$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa File: 36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa (raw, json) Hash identifier: IdzCpMeaatdQ+AM6BSz0Ko16kqCJxOTmVLtW1uCHUm0= Subject key identifier: 16:F5:1E:FA:47:12:FF:7E:D0:6E:9F:A8:87:75:02:CB:30:9D:26:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EFEF88998FFDAE0443D26500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 7029 IP address blocks: 174.130.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:88:99:8f:fd:ae:04:43:d2:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=9a9161c7-05a4-453e-8c01-f3ac4e2fd10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:d0:35:f9:e7:4a:a2:c9:b8:62:fb:6a:2e: f1:06:e3:ff:90:8b:11:54:b4:79:ad:a9:50:35:41: 15:55:57:2a:ce:ec:d6:09:f0:da:67:d0:91:20:e7: e0:97:c1:0c:ef:c0:34:a0:34:cf:66:6f:04:e6:7b: 7b:62:2c:4e:e1:52:5f:bb:93:52:b9:33:03:09:29: ab:23:82:88:fd:98:d4:cd:56:32:5e:39:18:e6:78: 91:f1:bf:35:6f:5e:58:d4:a9:76:ee:24:6f:90:f3: ca:a3:45:8b:4d:d6:f5:0a:82:97:f2:d5:be:8c:ff: 70:ef:9d:1a:15:49:d6:6d:56:82:de:80:a1:ec:a3: ac:40:c7:52:1c:de:8e:41:94:e1:5c:f2:fd:20:9a: be:dd:9e:28:9c:4c:98:67:fd:71:16:52:8e:e5:e7: 85:3e:9a:ba:b2:da:44:35:20:a9:63:9f:4f:e6:a1: 76:14:0f:e9:c1:c8:df:47:fb:ad:77:09:52:1b:d5: 20:3a:64:26:d8:db:2d:a5:8c:da:0e:f4:3f:35:72: 10:de:ee:da:11:7f:d8:08:ae:95:e1:15:39:6b:e7: d6:a5:cd:51:ae:1c:76:f6:74:b7:3d:d4:6c:10:b2: b5:64:b8:06:44:7d:91:9d:e5:b2:23:74:c3:cc:50: 33:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F5:1E:FA:47:12:FF:7E:D0:6E:9F:A8:87:75:02:CB:30:9D:26:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6d:9c:12:67:c4:d8:1b:c3:76:0f:85:1e:15:82:1d:ef:c3: 0e:d8:db:cb:91:fb:a0:af:f1:ee:9e:98:f0:79:d0:4e:04:c3: 02:78:02:1d:e2:4b:49:19:06:c4:2d:8f:44:1a:86:e0:2b:3f: 1e:38:a1:2f:ac:3a:1b:d7:1e:2c:f7:ac:5e:d9:93:60:a8:cb: cd:fd:27:e7:03:a2:9d:89:d7:6c:3a:b4:bc:b0:a5:91:44:02: 25:65:22:f1:1c:31:a0:23:70:36:31:9d:ed:3a:48:f2:1c:7b: 42:a4:c1:45:49:77:c9:3f:7f:21:e3:4c:6c:66:f6:c5:73:2b: 5e:a1:d9:d1:49:7b:1c:c4:be:f1:7a:eb:2b:21:a6:14:93:d7: fd:90:4c:38:bc:f7:62:c7:22:f3:d6:a2:e5:c4:bc:5a:0f:5b: 2d:ab:7a:66:e8:ba:73:78:88:6f:a7:9c:b1:a6:4d:03:54:00: 29:57:59:74:40:b8:70:6e:53:20:4b:4f:01:24:bd:78:e0:58: 2f:3d:37:74:e1:04:b6:39:12:0d:82:f8:d7:dd:61:22:7b:50: 2d:4e:5c:57:80:18:7d:4c:69:4c:40:32:98:92:60:4f:e2:45: b7:57:22:2a:6c:a3:8b:82:fc:ae:13:d8:76:a5:f6:6d:88:7f: 15:e1:6f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74iZj/2uBEPSZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk OWE5MTYxYzctMDVhNC00NTNlLThjMDEtZjNhYzRlMmZkMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkvQNfnnSqLJuGL7ai7xBuP/kIsRVLR5ralQ NUEVVVcqzuzWCfDaZ9CRIOfgl8EM78A0oDTPZm8E5nt7YixO4VJfu5NSuTMDCSmr I4KI/ZjUzVYyXjkY5niR8b81b15Y1Kl27iRvkPPKo0WLTdb1CoKX8tW+jP9w750a FUnWbVaC3oCh7KOsQMdSHN6OQZThXPL9IJq+3Z4onEyYZ/1xFlKO5eeFPpq6stpE NSCpY59P5qF2FA/pwcjfR/utdwlSG9UgOmQm2NstpYzaDvQ/NXIQ3u7aEX/YCK6V 4RU5a+fWpc1Rrhx29nS3PdRsELK1ZLgGRH2RneWyI3TDzFAzCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb1HvpHEv9+0G6fqId1AsswnSbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzY5MDljYjctNTk1MC0z YmNjLWI5NGMtYTBkMmExYzBkMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxtnBJnxNgbw3YPhR4Vgh3vww7Y28uR+6Cv8e6emPB50E4EwwJ4Ah3i S0kZBsQtj0QahuArPx44oS+sOhvXHiz3rF7Zk2Coy839J+cDop2J12w6tLywpZFE AiVlIvEcMaAjcDYxne06SPIce0KkwUVJd8k/fyHjTGxm9sVzK16h2dFJexzEvvF6 6yshphST1/2QTDi892LHIvPWouXEvFoPWy2rembounN4iG+nnLGmTQNUAClXWXRA uHBuUyBLTwEkvXjgWC89N3ThBLY5Eg2C+NfdYSJ7UC1OXFeAGH1MaUxAMpiSYE/i RbdXIipso4uC/K4T2Hal9m2IfxXhb8s= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:03 2024 by rpki-client on console-fra.rpki-client.org