$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa File: 1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa (raw, json) Hash identifier: hEL9Ps2k0aFFccdpXLqkJgdLMZuA+30X7J7jOVNCNAc= Subject key identifier: 46:2D:86:00:BC:1F:37:D5:24:72:C4:2A:6A:A5:4D:88:19:4B:5D:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847B961657531C9BE6BF1A54B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 7029 IP address blocks: 173.186.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:65:75:31:c9:be:6b:f1:a5:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=e1f52f4f-e969-4f3b-a729-7d395695f91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:40:b8:26:a2:e5:25:a7:f8:81:60:3d:4c: 60:3b:7b:5d:4c:02:0f:32:e4:70:fc:ea:cc:cc:a7: 09:0e:5b:62:85:21:cf:71:f0:54:a0:42:9f:36:c7: c1:41:4d:71:db:22:ae:ef:46:1b:8f:81:0d:b8:2d: fa:03:a8:d6:e5:fe:3d:a6:94:27:4e:d4:81:5b:03: 97:04:06:a2:1d:21:32:d7:bf:fe:5f:f2:91:1e:f9: 8f:f4:3a:af:20:62:ff:7d:79:5d:ab:d6:b7:5f:97: eb:10:e7:e5:5b:be:4d:3f:db:83:82:a2:75:57:e2: f3:38:c8:1a:c7:ed:22:8d:94:7d:d3:96:0d:40:6d: 9b:10:1e:8e:24:ec:8b:a9:93:9a:f7:0b:f0:40:ea: 08:b5:fc:00:9c:81:82:21:33:40:1b:22:d2:22:06: da:6e:65:ca:73:24:b2:39:27:c3:ec:e4:2c:44:52: a0:95:78:e4:3e:bd:48:ea:86:d0:06:67:d3:e8:84: c8:07:08:4b:6a:10:9c:09:2f:fa:46:4b:98:41:23: ec:a9:d8:e2:9d:4c:62:ee:11:9b:96:00:1f:06:de: dc:4f:1e:0f:33:f5:f3:b7:d7:58:ed:8b:56:7c:73: b9:0c:46:05:71:74:a9:22:20:62:4f:a5:7e:92:33: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2D:86:00:BC:1F:37:D5:24:72:C4:2A:6A:A5:4D:88:19:4B:5D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:24:0b:bb:59:5d:ed:15:dd:fb:87:e2:19:fe:c2:e2:50:ba: 5b:86:14:7a:b1:ec:74:42:b2:6d:27:b1:ab:7f:0c:a9:74:a8: 9c:bb:e1:55:37:2f:8e:b1:80:3d:d5:e5:77:aa:fb:75:87:a1: 40:d9:ac:e7:1d:c5:7d:98:58:03:a4:ad:e4:35:da:da:5f:3d: 7b:e3:9c:65:03:0a:10:54:83:38:99:08:57:97:8b:92:51:e5: 6a:cb:ee:9e:6d:42:9f:d9:f5:e6:f1:a0:fa:0b:9d:79:55:c4: 3d:39:a3:2c:5c:6b:12:91:f6:22:9a:50:f9:21:6d:f0:0f:95: ba:04:c0:31:d3:44:b5:30:67:be:ed:16:0f:c1:a2:63:ea:20: 9e:d0:c0:a5:94:be:49:c8:1d:60:55:9a:cc:20:77:3b:53:a2: 5b:04:1f:13:27:4c:a2:b8:e9:73:4b:b1:cc:7c:de:f4:18:e8: 38:1a:7a:2b:16:51:c8:c1:7a:2a:cd:8c:3b:6f:9d:8b:c5:05: 7b:92:76:1f:9c:a9:7c:e8:7f:80:b9:59:30:aa:87:45:94:54: 02:1d:7c:9d:26:61:ba:0c:e9:3b:a6:a7:ac:69:66:12:0d:c1: a9:b3:53:81:ce:c9:72:63:5e:1e:77:34:1b:15:37:90:c2:d1: f8:fe:3a:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YWV1Mcm+a/GlS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTFmNTJmNGYtZTk2OS00ZjNiLWE3MjktN2QzOTU2OTVmOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrtAuCai5SWn+IFgPUxgO3tdTAIPMuRw/OrM zKcJDltihSHPcfBUoEKfNsfBQU1x2yKu70Ybj4ENuC36A6jW5f49ppQnTtSBWwOX BAaiHSEy17/+X/KRHvmP9DqvIGL/fXldq9a3X5frEOflW75NP9uDgqJ1V+LzOMga x+0ijZR905YNQG2bEB6OJOyLqZOa9wvwQOoItfwAnIGCITNAGyLSIgbabmXKcySy OSfD7OQsRFKglXjkPr1I6obQBmfT6ITIBwhLahCcCS/6RkuYQSPsqdjinUxi7hGb lgAfBt7cTx4PM/Xzt9dY7YtWfHO5DEYFcXSpIiBiT6V+kjN3TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYthgC8HzfVJHLEKmqlTYgZS11EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxZjg1NjItMzVlNS0z MTgwLWI0ZGYtZTQ2MDVmZjA2YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIkC7tZXe0V3fuH4hn+wuJQuluGFHqx7HRCsm0nsat/DKl0qJy74VU3 L46xgD3V5Xeq+3WHoUDZrOcdxX2YWAOkreQ12tpfPXvjnGUDChBUgziZCFeXi5JR 5WrL7p5tQp/Z9ebxoPoLnXlVxD05oyxcaxKR9iKaUPkhbfAPlboEwDHTRLUwZ77t Fg/BomPqIJ7QwKWUvknIHWBVmswgdztTolsEHxMnTKK46XNLscx83vQY6DgaeisW UcjBeirNjDtvnYvFBXuSdh+cqXzof4C5WTCqh0WUVAIdfJ0mYboM6Tump6xpZhIN wamzU4HOyXJjXh53NBsVN5DC0fj+OpU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:52 2024 by rpki-client on console-fra.rpki-client.org