$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa File: 2179d489-f203-397d-af9f-bd189ff4ec92.roa (raw, json) Hash identifier: DH6J1fdyklfLn8rqxsa0o2zBvs1h8TKCRv0E8BZigNw= Subject key identifier: EE:91:35:EC:7B:FF:C0:C2:7D:0E:7B:14:CA:78:56:13:FD:D1:32:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847E09500DF18AA9C505B839B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 7029 IP address blocks: 173.188.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:95:00:df:18:aa:9c:50:5b:83:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=fcf2a19c-3b76-4a3b-a7b4-d9d0da9d290a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:12:e0:a6:a8:dd:51:d3:66:06:2a:5e:cc: 55:5c:0c:16:3f:4a:73:5b:30:fb:ff:16:6d:5f:59: 8e:61:37:e1:4a:bf:ae:40:cb:40:11:73:0e:cf:ef: cd:fc:35:c7:ae:84:35:a1:0a:91:6e:0d:ce:c8:3a: 61:36:7d:c1:d4:7e:51:e3:16:64:e0:6d:02:f7:9a: 83:a9:20:03:e1:70:9f:f3:37:43:b8:57:7b:df:75: 4f:5c:0c:4b:65:0f:43:2d:52:43:6c:08:0e:20:6d: 7b:cb:20:74:ad:84:9d:64:56:ad:03:e0:15:a2:96: 74:ba:c8:25:25:32:46:5d:91:aa:04:97:84:c7:96: 5e:c0:84:09:ce:9f:82:7d:e0:0f:1f:b0:64:b9:cb: 20:3a:b6:03:13:67:26:65:8a:02:b1:1a:13:59:7e: 49:1a:8f:72:4a:b2:22:96:9b:fb:a5:0a:ad:03:b2: 3e:26:15:60:be:fd:49:b4:29:ab:72:f0:8d:17:55: f0:48:f3:3b:fc:dd:af:b4:20:dc:f7:28:ef:aa:31: 33:b6:ee:aa:82:f0:bc:5d:c0:af:84:1d:7a:02:c1: be:ca:5e:68:05:4c:26:be:47:00:cc:34:9e:d6:63: 6e:de:90:23:ef:9d:a3:fc:07:34:d4:9e:41:31:c3: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:91:35:EC:7B:FF:C0:C2:7D:0E:7B:14:CA:78:56:13:FD:D1:32:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0f:51:23:b4:8b:10:28:62:ac:73:00:66:19:5f:78:d5:0c: 2b:a0:dd:42:af:48:7f:0a:1c:6f:c8:0e:ad:65:a6:45:cd:ec: 9c:7f:4f:55:30:66:36:f8:5f:fa:2a:19:75:d0:28:7c:75:0e: 6c:39:4d:7e:77:84:3e:6c:af:f1:1f:5a:e7:9b:1a:9e:4a:f6: d4:bc:d6:08:da:ad:cb:b1:bf:d6:84:04:97:a1:a9:fd:d5:17: c3:d7:a4:7e:aa:36:ce:7e:60:87:57:de:72:d7:1b:2f:18:cf: dc:35:d9:5c:0b:f3:10:2d:af:ae:59:5a:02:08:59:3b:09:a5: 1d:12:ca:cc:f9:55:4c:9e:21:aa:a4:b9:7e:12:53:cd:ea:83: 7c:d0:a6:6c:9e:12:f0:d0:bd:a3:20:67:ff:e9:60:89:b9:b2: e1:fd:76:c8:77:4a:9a:e6:e1:0d:77:a7:aa:b2:b5:44:99:31: a1:cf:cd:39:bc:dd:cb:60:52:b7:72:2c:e5:e1:23:6a:48:ea: 93:2c:73:49:8f:5d:b5:62:10:bc:9f:19:8f:87:d6:e3:d3:5c: 24:60:67:22:aa:be:27:ba:be:2c:44:cb:e2:90:d7:4c:77:2f: a9:ea:f4:4d:25:d1:20:2c:42:3d:79:58:64:3c:a2:2d:41:51: e2:2d:01:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglQDfGKqcUFuDm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ZmNmMmExOWMtM2I3Ni00YTNiLWE3YjQtZDlkMGRhOWQyOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdAS4Kao3VHTZgYqXsxVXAwWP0pzWzD7/xZt X1mOYTfhSr+uQMtAEXMOz+/N/DXHroQ1oQqRbg3OyDphNn3B1H5R4xZk4G0C95qD qSAD4XCf8zdDuFd733VPXAxLZQ9DLVJDbAgOIG17yyB0rYSdZFatA+AVopZ0usgl JTJGXZGqBJeEx5ZewIQJzp+CfeAPH7BkucsgOrYDE2cmZYoCsRoTWX5JGo9ySrIi lpv7pQqtA7I+JhVgvv1JtCmrcvCNF1XwSPM7/N2vtCDc9yjvqjEztu6qgvC8XcCv hB16AsG+yl5oBUwmvkcAzDSe1mNu3pAj752j/Ac01J5BMcOXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6RNex7/8DCfQ57FMp4VhP90TLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE3OWQ0ODktZjIwMy0z OTdkLWFmOWYtYmQxODlmZjRlYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwPUSO0ixAoYqxzAGYZX3jVDCug3UKvSH8KHG/IDq1lpkXN7Jx/T1Uw Zjb4X/oqGXXQKHx1Dmw5TX53hD5sr/EfWuebGp5K9tS81gjarcuxv9aEBJehqf3V F8PXpH6qNs5+YIdX3nLXGy8Yz9w12VwL8xAtr65ZWgIIWTsJpR0Sysz5VUyeIaqk uX4SU83qg3zQpmyeEvDQvaMgZ//pYIm5suH9dsh3Sprm4Q13p6qytUSZMaHPzTm8 3ctgUrdyLOXhI2pI6pMsc0mPXbViELyfGY+H1uPTXCRgZyKqvie6vixEy+KQ10x3 L6nq9E0l0SAsQj15WGQ8oi1BUeItAXM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:25 2024 by rpki-client on console-ams.rpki-client.org