$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/071fe070-3f07-3acc-a49f-b95d8e1f3979.roa File: 071fe070-3f07-3acc-a49f-b95d8e1f3979.roa (raw, json) Hash identifier: OBlbKCUpGNQ0MomBgQI50M+Y05PdUj9USI5+MhU3ulw= Subject key identifier: DF:21:B5:D0:B2:A7:33:5E:23:A1:E4:17:BA:13:DB:07:C6:90:B9:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847FB1A2D843E69D0BD1231EA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/071fe070-3f07-3acc-a49f-b95d8e1f3979.roa Signing time: Sun 24 Nov 2024 02:00:27 +0000 ROA not before: Sun 24 Nov 2024 02:00:27 +0000 ROA not after: Sat 22 Feb 2025 02:00:27 +0000 asID: 7029 IP address blocks: 173.185.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fb:1a:2d:84:3e:69:d0:bd:12:31:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 24 02:00:27 2024 GMT Not After : Feb 22 02:00:27 2025 GMT Subject: CN=62242724-b7c6-4d0f-820d-79f5e76c8d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:a5:e7:e2:10:db:b5:53:38:9c:70:d6:85: 14:1d:1e:e9:c2:07:09:f0:51:8a:3c:32:14:64:d8: 3a:23:37:31:7b:83:2e:3f:09:0e:88:69:9e:ed:7b: e7:ef:89:12:05:e4:b4:6e:a1:68:bf:76:57:70:10: 57:38:b4:04:e6:82:7b:01:74:9f:ee:f4:8e:00:65: 5b:a4:fb:ee:cd:94:9a:88:79:58:d5:6e:75:3a:ba: 91:7b:24:c8:7f:c9:a3:e3:80:66:fe:4f:88:c6:d9: 1e:cd:e2:85:79:ae:ac:25:c0:12:8c:22:2d:3f:0a: 6c:c6:65:14:da:bd:bd:62:a9:13:86:5e:ba:7b:6a: fb:04:65:af:d6:e6:25:f3:ff:28:46:c9:a8:d8:d6: 91:02:59:d5:59:30:4e:b4:bf:67:8d:32:09:26:36: 15:68:16:e8:3c:68:3e:7b:a5:e5:b2:6a:b6:89:01: 83:a4:cf:3d:0f:1f:2c:de:27:85:69:26:31:0a:c4: c7:65:67:fe:5e:1f:5c:69:b5:ca:3d:41:2d:5d:ea: a3:61:10:bd:40:27:47:72:04:ac:72:a5:66:43:dd: ce:dc:ae:c6:b4:0f:12:89:94:c2:bf:ed:da:4f:48: 62:da:c7:c4:d4:e3:1e:b0:d7:ff:6c:1d:41:4d:c7: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:B5:D0:B2:A7:33:5E:23:A1:E4:17:BA:13:DB:07:C6:90:B9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/071fe070-3f07-3acc-a49f-b95d8e1f3979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:18:31:9b:17:46:cb:03:0c:e3:83:45:41:13:c6:26:38:12: 75:55:f1:d3:61:e2:b6:59:89:33:37:bd:94:5c:17:cd:20:43: 6a:b2:0e:a4:4b:10:00:50:b1:00:3f:c3:bd:31:72:97:d0:fe: 0f:c8:6b:f2:89:91:07:22:4c:40:cd:ee:21:24:04:b6:ac:6d: 4b:89:6a:4f:77:6b:13:98:4d:32:a5:fa:88:05:4f:b4:1d:ad: 8c:d0:68:18:8d:2a:64:43:c7:e2:5d:3e:09:d7:ca:e6:ba:48: 89:64:ff:c2:49:c6:83:7d:16:84:ea:32:6f:87:79:19:44:d7: 74:fe:41:80:82:02:94:83:7d:2f:bb:cb:bf:96:0e:ee:28:92: dc:58:0f:2d:3b:e1:b0:79:74:27:07:c8:e5:53:4d:51:c5:73: f0:af:a7:a9:43:05:f1:be:2d:ca:ad:29:1e:9f:86:e8:74:07: a5:7e:c4:d0:68:95:01:5a:86:d9:1c:11:87:f7:dd:11:b7:2e: 3d:54:0c:2a:2d:57:17:7f:7c:40:74:fc:8e:16:13:ee:89:21: 43:ca:a4:f0:58:26:b5:0b:79:a0:7c:fa:06:59:4f:0a:01:d8: 14:32:7c:7c:d5:ed:21:72:b7:a2:45:c3:31:ac:cf:ff:3e:be: 99:26:7a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7Gi2EPmnQvRIx6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk NjIyNDI3MjQtYjdjNi00ZDBmLTgyMGQtNzlmNWU3NmM4ZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLCl5+IQ27VTOJxw1oUUHR7pwgcJ8FGKPDIU ZNg6Izcxe4MuPwkOiGme7Xvn74kSBeS0bqFov3ZXcBBXOLQE5oJ7AXSf7vSOAGVb pPvuzZSaiHlY1W51OrqReyTIf8mj44Bm/k+IxtkezeKFea6sJcASjCItPwpsxmUU 2r29YqkThl66e2r7BGWv1uYl8/8oRsmo2NaRAlnVWTBOtL9njTIJJjYVaBboPGg+ e6Xlsmq2iQGDpM89Dx8s3ieFaSYxCsTHZWf+Xh9cabXKPUEtXeqjYRC9QCdHcgSs cqVmQ93O3K7GtA8SiZTCv+3aT0hi2sfE1OMesNf/bB1BTcfMcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8htdCypzNeI6HkF7oT2wfGkLlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDcxZmUwNzAtM2YwNy0z YWNjLWE0OWYtYjk1ZDhlMWYzOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQYMZsXRssDDOODRUETxiY4EnVV8dNh4rZZiTM3vZRcF80gQ2qyDqRL EABQsQA/w70xcpfQ/g/Ia/KJkQciTEDN7iEkBLasbUuJak93axOYTTKl+ogFT7Qd rYzQaBiNKmRDx+JdPgnXyua6SIlk/8JJxoN9FoTqMm+HeRlE13T+QYCCApSDfS+7 y7+WDu4oktxYDy074bB5dCcHyOVTTVHFc/Cvp6lDBfG+LcqtKR6fhuh0B6V+xNBo lQFahtkcEYf33RG3Lj1UDCotVxd/fEB0/I4WE+6JIUPKpPBYJrULeaB8+gZZTwoB 2BQyfHzV7SFyt6JFwzGsz/8+vpkmelY= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:54 2024 by rpki-client on console-fra.rpki-client.org