$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa File: 23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa (raw, json) Hash identifier: knbspjOI+6oZN7M056IqcCf9WkhlulYDw5IvEZAQwBk= Subject key identifier: 0F:93:D2:03:5C:5A:66:75:4C:BC:C5:6F:EC:CB:CC:D3:4C:1F:65:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EE8A3673AFA51F6F9B0A7D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 173.185.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:36:73:af:a5:1f:6f:9b:0a:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=4ba65336-7160-44f1-8f9e-7bde03c044dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:f0:64:9d:e1:ef:f6:82:87:16:d1:e0:36: 39:ed:9a:a0:18:4b:83:ed:3d:32:dc:59:be:4b:ff: a8:00:68:5f:77:f2:7c:ec:e3:87:0c:a7:37:33:d4: 46:f0:37:98:d7:b4:ba:1e:df:79:54:f1:a5:ba:65: fd:69:f3:76:74:2e:3a:82:5e:43:d6:c8:3c:4f:43: e2:cb:f9:01:3e:2d:21:c5:29:0b:22:a6:38:04:76: 62:50:54:20:44:24:cf:02:f3:c8:12:95:ce:ff:ab: 1a:40:2f:5c:7a:a7:39:d9:b0:bf:39:ad:f8:1f:1d: 8d:53:64:72:de:bd:d6:a9:e8:e9:07:38:e4:26:aa: ea:af:4e:39:f9:a2:79:b5:38:b3:f9:ac:56:6d:55: 73:9c:62:2e:4c:45:bb:85:33:1d:92:c5:e8:07:99: 41:b5:98:98:43:48:d9:9e:7f:04:0a:17:fa:03:76: 92:eb:a7:c3:39:2b:87:4a:2b:92:12:e4:8e:90:e9: 10:51:e5:86:c3:fc:40:7f:11:d2:22:8d:1f:64:e9: 85:ba:0d:95:a5:87:aa:ce:44:a4:49:6b:0d:58:aa: ff:a5:42:7e:f4:a3:d1:53:73:40:f2:18:c9:da:70: e8:84:94:de:8e:7e:50:1f:fd:a1:56:2e:28:61:e4: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:D2:03:5C:5A:66:75:4C:BC:C5:6F:EC:CB:CC:D3:4C:1F:65:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23a7f67e-20ec-316b-a7f2-b14c8a6b0220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8d:df:ac:f1:11:80:47:75:fa:b1:1a:ef:b6:4c:43:88:34: b6:b9:e1:47:d6:67:bb:a3:fa:4b:fb:88:be:c6:0a:1d:ee:16: cd:af:82:10:2a:4e:b7:67:12:82:8d:ca:2b:a9:7f:13:74:8a: 1a:3f:59:22:2f:b0:b9:de:50:d6:81:2e:8c:14:f0:f2:f1:3d: ac:ae:57:83:86:cf:53:67:ed:ad:d9:e1:0c:e6:ff:fe:22:d1: 6d:5d:df:c4:cf:0c:53:b6:a0:3d:2f:2b:a2:c2:59:0e:9e:2c: ce:f8:41:74:ac:d0:66:7f:ad:93:1b:b9:e4:de:1a:61:53:e5: a8:85:66:c6:33:ad:00:ce:0b:51:34:2c:13:0b:81:e5:1a:91: 63:38:b6:bf:4c:63:cd:5a:6e:73:83:3c:55:ae:65:b1:99:72: 9a:7e:77:b8:0e:ff:a4:c8:db:f1:b8:97:21:77:e4:74:0c:31: de:78:cc:7d:53:cd:cb:4e:7a:dd:a4:ff:ae:7c:c8:61:5a:fe: 17:e1:c9:a1:7a:94:0b:e6:d3:a9:37:50:14:f6:7e:14:1f:e1: 89:00:14:d4:88:79:26:5a:fc:77:ef:76:f7:16:ae:71:a0:88: c0:b2:d6:dc:8d:82:8f:2b:57:61:96:7e:71:f8:4c:37:39:67: 06:2b:0d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijZzr6Ufb5sKfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk NGJhNjUzMzYtNzE2MC00NGYxLThmOWUtN2JkZTAzYzA0NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJrwZJ3h7/aChxbR4DY57ZqgGEuD7T0y3Fm+ S/+oAGhfd/J87OOHDKc3M9RG8DeY17S6Ht95VPGlumX9afN2dC46gl5D1sg8T0Pi y/kBPi0hxSkLIqY4BHZiUFQgRCTPAvPIEpXO/6saQC9ceqc52bC/Oa34Hx2NU2Ry 3r3WqejpBzjkJqrqr045+aJ5tTiz+axWbVVznGIuTEW7hTMdksXoB5lBtZiYQ0jZ nn8EChf6A3aS66fDOSuHSiuSEuSOkOkQUeWGw/xAfxHSIo0fZOmFug2VpYeqzkSk SWsNWKr/pUJ+9KPRU3NA8hjJ2nDohJTejn5QH/2hVi4oYeQVAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+T0gNcWmZ1TLzFb+zLzNNMH2VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNhN2Y2N2UtMjBlYy0z MTZiLWE3ZjItYjE0YzhhNmIwMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCN36zxEYBHdfqxGu+2TEOINLa54UfWZ7uj+kv7iL7GCh3uFs2vghAq TrdnEoKNyiupfxN0iho/WSIvsLneUNaBLowU8PLxPayuV4OGz1Nn7a3Z4Qzm//4i 0W1d38TPDFO2oD0vK6LCWQ6eLM74QXSs0GZ/rZMbueTeGmFT5aiFZsYzrQDOC1E0 LBMLgeUakWM4tr9MY81abnODPFWuZbGZcpp+d7gO/6TI2/G4lyF35HQMMd54zH1T zctOet2k/658yGFa/hfhyaF6lAvm06k3UBT2fhQf4YkAFNSIeSZa/HfvdvcWrnGg iMCy1tyNgo8rV2GWfnH4TDc5ZwYrDT8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:53 2024 by rpki-client on console-fra.rpki-client.org