ56jwEBKUpixTh4sDyxsID+Ke955z9JtvpCARdQVmq06FK53C 57uMDAsg3wP9nfsxvd3qhgt4CzyeFfLxQEVVXfWFtt9TRiGoVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKoEjUZnuTLZF+G6IxKEpkqKOFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWRmNWU5ZjItNmM5Mi0z M2I0LWFiZmYtYTJmZWNiMmNhMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz5sIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeOZLRiSN7FlXGaYZOtpbPBoHj4qDuKwhbtPQN55OfLcRtf+HInOABK +fJNuDVYgck/3dUWMN29mV5wSQOCHpe6Fj35DVKVVbVe05p2pK9Gw+LjgQsf7A3t i7JDZ95+Xze6qWYX+t0XMAgCMDzOjd9cIyBgzc1WP6NeDa7ekE/Yk6rF9Ulv1d4Q 1PUHka+13WeiY4+0jbA4L78Ro+18rxoLEsKGJnT1ELSKT5oTmRZJ71FIyxvb4SvJ hODfmuQYLVRPwSMdktX73Bw/zWy+KSdqs7b+mbEfZHCvnX+91xnwya/0njstJGBD c+HFRYLKwoDbCAyJkXMrbA3qucV3Gvk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:47:07 2024 by rpki-client on console-ams.rpki-client.org