$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4fe50ad6-dd6d-353d-8aeb-045719857f90.roa File: 4fe50ad6-dd6d-353d-8aeb-045719857f90.roa (raw, json) Hash identifier: NE+J3h0+1R4ZMOr3qWY1iHvTHh0hvYBWycedmSni2v0= Subject key identifier: A3:3E:63:C3:B0:E6:43:84:E2:9C:34:AD:15:4E:6E:50:F2:B3:F6:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15536F7612265B6FA57EF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4fe50ad6-dd6d-353d-8aeb-045719857f90.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.213.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:36:f7:61:22:65:b6:fa:57:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=57c793fe-5b30-40d3-820c-e8a4382fabaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:21:5f:ad:70:46:00:b6:13:ce:de:26:90: 23:de:b5:76:9c:70:aa:ea:c0:69:f9:9c:a4:fd:b9: 98:b3:37:95:8c:53:9e:90:04:56:b3:50:fe:bd:14: 5c:2c:c9:4d:4d:1c:f1:91:b7:ef:be:3a:b2:69:fa: ca:e3:5b:45:3e:19:9f:31:3f:86:31:61:40:cd:11: e0:0e:70:48:f2:67:50:4b:da:03:00:89:15:20:a8: 4e:44:5f:20:c6:0a:73:d9:0a:8b:82:a3:0a:7f:fc: 1a:e8:e7:c6:f1:b8:20:d1:50:51:db:fb:04:ad:4f: ea:97:57:46:3a:bd:f5:e1:73:22:8b:3f:54:79:eb: a9:15:1e:5c:2d:6d:f6:81:10:fa:17:6a:dd:42:e1: 2e:da:32:b9:b2:c6:07:e8:3d:57:01:0e:65:92:51: c7:b4:f3:b8:e4:a4:c8:d5:10:55:7f:3e:96:a6:d9: b3:c2:65:0a:7c:e5:f5:65:11:4b:75:ed:12:0c:69: f6:c3:97:17:42:34:10:fb:9e:92:c7:d6:0a:d0:34: 11:3d:c7:60:3b:b6:c6:d9:81:1c:5a:d3:90:29:51: d8:2d:90:84:ac:72:85:f7:bc:fc:fb:4a:6e:4d:5d: 81:6c:d7:6a:3d:2c:68:37:25:77:08:27:d5:97:6c: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3E:63:C3:B0:E6:43:84:E2:9C:34:AD:15:4E:6E:50:F2:B3:F6:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4fe50ad6-dd6d-353d-8aeb-045719857f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:85:53:93:41:3a:20:c9:b5:b3:ba:bd:29:c1:aa:e7:13:3d: ff:c3:7c:48:10:e4:8a:dd:96:38:b3:39:07:9e:45:47:d2:76: f8:95:26:7a:26:d6:52:77:99:40:5d:0c:18:ad:6a:91:51:b6: 1c:2b:c1:60:b4:cd:a3:1f:85:07:ce:62:c4:bc:b7:cb:79:28: ea:66:66:eb:a2:71:f5:d4:90:db:89:60:12:9d:f3:15:88:e7: c6:1a:59:f9:e5:0b:03:3d:bb:97:fa:e2:30:ea:8e:ff:fa:a5: a5:83:9a:52:6a:2f:00:08:cb:32:f2:d7:d4:34:f3:58:b7:90: 74:2c:16:bd:20:38:85:1d:28:e6:a8:ca:4e:44:98:9f:06:61: a4:0b:47:d7:db:6f:15:f2:66:93:86:d5:de:d2:8d:01:c6:75: 45:22:c7:87:07:a6:4d:c9:16:80:7e:ef:60:6c:61:90:29:3b: e2:13:d1:67:78:24:4d:f1:f9:42:e5:02:a2:ae:7f:6f:1b:7f: 2e:7e:fc:53:86:e6:01:20:e3:7e:21:a3:ad:5a:bd:70:19:5a: 82:00:ef:fe:9e:e3:53:56:f9:3f:d8:03:35:ed:24:e6:f6:04: 09:1e:66:2f:05:4a:77:c3:28:5e:9e:fe:f5:c0:d8:98:3f:cc: 7e:eb:55:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTb3YSJltvpX74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NTdjNzkzZmUtNWIzMC00MGQzLTgyMGMtZThhNDM4MmZhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD4hX61wRgC2E87eJpAj3rV2nHCq6sBp+Zyk /bmYszeVjFOekARWs1D+vRRcLMlNTRzxkbfvvjqyafrK41tFPhmfMT+GMWFAzRHg DnBI8mdQS9oDAIkVIKhORF8gxgpz2QqLgqMKf/wa6OfG8bgg0VBR2/sErU/ql1dG Or314XMiiz9UeeupFR5cLW32gRD6F2rdQuEu2jK5ssYH6D1XAQ5lklHHtPO45KTI 1RBVfz6WptmzwmUKfOX1ZRFLde0SDGn2w5cXQjQQ+56Sx9YK0DQRPcdgO7bG2YEc WtOQKVHYLZCErHKF97z8+0puTV2BbNdqPSxoNyV3CCfVl2z9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM+Y8Ow5kOE4pw0rRVOblDys/Z7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGZlNTBhZDYtZGQ2ZC0z NTNkLThhZWItMDQ1NzE5ODU3ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrdWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+FU5NBOiDJtbO6vSnBqucTPf/DfEgQ5IrdljizOQeeRUfSdviVJnom 1lJ3mUBdDBitapFRthwrwWC0zaMfhQfOYsS8t8t5KOpmZuuicfXUkNuJYBKd8xWI 58YaWfnlCwM9u5f64jDqjv/6paWDmlJqLwAIyzLy19Q081i3kHQsFr0gOIUdKOao yk5EmJ8GYaQLR9fbbxXyZpOG1d7SjQHGdUUix4cHpk3JFoB+72BsYZApO+IT0Wd4 JE3x+ULlAqKuf28bfy5+/FOG5gEg434ho61avXAZWoIA7/6e41NW+T/YAzXtJOb2 BAkeZi8FSnfDKF6e/vXA2Jg/zH7rVfQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:42 2024 by rpki-client on console-ams.rpki-client.org