$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa File: 25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa (raw, json) Hash identifier: xY6B68L/tSPdiEEbc95Ws7CVnhyGWeOAHx2EHj46YoE= Subject key identifier: 42:BE:B0:AB:B6:42:6A:4F:47:97:F3:06:F6:41:DF:8A:7C:0F:35:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6C0135C2CD4964AEC51D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 173.191.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:01:35:c2:cd:49:64:ae:c5:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=efddfbed-657c-47c8-81f3-fbd188af1af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:64:f1:d6:3b:c8:de:74:d2:68:ed:c7:28:23: cb:8e:ec:da:e2:f1:c0:0a:37:0a:08:50:49:ce:d8: 31:1a:8d:61:4c:a2:17:7d:64:83:4b:2a:9b:99:6e: 94:be:79:97:b1:18:a0:f7:72:0e:6e:c9:3e:8a:e7: 80:7c:cc:59:e5:c5:e2:3f:4e:da:93:64:2c:c4:b5: 43:35:95:34:2b:98:02:a9:f3:12:9b:23:60:0f:fe: 81:7c:3a:d1:4a:25:d7:57:c3:b7:bc:a5:eb:f2:75: 19:bb:8a:70:f7:b9:6c:7d:0c:56:16:b1:27:66:54: 0d:86:49:d5:79:7f:ce:fc:0a:86:8e:ea:2a:e1:9e: 1b:c2:2f:12:5e:6c:ed:16:03:66:76:3f:8f:12:42: a8:b9:b7:c0:02:a0:b9:7c:c3:9f:1d:0a:b6:6a:69: df:98:09:2e:66:9a:60:d0:e2:29:cc:08:fb:78:52: fd:48:be:a4:f6:81:8d:76:4b:f1:fa:94:94:d1:a2: 74:b3:d1:e4:79:43:24:7a:88:89:bf:75:41:27:ab: a9:66:f1:a5:d9:77:f8:9e:57:32:33:d2:9e:7a:0c: 9c:de:ed:0d:0e:76:2a:f2:3b:0b:bc:6f:88:72:5f: 00:5e:72:55:c9:2a:63:5d:6a:8a:a6:d5:1e:65:a3: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BE:B0:AB:B6:42:6A:4F:47:97:F3:06:F6:41:DF:8A:7C:0F:35:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25f25e2d-2b7b-3f7e-9f68-5053d1a7fd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:87:78:05:b1:fa:75:d9:35:2c:db:c8:d7:61:90:d2:68:77: 6b:55:d0:a4:38:ce:09:a6:f1:5a:55:b8:f4:20:97:cd:02:7b: d3:92:7f:9d:a8:81:51:a8:10:93:f2:8e:c1:12:75:02:32:7b: e3:9e:ee:aa:7d:31:a7:0c:4b:15:c9:b2:d9:b8:ec:f7:b8:c2: ce:be:ab:6f:2b:f3:a5:06:a2:a9:24:65:3d:8c:cc:ba:64:0b: e2:f3:49:d5:c5:f0:34:6a:15:64:f9:1f:e6:48:db:95:73:4d: c0:38:ad:a7:4b:07:10:a5:0c:1d:b7:52:67:dc:93:da:24:fd: 5b:69:bb:c7:f6:72:c9:4f:ad:91:aa:56:16:38:1f:09:7c:5b: 04:09:84:b7:4e:bb:7b:e2:ed:c4:f6:7a:2c:b7:f5:a4:f7:43: 17:70:65:85:d2:39:6a:b9:ac:67:44:e3:5b:00:83:1d:96:4a: 39:70:29:b8:e6:2b:a4:26:3b:8f:61:bf:b1:96:b8:d2:1e:06: 3f:ec:10:7b:6d:83:31:8d:71:de:1d:8a:3d:f2:49:e8:35:b6: 60:6f:70:c1:da:d9:84:a6:21:a4:4c:68:6c:ee:0a:aa:28:58: b2:dc:fb:27:5c:e7:da:08:ff:42:2d:e8:6a:5c:de:2c:f1:28: fb:05:bd:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbAE1ws1JZK7FHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk ZWZkZGZiZWQtNjU3Yy00N2M4LTgxZjMtZmJkMTg4YWYxYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Tx1jvI3nTSaO3HKCPLjuza4vHACjcKCFBJ ztgxGo1hTKIXfWSDSyqbmW6UvnmXsRig93IObsk+iueAfMxZ5cXiP07ak2QsxLVD NZU0K5gCqfMSmyNgD/6BfDrRSiXXV8O3vKXr8nUZu4pw97lsfQxWFrEnZlQNhknV eX/O/AqGjuoq4Z4bwi8SXmztFgNmdj+PEkKoubfAAqC5fMOfHQq2amnfmAkuZppg 0OIpzAj7eFL9SL6k9oGNdkvx+pSU0aJ0s9HkeUMkeoiJv3VBJ6upZvGl2Xf4nlcy M9Keegyc3u0NDnYq8jsLvG+Icl8AXnJVySpjXWqKptUeZaNuOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK+sKu2QmpPR5fzBvZB34p8DzXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjVmMjVlMmQtMmI3Yi0z ZjdlLTlmNjgtNTA1M2QxYTdmZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGHeAWx+nXZNSzbyNdhkNJod2tV0KQ4zgmm8VpVuPQgl80Ce9OSf52o gVGoEJPyjsESdQIye+Oe7qp9MacMSxXJstm47Pe4ws6+q28r86UGoqkkZT2MzLpk C+LzSdXF8DRqFWT5H+ZI25VzTcA4radLBxClDB23Umfck9ok/Vtpu8f2cslPrZGq VhY4Hwl8WwQJhLdOu3vi7cT2eiy39aT3QxdwZYXSOWq5rGdE41sAgx2WSjlwKbjm K6QmO49hv7GWuNIeBj/sEHttgzGNcd4dij3ySeg1tmBvcMHa2YSmIaRMaGzuCqoo WLLc+ydc59oI/0It6Gpc3izxKPsFvV4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:53 2024 by rpki-client on console-fra.rpki-client.org