$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1b4540-ba1c-368a-9a70-8cfc65acc918.roa File: 1a1b4540-ba1c-368a-9a70-8cfc65acc918.roa (raw, json) Hash identifier: cBWxy3PcoMt0qKzJXzpMel0LsL2/LlLs5EMgW/nRnMA= Subject key identifier: 34:55:60:09:14:78:80:8C:E2:CF:0A:D8:25:FE:C9:94:1E:71:56:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858476C9CEB2C589D14E042F03200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1b4540-ba1c-368a-9a70-8cfc65acc918.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 7029 IP address blocks: 173.185.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9c:eb:2c:58:9d:14:e0:42:f0:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=6ec4ab1b-43a4-4a71-982a-66f3c724a8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:4e:2b:98:24:37:b3:d9:40:2f:6b:56:2e: 16:38:fa:24:23:a9:f9:6e:8c:f8:00:75:08:85:57: ac:b9:03:d4:d7:b2:79:12:c9:16:5b:36:a8:01:f1: 7a:cd:7f:1f:5e:c5:2d:81:53:17:22:8d:4b:f9:24: 5d:59:c7:10:d2:3e:06:a0:5b:46:30:97:5a:0e:2f: 51:7e:b9:04:c8:72:85:b8:17:43:1b:1e:9e:4f:23: 75:b2:ba:06:e8:97:2c:3c:b8:39:49:7e:7d:91:02: 12:1f:d1:06:cd:7c:6f:6b:a7:fa:2c:1c:cf:95:a0: 59:21:22:c8:99:8c:c1:53:ac:25:71:fc:4f:33:42: 95:bc:01:bd:39:7d:7d:ea:82:62:89:52:03:c3:0f: 3b:18:c1:dd:25:a6:c0:e7:35:35:40:cf:5b:6e:29: e3:c7:51:81:b6:d0:98:8b:c8:cc:ac:87:9c:1d:14: c7:86:eb:c1:13:61:7d:90:f1:6c:b4:0a:e3:9b:ea: 9b:fe:da:4e:33:dc:ae:52:67:4f:50:06:dc:f8:7a: 38:d5:51:b6:8b:bb:13:bd:4c:a7:ee:77:69:1c:a2: 96:24:38:0f:db:88:f4:1b:5e:de:57:1d:1e:55:6c: 83:f0:de:06:e2:19:25:09:19:27:35:44:e0:c9:00: ae:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:55:60:09:14:78:80:8C:E2:CF:0A:D8:25:FE:C9:94:1E:71:56:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1b4540-ba1c-368a-9a70-8cfc65acc918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8b:20:0d:0a:7e:17:71:84:8d:a4:95:ef:1e:a9:0e:17:7f: 1f:77:3a:08:3e:47:38:d9:ee:d5:b0:ca:d8:20:d0:ee:74:51: 53:61:1f:e8:19:82:b8:ed:9a:70:e4:69:07:aa:5e:bc:38:dc: 15:ca:f6:b2:9e:7e:3e:45:06:1c:a3:64:42:9e:b7:1d:80:74: a3:d5:a8:70:27:ef:07:d9:20:f4:a9:de:2a:49:2d:3e:f3:86: 09:6c:9a:f6:9a:40:7c:b4:8a:60:b5:28:85:c9:b2:b3:e5:3d: c8:97:57:d2:78:77:04:b3:6f:84:5a:1a:f5:fa:4b:c3:df:b3: b9:27:7c:1f:61:51:a3:54:84:8e:52:56:4a:42:dc:35:a5:4c: 66:2b:e6:00:c7:9c:9a:2c:bd:97:ff:8a:45:0a:96:e3:02:e0: 58:11:5b:f3:92:a7:b8:d5:4c:82:00:3e:0b:91:e3:67:37:e2: d9:22:e9:f6:46:04:6e:8b:78:60:7c:15:a0:29:80:d2:01:86: 9c:08:62:57:61:92:d9:1a:ba:7c:43:55:0f:d9:89:62:db:97: 7d:ea:41:34:0e:7b:3a:16:58:b5:65:7a:1d:54:1b:05:20:13: a3:39:a1:a5:07:33:54:26:7b:9c:5d:8a:87:ee:e4:c5:85:b5: 79:f5:95:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnOssWJ0U4ELwMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk NmVjNGFiMWItNDNhNC00YTcxLTk4MmEtNjZmM2M3MjRhOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq9OK5gkN7PZQC9rVi4WOPokI6n5boz4AHUI hVesuQPU17J5EskWWzaoAfF6zX8fXsUtgVMXIo1L+SRdWccQ0j4GoFtGMJdaDi9R frkEyHKFuBdDGx6eTyN1sroG6JcsPLg5SX59kQISH9EGzXxva6f6LBzPlaBZISLI mYzBU6wlcfxPM0KVvAG9OX196oJiiVIDww87GMHdJabA5zU1QM9bbinjx1GBttCY i8jMrIecHRTHhuvBE2F9kPFstArjm+qb/tpOM9yuUmdPUAbc+Ho41VG2i7sTvUyn 7ndpHKKWJDgP24j0G17eVx0eVWyD8N4G4hklCRknNUTgyQCu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRVYAkUeICM4s8K2CX+yZQecVZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWExYjQ1NDAtYmExYy0z NjhhLTlhNzAtOGNmYzY1YWNjOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuLIA0KfhdxhI2kle8eqQ4Xfx93Ogg+RzjZ7tWwytgg0O50UVNhH+gZ grjtmnDkaQeqXrw43BXK9rKefj5FBhyjZEKetx2AdKPVqHAn7wfZIPSp3ipJLT7z hglsmvaaQHy0imC1KIXJsrPlPciXV9J4dwSzb4RaGvX6S8Pfs7knfB9hUaNUhI5S VkpC3DWlTGYr5gDHnJosvZf/ikUKluMC4FgRW/OSp7jVTIIAPguR42c34tki6fZG BG6LeGB8FaApgNIBhpwIYldhktkaunxDVQ/ZiWLbl33qQTQOezoWWLVleh1UGwUg E6M5oaUHM1Qme5xdiofu5MWFtXn1lb4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:34 2024 by rpki-client on console-ams.rpki-client.org