$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa File: 1acc8c5b-1d39-3e1e-886a-120184f0d402.roa (raw, json) Hash identifier: Zn/W9jVjkeP+yw5ROi0CVyS81qeWiBD2CEz42n3i5GQ= Subject key identifier: 1D:FE:8F:A4:EB:EC:DC:B5:8F:0A:34:1F:CD:E4:D5:9E:3E:AB:B8:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847D29F82594618C4158D182D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 7029 IP address blocks: 173.187.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:82:59:46:18:c4:15:8d:18:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=59b7583f-416c-4d9a-83e4-3619bdc06a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:01:a7:e6:b4:fe:6a:74:b5:9c:01:ae:ea: 6f:dc:76:4a:02:00:a1:eb:dd:1e:0e:e3:6d:f4:aa: 41:b5:36:ca:66:3d:79:0e:30:1e:e8:8f:ad:de:9b: bc:2a:bb:52:25:83:a7:f3:6f:16:04:d9:81:97:fe: f9:a9:09:b2:81:5e:fd:3a:f8:ad:e6:98:bf:61:ea: 33:45:4b:7d:b6:08:11:8f:1d:50:0b:f3:5b:aa:cc: 62:42:52:b4:60:4e:48:64:7b:94:41:43:01:72:29: 92:00:61:0e:1e:6e:0b:f8:21:8f:74:f2:ec:17:60: ff:83:fd:53:b0:33:c2:2c:08:51:b3:15:f5:61:39: ca:21:d7:a4:9f:31:63:94:be:f4:a2:0a:e7:c1:d0: 31:9e:b2:20:db:83:13:94:f7:fa:4d:44:9f:fc:e0: a9:3b:14:bf:79:5e:4a:89:67:07:f9:d4:a9:70:1b: de:1c:05:60:a6:a7:da:c1:dc:a5:13:b0:75:3e:cf: 4b:53:62:3d:27:e8:15:de:b0:15:9d:c3:0a:5e:f1: 65:8a:5f:fa:c1:3e:f5:ad:6c:4f:bc:5d:4f:03:37: 0d:d7:0e:2a:2e:7d:86:13:b2:03:22:68:e8:31:c7: 7d:c9:7b:db:6b:3e:85:0d:0d:42:38:c6:4f:08:d2: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FE:8F:A4:EB:EC:DC:B5:8F:0A:34:1F:CD:E4:D5:9E:3E:AB:B8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:12:0d:56:99:5d:5c:cd:4e:6c:ea:0a:5c:88:57:ac:a1:f4: 1b:90:2c:eb:dd:2a:b8:31:7e:60:fa:db:f1:1c:59:f5:96:19: 0f:25:ea:dc:7d:24:f5:e9:4c:c7:e0:fe:8d:86:fc:d1:64:cd: cd:f1:27:8b:3f:9a:ac:05:f1:d4:c3:cc:28:4a:23:b3:fe:6d: bc:21:54:4b:a3:2f:6d:d1:89:84:1f:7c:d6:aa:9a:05:da:20: 2d:97:87:fc:91:bb:bf:2b:75:3e:de:83:ba:81:6c:39:24:80: a9:6d:2b:62:31:a9:ad:96:46:34:17:98:15:4f:cb:87:a0:54: 65:64:9d:9b:a9:a9:fd:d5:7d:33:84:1d:27:ad:2c:3c:10:06: 84:0a:41:53:1f:70:89:7d:16:14:db:cf:1d:30:51:94:d5:14: a8:4a:ab:5b:b3:49:98:5f:68:ee:46:f5:dc:bf:c2:97:db:1a: c1:b3:b9:78:fd:ad:a2:f6:76:ec:77:12:0c:74:4e:7b:a3:f0: fe:81:02:05:af:d1:7c:d9:69:8c:ad:dd:69:49:d5:8a:6c:da: cf:1f:a4:67:22:7b:e1:93:6d:20:50:46:60:75:d2:60:f2:1c: bb:ac:4f:05:99:cb:dc:8e:b6:10:cb:ad:d5:63:44:49:d0:d9: 82:56:ee:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn4JZRhjEFY0YLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk NTliNzU4M2YtNDE2Yy00ZDlhLTgzZTQtMzYxOWJkYzA2YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk08Bp+a0/mp0tZwBrupv3HZKAgCh690eDuNt 9KpBtTbKZj15DjAe6I+t3pu8KrtSJYOn828WBNmBl/75qQmygV79Ovit5pi/Yeoz RUt9tggRjx1QC/NbqsxiQlK0YE5IZHuUQUMBcimSAGEOHm4L+CGPdPLsF2D/g/1T sDPCLAhRsxX1YTnKIdeknzFjlL70ogrnwdAxnrIg24MTlPf6TUSf/OCpOxS/eV5K iWcH+dSpcBveHAVgpqfawdylE7B1Ps9LU2I9J+gV3rAVncMKXvFlil/6wT71rWxP vF1PAzcN1w4qLn2GE7IDImjoMcd9yXvbaz6FDQ1COMZPCNLWxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3+j6Tr7Ny1jwo0H83k1Z4+q7gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjYzhjNWItMWQzOS0z ZTFlLTg4NmEtMTIwMTg0ZjBkNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgSDVaZXVzNTmzqClyIV6yh9BuQLOvdKrgxfmD62/EcWfWWGQ8l6tx9 JPXpTMfg/o2G/NFkzc3xJ4s/mqwF8dTDzChKI7P+bbwhVEujL23RiYQffNaqmgXa IC2Xh/yRu78rdT7eg7qBbDkkgKltK2Ixqa2WRjQXmBVPy4egVGVknZupqf3VfTOE HSetLDwQBoQKQVMfcIl9FhTbzx0wUZTVFKhKq1uzSZhfaO5G9dy/wpfbGsGzuXj9 raL2dux3Egx0Tnuj8P6BAgWv0XzZaYyt3WlJ1Yps2s8fpGcie+GTbSBQRmB10mDy HLusTwWZy9yOthDLrdVjREnQ2YJW7mM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:34 2024 by rpki-client on console-ams.rpki-client.org