$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/198dda29-6b51-3f88-873c-4b13cf752b89.roa File: 198dda29-6b51-3f88-873c-4b13cf752b89.roa (raw, json) Hash identifier: OjpY5DIWupZ+gXzM/sS4MFzRDSsfrEx2FdZj+kWwTWc= Subject key identifier: 02:AB:8E:42:B8:56:B8:28:9E:61:91:70:FD:FB:EE:EF:35:DE:DC:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15534D4EC6411E08C2E14C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/198dda29-6b51-3f88-873c-4b13cf752b89.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 166.102.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:34:d4:ec:64:11:e0:8c:2e:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=2d6a4270-3f54-47f9-91db-5af9f57006ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:36:83:38:3e:7e:d9:cc:33:39:97:09:3f: 57:86:e0:37:d1:18:69:dd:c1:d2:7e:21:1b:ab:a0: e9:1c:f1:4e:da:97:14:58:4d:55:1c:5e:a7:c6:98: 31:31:59:bb:8f:c1:16:65:ca:5a:72:e2:6a:cf:d4: 92:b4:40:c5:3e:4f:69:1f:f8:fd:2b:c2:1f:16:b5: 82:b4:e4:35:2d:a4:bf:07:30:88:d0:ec:d0:93:b2: 75:dc:12:cd:bb:3b:5b:7f:1c:7f:66:ee:00:4d:27: 72:8f:1f:9d:d7:69:4d:78:b4:fe:45:32:99:06:c2: 08:70:3f:8c:fa:a3:7b:41:2b:b2:ef:0f:94:1e:f8: 17:4e:cb:eb:60:e5:5e:70:7b:61:46:c0:dc:89:a8: fc:aa:a0:77:fe:ef:e0:41:17:18:13:0b:83:83:3b: ed:5f:7b:f0:d2:d8:f9:8c:c9:0c:68:d5:07:88:5c: cc:b2:b3:d3:58:b5:d0:ef:79:49:f5:f5:73:6f:7a: dc:ab:2a:39:94:53:9c:dc:3d:4e:cf:c0:b6:f2:df: 04:a0:da:5e:fc:34:46:b0:c5:ea:51:ad:5f:42:db: 5f:e9:ab:2f:ea:b3:7e:13:9f:bb:20:bc:02:03:69: ea:3f:d8:f9:dd:c2:33:de:b6:0b:36:b2:e9:82:92: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AB:8E:42:B8:56:B8:28:9E:61:91:70:FD:FB:EE:EF:35:DE:DC:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/198dda29-6b51-3f88-873c-4b13cf752b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:db:03:ae:ef:c0:34:3b:ea:c2:32:46:43:da:5b:76:00:e3: 16:59:f0:aa:2f:21:c5:09:c2:17:f3:29:28:25:32:71:a8:1c: f7:c5:98:cf:58:17:65:72:46:aa:59:86:e7:f7:1e:27:23:77: 95:e4:68:c5:77:c7:29:e0:18:9a:4b:26:39:e8:fc:24:81:52: 7e:18:3e:e4:71:1f:50:fe:e2:ac:1c:35:30:89:10:0b:c6:1b: a8:6c:19:0f:7d:3a:29:e0:a2:41:58:2e:d7:3f:f4:8f:69:0a: 94:4f:40:dd:32:95:55:07:46:c6:9d:81:88:5a:64:44:40:39: 2e:97:ac:d5:a9:b3:ce:ea:07:05:57:56:9b:51:db:74:8c:06: 3a:94:19:14:79:40:28:19:95:41:84:31:a4:25:f1:7f:bd:51: 3f:04:a0:e9:76:e8:df:8c:1e:01:3a:74:36:ad:56:ff:8c:7c: 9d:7d:05:cf:dd:7b:f6:99:dc:28:97:71:7c:28:c0:8a:0c:83: 8d:59:a2:48:ad:cc:c2:23:9d:ec:ce:13:87:84:19:ce:81:26: 12:c8:90:96:52:fa:24:fd:bc:22:a3:68:30:da:1e:9e:f6:c7: 99:9b:b3:a2:2b:b2:92:71:e5:61:27:f5:37:22:42:9c:4b:9f: 7c:68:95:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTTU7GQR4IwuFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MmQ2YTQyNzAtM2Y1NC00N2Y5LTkxZGItNWFmOWY1NzAwNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBA2gzg+ftnMMzmXCT9XhuA30Rhp3cHSfiEb q6DpHPFO2pcUWE1VHF6nxpgxMVm7j8EWZcpacuJqz9SStEDFPk9pH/j9K8IfFrWC tOQ1LaS/BzCI0OzQk7J13BLNuztbfxx/Zu4ATSdyjx+d12lNeLT+RTKZBsIIcD+M +qN7QSuy7w+UHvgXTsvrYOVecHthRsDciaj8qqB3/u/gQRcYEwuDgzvtX3vw0tj5 jMkMaNUHiFzMsrPTWLXQ73lJ9fVzb3rcqyo5lFOc3D1Oz8C28t8EoNpe/DRGsMXq Ua1fQttf6asv6rN+E5+7ILwCA2nqP9j53cIz3rYLNrLpgpIobQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKrjkK4VrgonmGRcP377u813tw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTk4ZGRhMjktNmI1MS0z Zjg4LTg3M2MtNGIxM2NmNzUyYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpmbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfbA67vwDQ76sIyRkPaW3YA4xZZ8KovIcUJwhfzKSglMnGoHPfFmM9Y F2VyRqpZhuf3Hicjd5XkaMV3xyngGJpLJjno/CSBUn4YPuRxH1D+4qwcNTCJEAvG G6hsGQ99OingokFYLtc/9I9pCpRPQN0ylVUHRsadgYhaZERAOS6XrNWps87qBwVX VptR23SMBjqUGRR5QCgZlUGEMaQl8X+9UT8EoOl26N+MHgE6dDatVv+MfJ19Bc/d e/aZ3CiXcXwowIoMg41ZokitzMIjnezOE4eEGc6BJhLIkJZS+iT9vCKjaDDaHp72 x5mbs6IrspJx5WEn9TciQpxLn3xolQ0= -----END CERTIFICATE-----Generated at Mon Nov 25 03:12:05 2024 by rpki-client on console-ams.rpki-client.org