$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa File: 2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa (raw, json) Hash identifier: 8FypFngS+mCgb6t+EXGCXixXE1pfyy34fwZZNyC0KY4= Subject key identifier: 01:7A:4B:09:27:FC:AF:70:1F:21:8C:9B:60:8E:6E:88:60:03:06:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EE8A389F5A9173C38A3FC880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 173.191.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:38:9f:5a:91:73:c3:8a:3f:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=7a3d0bd4-a644-47c4-afc5-82aa6fad7565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:25:55:c7:4a:dd:c9:18:fb:f4:3a:f8:a4: 54:3c:68:0c:a8:d8:63:d0:be:0a:03:ef:3c:bd:00: 2f:1a:5e:07:6f:42:12:c1:8e:5e:79:38:8c:2a:69: a4:60:c7:a2:6f:21:b1:70:be:53:a3:32:dd:75:da: cf:35:c9:bf:d9:a4:3e:f3:c9:62:e1:83:8e:1f:0c: 13:b1:af:a3:d9:d3:22:c7:62:2d:8d:38:61:41:e8: bd:56:55:5a:13:e4:21:93:d3:0f:b5:c2:27:09:3f: 9d:42:89:37:52:03:79:1b:00:c5:e9:c1:ca:d5:a5: 0c:6a:f3:6c:02:19:a2:d5:5d:2d:22:19:e1:3f:c9: 3e:4e:55:64:16:c7:c1:7f:98:29:c2:5e:72:0f:78: d3:de:c5:88:0d:5b:c3:12:3b:b9:99:fc:4e:f1:8e: 2c:58:f5:e8:47:cb:6f:2f:5d:ee:4b:32:72:3f:82: 75:e6:75:85:de:37:1e:4c:b7:22:8a:4d:f4:73:34: 63:63:5d:1f:47:8b:87:59:b8:44:88:e0:55:1b:9b: 63:e6:72:7e:99:b3:79:c9:f8:13:a5:8e:a4:f2:03: 44:d1:d0:f9:86:f0:f9:de:2a:4b:34:3e:b3:bc:87: 6b:36:92:31:fe:9e:84:59:0a:00:7a:cc:73:d9:e2: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7A:4B:09:27:FC:AF:70:1F:21:8C:9B:60:8E:6E:88:60:03:06:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0f:7a:76:bc:7d:63:37:07:75:fe:b8:ef:41:21:a6:95:12: 88:d4:64:d4:40:0e:b9:e5:11:57:df:be:ad:91:9b:9b:c7:4f: 94:ef:43:61:71:2c:a7:54:38:2e:7d:b7:8d:c6:f9:30:34:40: 59:43:78:8e:7b:77:4a:fe:27:af:a5:ff:7b:63:32:9b:7b:ce: b0:16:97:03:2d:39:f3:04:15:db:23:1c:d2:c4:61:a2:91:de: 3c:a6:bd:61:9c:14:68:f2:59:27:a0:3c:9b:e9:3f:11:6b:a6: f7:32:f5:44:45:14:0f:87:1e:42:51:3a:6b:7b:24:2e:94:6b: 9b:c7:1c:09:63:17:64:c9:79:c0:a0:5e:37:30:ce:8f:82:e1: e4:a8:9b:e0:8d:90:29:a4:91:33:e7:e7:7f:4e:6e:26:ac:5b: 45:0e:4f:21:99:21:95:cb:4f:89:60:90:f1:31:cf:7d:1d:02: 7a:ab:49:e0:72:cd:36:67:80:5d:8e:ac:bb:03:93:ec:44:00: 85:12:77:72:bc:68:04:ef:87:ff:1c:96:df:12:48:46:32:20: ae:56:f0:a0:ec:3f:da:d6:53:3c:f1:9c:96:a2:4f:c1:10:fa: 42:be:17:0d:16:b0:d8:bd:4a:7a:1b:68:f5:f1:bb:44:bf:60: 61:56:2c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijifWpFzw4o/yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk N2EzZDBiZDQtYTY0NC00N2M0LWFmYzUtODJhYTZmYWQ3NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjklVcdK3ckY+/Q6+KRUPGgMqNhj0L4KA+88 vQAvGl4Hb0ISwY5eeTiMKmmkYMeibyGxcL5TozLdddrPNcm/2aQ+88li4YOOHwwT sa+j2dMix2ItjThhQei9VlVaE+Qhk9MPtcInCT+dQok3UgN5GwDF6cHK1aUMavNs Ahmi1V0tIhnhP8k+TlVkFsfBf5gpwl5yD3jT3sWIDVvDEju5mfxO8Y4sWPXoR8tv L13uSzJyP4J15nWF3jceTLciik30czRjY10fR4uHWbhEiOBVG5tj5nJ+mbN5yfgT pY6k8gNE0dD5hvD53ipLND6zvIdrNpIx/p6EWQoAesxz2eJiiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF6Swkn/K9wHyGMm2CObohgAwYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE3YzMzN2UtOTIxMy0z Y2Q0LWI5NzItYmJmOWI0MTgxNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQPena8fWM3B3X+uO9BIaaVEojUZNRADrnlEVffvq2Rm5vHT5TvQ2Fx LKdUOC59t43G+TA0QFlDeI57d0r+J6+l/3tjMpt7zrAWlwMtOfMEFdsjHNLEYaKR 3jymvWGcFGjyWSegPJvpPxFrpvcy9URFFA+HHkJROmt7JC6Ua5vHHAljF2TJecCg Xjcwzo+C4eSom+CNkCmkkTPn539ObiasW0UOTyGZIZXLT4lgkPExz30dAnqrSeBy zTZngF2OrLsDk+xEAIUSd3K8aATvh/8clt8SSEYyIK5W8KDsP9rWUzzxnJaiT8EQ +kK+Fw0WsNi9SnobaPXxu0S/YGFWLNo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:36 2024 by rpki-client on console-ams.rpki-client.org