$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa File: 2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa (raw, json) Hash identifier: TWeQUQx8ebIhQYSM8WOaeTwYGulvj+7KTSrUg5m1UME= Subject key identifier: 3F:24:6D:88:A6:A6:8E:F1:CB:21:D3:C4:9C:81:BE:89:AF:1B:11:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553707145042714D214980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.221.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:37:07:14:50:42:71:4d:21:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=eaf4d019-40b5-40c4-a83b-f861de1571d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:01:e0:e9:5f:4f:37:7d:4d:48:aa:c1:f0:5f: 67:15:df:22:6c:a0:7e:d0:2d:e8:ab:45:23:45:06: e1:ee:38:77:9f:36:0e:c4:d5:b9:d7:2c:58:a3:e8: f2:38:c1:81:d0:fe:e7:07:de:59:26:d9:27:26:3a: 58:c0:b4:9f:93:8b:ca:09:50:3c:0d:e4:88:f0:4b: 75:54:41:ec:62:c6:6c:b5:8e:fa:7a:0a:1d:6c:af: c8:5a:7c:51:c6:8c:81:d9:1f:2b:19:77:e3:5b:5a: af:6c:72:b9:65:71:af:5c:cd:bb:0a:b3:45:1a:81: b8:99:3d:49:bc:ec:06:cf:04:a4:d5:df:9d:33:28: 24:2a:a4:83:f9:63:47:03:52:f0:ae:3f:3a:4a:cd: 67:3d:30:50:b6:6f:d8:51:2b:46:ef:69:b1:48:5f: 90:7a:61:fe:dc:44:a4:ca:d1:92:0d:35:df:66:06: 2c:54:40:56:39:2c:63:bb:54:a8:58:e2:23:98:62: 8c:07:dc:25:5a:a6:16:f1:9e:c4:95:0b:77:d7:0b: da:69:9c:87:de:c2:77:2c:fe:83:2b:98:2e:0e:be: 38:f7:9c:42:d8:62:f7:45:85:fb:12:a3:11:42:b8: 7c:4d:d3:95:19:ce:b7:04:93:cc:26:ce:64:06:4c: fb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:24:6D:88:A6:A6:8E:F1:CB:21:D3:C4:9C:81:BE:89:AF:1B:11:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:87:ab:4f:4d:9d:8d:5c:88:61:63:98:e1:3e:f0:89:7a:eb: ad:e1:77:bf:be:cd:8c:0a:85:26:5d:46:3c:c1:dc:71:cf:44: f7:8d:62:70:e5:34:6a:08:7e:d1:0c:d8:e9:dd:84:b9:7f:8d: 03:8c:f3:33:fd:43:74:bd:d6:e0:8b:20:81:88:67:cc:c7:2b: ba:c3:6e:c2:9c:5b:58:6d:af:7d:81:1a:04:d1:22:34:75:a8: 0c:cc:70:db:82:4c:bf:c6:6b:c2:cf:a3:b0:a4:8d:21:0f:26: 38:29:ae:9f:d4:e4:dd:74:dc:ee:4f:13:67:12:6b:ae:8f:76: 31:dc:0c:73:6d:28:db:68:6c:a3:3e:ce:7c:b1:30:43:00:c0: eb:df:6f:a1:89:6b:a3:f8:fd:bf:90:79:f3:6b:f9:61:b6:b1: 44:e0:c6:28:19:f0:cd:48:3e:44:b9:0f:7f:6b:4d:36:a3:31: ab:09:6c:ce:e4:b8:60:54:4c:3a:92:84:35:cd:64:d2:82:f9: 05:24:a8:13:2d:f9:04:ff:54:99:fc:b9:bd:f9:93:6b:ef:10: 1d:5b:54:91:a4:6e:4b:70:42:65:88:00:ee:0d:95:d4:67:ea: 59:c2:f3:05:2b:df:2f:87:91:6f:31:37:b0:21:04:76:f8:a5: 71:03:81:55 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfxVTcHFFBCcU0hSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZWFmNGQwMTktNDBiNS00MGM0LWE4M2ItZjg2MWRlMTU3MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgHg6V9PN31NSKrB8F9nFd8ibKB+0C3oq0Uj RQbh7jh3nzYOxNW51yxYo+jyOMGB0P7nB95ZJtknJjpYwLSfk4vKCVA8DeSI8Et1 VEHsYsZstY76egodbK/IWnxRxoyB2R8rGXfjW1qvbHK5ZXGvXM27CrNFGoG4mT1J vOwGzwSk1d+dMygkKqSD+WNHA1Lwrj86Ss1nPTBQtm/YUStG72mxSF+QemH+3ESk ytGSDTXfZgYsVEBWOSxju1SoWOIjmGKMB9wlWqYW8Z7ElQt31wvaaZyH3sJ3LP6D K5guDr4495xC2GL3RYX7EqMRQrh8TdOVGc63BJPMJs5kBkz7dQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD8kbYimpo7xyyHTxJyBvomvGxHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU4MmIwN2ItN2ZhMC0z Y2FkLTg1NzItYzBlNjQ0NzQwM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArd0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXoerT02djVyIYWOY4T7wiXrrreF3v77NjAqFJl1GPMHccc9E941icOU0 agh+0QzY6d2EuX+NA4zzM/1DdL3W4IsggYhnzMcrusNuwpxbWG2vfYEaBNEiNHWo DMxw24JMv8Zrws+jsKSNIQ8mOCmun9Tk3XTc7k8TZxJrro92MdwMc20o22hsoz7O fLEwQwDA699voYlro/j9v5B582v5YbaxRODGKBnwzUg+RLkPf2tNNqMxqwlszuS4 YFRMOpKENc1k0oL5BSSoEy35BP9Umfy5vfmTa+8QHVtUkaRuS3BCZYgA7g2V1Gfq WcLzBSvfL4eRbzE3sCEEdvilcQOBVQ== -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:27 2024 by rpki-client on console-ams.rpki-client.org