$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17617244-358a-390c-8dd7-496f44e6aceb.roa File: 17617244-358a-390c-8dd7-496f44e6aceb.roa (raw, json) Hash identifier: BgATgZ4+RXxEt0EBVBB4qubyku+22O6ecM79Ka8mMGg= Subject key identifier: 8E:9F:14:B7:D6:12:F5:33:BA:19:CE:A3:70:6E:A8:A2:82:47:18:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155360844C2F34358046910 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17617244-358a-390c-8dd7-496f44e6aceb.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.188.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:36:08:44:c2:f3:43:58:04:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=6725a5fd-d1c5-4944-9492-160d62ac1162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:03:2c:5a:a7:3f:fc:25:7f:63:1d:ae:1b: 9f:03:29:23:61:4f:be:8a:1c:48:4d:cf:cd:e0:78: 29:7a:6c:11:ce:12:dc:ba:ae:db:08:ea:6a:a0:34: bc:49:5d:9c:a3:23:b8:8f:09:7a:23:01:de:13:43: dc:a9:7e:93:b9:91:96:9a:ec:44:77:5f:5b:4a:23: a2:56:52:7d:c4:c6:2f:16:b4:a7:6d:f5:9c:80:94: d5:b7:64:e5:71:cc:46:28:30:5d:3d:0a:93:0b:ce: 19:58:23:2c:95:45:4c:64:85:18:0d:bc:8e:c6:88: 04:5a:2b:9f:40:15:58:3c:d3:b6:d4:58:12:e0:90: 98:00:8e:15:e4:06:c8:64:37:d2:86:84:2b:fd:d3: 43:f3:6e:bc:74:b2:9f:fe:50:b0:8f:27:a4:40:8c: 1c:52:f3:78:34:93:57:5c:3c:10:c3:d6:63:8f:d0: 73:f0:9e:f3:7b:2c:da:e5:35:ad:1e:90:c0:6f:10: 35:a7:93:b2:9d:4a:87:27:2c:fd:83:98:c5:09:73: e5:c5:ca:4e:66:1f:9e:c7:af:02:6b:c9:56:05:ab: fb:a1:0f:4a:da:fd:54:66:d9:56:06:52:62:5b:30: 6b:7b:78:e1:a3:89:f7:cd:bf:1b:9e:c9:05:3a:4c: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9F:14:B7:D6:12:F5:33:BA:19:CE:A3:70:6E:A8:A2:82:47:18:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17617244-358a-390c-8dd7-496f44e6aceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:bf:06:69:33:f5:17:70:e1:bd:f1:9d:99:1d:de:d6:09:94: cd:d2:d8:da:47:98:1e:ef:19:14:70:24:14:7d:9e:dc:eb:4f: f0:e8:f2:04:aa:22:7c:25:aa:77:c3:f9:cf:f4:c1:8e:21:17: 15:6b:7c:88:ed:6f:70:41:8b:b7:77:9c:d0:ea:23:e7:bb:e8: a2:cc:25:a6:a2:1f:a6:d6:ee:a7:7e:6b:74:16:2d:88:f2:0e: b8:83:61:21:88:f6:3e:13:7f:bd:ab:29:c6:f7:68:01:46:02: 3d:5e:8d:7b:f3:2b:98:e8:ee:ec:04:c7:df:84:88:83:78:be: d3:4f:03:38:a7:f6:50:eb:cb:97:75:f5:c9:36:9d:83:16:3e: e6:47:1d:c7:80:23:54:4a:ae:f8:ed:02:b2:d2:8a:d4:ee:d8: 82:7c:d3:89:81:09:4a:f3:7f:54:1d:21:06:f5:5c:ec:83:28: 68:12:22:09:32:75:da:45:e7:95:39:1d:72:1e:aa:a4:07:78: 41:b1:4d:89:13:8c:5a:f7:6e:f8:ae:af:17:c6:52:26:6a:ab: 1d:5b:cd:e0:9f:62:ef:b9:d1:ae:c0:af:3c:84:a3:ec:2e:9b: b6:fb:cd:c8:94:9f:a2:ae:03:f4:69:5b:39:88:88:f8:a2:bf: 13:04:db:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTYIRMLzQ1gEaRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NjcyNWE1ZmQtZDFjNS00OTQ0LTk0OTItMTYwZDYyYWMxMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HgDLFqnP/wlf2MdrhufAykjYU++ihxITc/N 4HgpemwRzhLcuq7bCOpqoDS8SV2coyO4jwl6IwHeE0PcqX6TuZGWmuxEd19bSiOi VlJ9xMYvFrSnbfWcgJTVt2TlccxGKDBdPQqTC84ZWCMslUVMZIUYDbyOxogEWiuf QBVYPNO21FgS4JCYAI4V5AbIZDfShoQr/dND8268dLKf/lCwjyekQIwcUvN4NJNX XDwQw9Zjj9Bz8J7zeyza5TWtHpDAbxA1p5OynUqHJyz9g5jFCXPlxcpOZh+ex68C a8lWBav7oQ9K2v1UZtlWBlJiWzBre3jho4n3zb8bnskFOkyjMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6fFLfWEvUzuhnOo3BuqKKCRxjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTc2MTcyNDQtMzU4YS0z OTBjLThkZDctNDk2ZjQ0ZTZhY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu/Bmkz9Rdw4b3xnZkd3tYJlM3S2NpHmB7vGRRwJBR9ntzrT/Do8gSq InwlqnfD+c/0wY4hFxVrfIjtb3BBi7d3nNDqI+e76KLMJaaiH6bW7qd+a3QWLYjy DriDYSGI9j4Tf72rKcb3aAFGAj1ejXvzK5jo7uwEx9+EiIN4vtNPAzin9lDry5d1 9ck2nYMWPuZHHceAI1RKrvjtArLSitTu2IJ804mBCUrzf1QdIQb1XOyDKGgSIgky ddpF55U5HXIeqqQHeEGxTYkTjFr3bviurxfGUiZqqx1bzeCfYu+50a7ArzyEo+wu m7b7zciUn6KuA/RpWzmIiPiivxME2zM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:23 2024 by rpki-client on console-ams.rpki-client.org