$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa File: 1e069c73-4292-3ffe-a143-d91bade4b8f5.roa (raw, json) Hash identifier: TAcHKVZjrB/kHhXxmwKeJmvn0TuaWLens8j9rFRBJW0= Subject key identifier: 65:23:26:B7:F7:27:91:72:DC:BE:D5:45:9A:A0:3E:60:2F:15:AE:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15536EAE98FCE304B78B500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.211.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:36:ea:e9:8f:ce:30:4b:78:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=712a28f3-ac0f-4e38-9325-131361fd0f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:01:ac:e7:4c:5d:cd:7d:e9:ee:8a:21:4b: b8:f1:b1:3d:8a:73:8c:4c:e8:5d:e1:7e:9f:6b:02: 2c:df:c8:24:78:02:e4:02:58:43:08:e9:c3:ad:07: a3:29:4f:ab:33:0e:cc:31:70:61:2a:77:6c:44:4f: 22:cd:4a:75:ca:d9:62:3c:b1:5e:86:c6:13:32:c4: 9f:ea:0c:9b:8f:51:88:dc:93:c9:fb:23:f5:82:2d: 75:26:05:de:6c:79:45:5e:1c:04:7f:59:52:9c:ac: b2:3e:e5:d7:db:47:53:e3:9e:45:aa:31:8e:6e:c4: 77:37:e9:8b:ad:a2:bc:b4:b0:6a:f2:2a:e5:1f:6f: 7e:ec:39:5b:39:9c:43:3c:30:83:07:88:d2:dd:f5: 3f:f5:b9:4c:5e:82:d4:fb:42:12:52:18:d1:32:99: c8:0a:5a:0b:b5:3a:e8:cf:ca:6f:2d:eb:d6:56:c6: 6a:20:f0:0d:f8:e1:d4:c8:9a:8e:8d:4b:b1:d4:ec: e9:78:71:48:a2:e7:17:24:74:12:fd:7b:62:98:6f: 01:f6:19:37:03:66:35:58:fb:8f:f3:2e:a8:f8:91: 8d:aa:56:ef:20:09:03:12:a7:23:69:c9:37:0a:0d: 4e:cc:4e:3d:16:1f:6a:65:eb:b0:b9:38:45:01:0b: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:26:B7:F7:27:91:72:DC:BE:D5:45:9A:A0:3E:60:2F:15:AE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.211.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:78:20:1b:3a:11:80:5a:da:ee:e4:bb:72:ed:2f:e2:96:8d: d9:d3:23:5d:21:b1:09:89:c1:1b:8b:57:b4:fb:cc:9c:8f:ff: 54:0e:68:f3:9e:69:d2:bf:b6:36:e9:04:cb:1a:24:26:94:08: 06:cf:a0:d4:1c:4a:47:60:46:ab:66:4e:19:46:93:c3:15:0b: de:5d:b1:40:4e:c2:77:e4:06:9c:1b:53:4f:af:fb:ac:d4:e9: af:78:15:eb:87:db:76:78:4f:1d:05:c4:22:61:c1:48:c3:b5: 3d:a1:30:8d:a9:2a:2a:7e:8f:22:80:e5:b6:a6:91:da:1f:34: 22:3e:71:87:9b:2c:3f:14:8f:41:d1:9d:ca:d5:16:2c:ea:dc: 07:3b:de:37:7f:70:f6:b1:29:b5:dd:3f:b5:47:e0:b3:ba:b4: ad:dd:d5:b9:e7:d9:5e:9e:82:b8:53:03:da:05:be:10:34:d3: 2e:fd:1e:90:4a:f8:17:8a:d7:dd:76:a5:59:c8:64:22:93:95: 57:d3:88:f2:23:48:70:37:2f:d3:b0:1f:ca:04:9e:e0:81:5e: f1:19:06:ce:45:fa:52:85:79:05:be:9e:8f:5d:c5:65:8d:0a: b9:01:c3:64:e2:ea:3d:69:c4:37:e8:ff:c7:b4:7e:68:1f:67: 3d:9f:a1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTbq6Y/OMEt4tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NzEyYTI4ZjMtYWMwZi00ZTM4LTkzMjUtMTMxMzYxZmQwZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKkBrOdMXc196e6KIUu48bE9inOMTOhd4X6f awIs38gkeALkAlhDCOnDrQejKU+rMw7MMXBhKndsRE8izUp1ytliPLFehsYTMsSf 6gybj1GI3JPJ+yP1gi11JgXebHlFXhwEf1lSnKyyPuXX20dT455FqjGObsR3N+mL raK8tLBq8irlH29+7DlbOZxDPDCDB4jS3fU/9blMXoLU+0ISUhjRMpnICloLtTro z8pvLevWVsZqIPAN+OHUyJqOjUux1OzpeHFIoucXJHQS/XtimG8B9hk3A2Y1WPuP 8y6o+JGNqlbvIAkDEqcjack3Cg1OzE49Fh9qZeuwuThFAQsx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUjJrf3J5Fy3L7VRZqgPmAvFa5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUwNjljNzMtNDI5Mi0z ZmZlLWExNDMtZDkxYmFkZTRiOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrdPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt4IBs6EYBa2u7ku3LtL+KWjdnTI10hsQmJwRuLV7T7zJyP/1QOaPOe adK/tjbpBMsaJCaUCAbPoNQcSkdgRqtmThlGk8MVC95dsUBOwnfkBpwbU0+v+6zU 6a94FeuH23Z4Tx0FxCJhwUjDtT2hMI2pKip+jyKA5bamkdofNCI+cYebLD8Uj0HR ncrVFizq3Ac73jd/cPaxKbXdP7VH4LO6tK3d1bnn2V6egrhTA9oFvhA00y79HpBK +BeK1912pVnIZCKTlVfTiPIjSHA3L9OwH8oEnuCBXvEZBs5F+lKFeQW+no9dxWWN CrkBw2Ti6j1pxDfo/8e0fmgfZz2foTg= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:58 2024 by rpki-client on console-fra.rpki-client.org