$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa File: 50611b44-0c38-38f6-83d0-f8caa46c2536.roa (raw, json) Hash identifier: RZHlqUH/s8rTuDsdRMbQgCjm1COivuA9aqwEQuCnaNg= Subject key identifier: 9F:69:C4:4F:BC:13:3A:4E:3C:58:BF:62:D1:8E:CF:62:3F:00:3B:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155363D64A58C6AAF80EA58 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.188.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:36:3d:64:a5:8c:6a:af:80:ea:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=988faaf9-ee88-4383-aefd-528739916363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4d:19:d3:e7:99:78:a0:4b:5c:3c:9a:33:4c: 34:a0:46:c8:64:5b:d4:1b:94:65:b5:56:bf:af:ed: 61:c8:b9:89:a4:e4:c4:41:20:04:2f:ea:c6:cf:e3: cc:c5:7d:ed:25:22:7b:9c:bd:3c:6a:22:a0:ba:81: 2e:78:b9:f9:01:98:63:af:c8:c7:09:ba:c6:1e:37: 4d:a4:2b:02:8c:d6:8e:7e:ad:83:ea:97:bc:9b:d1: 65:30:94:bd:3f:3e:a8:c7:8c:58:98:eb:ec:86:31: ed:ac:e1:84:d1:18:df:d3:cd:00:ed:e8:c1:dc:c8: a2:5b:4f:64:ee:b0:69:53:68:ca:77:f5:3f:e1:30: ea:b4:7a:61:b3:5e:ea:58:42:c5:09:ce:87:08:ed: 1a:2e:96:8a:b6:a0:05:ea:05:40:d1:7e:f3:55:34: 20:44:0f:ae:7f:e3:e2:eb:40:74:0a:58:34:5d:1b: 7d:42:03:ed:30:39:29:ce:10:f1:64:18:a8:60:82: d4:44:60:b3:00:74:d9:6a:e5:33:33:d2:ec:48:3d: 3f:ec:e9:8f:e9:a7:3d:ce:a4:b0:a4:b4:3d:4e:1f: 6a:e0:16:60:eb:bf:44:ee:db:b1:59:c7:84:b6:67: a6:18:48:f9:8e:63:d6:6c:d1:ff:3a:cb:c0:08:f8: af:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:C4:4F:BC:13:3A:4E:3C:58:BF:62:D1:8E:CF:62:3F:00:3B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50611b44-0c38-38f6-83d0-f8caa46c2536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:22:55:00:14:09:f6:59:b4:87:c2:bc:39:69:ba:12:e4:26: 47:f9:b3:6d:a3:94:75:3a:96:9f:be:2b:d4:a9:9e:d5:9b:35: 00:4a:e2:d8:6a:4d:e1:7b:73:5a:6c:b8:c5:e0:62:2e:4b:31: e4:0d:bb:48:b5:3e:05:9a:11:9f:f8:83:2f:6c:76:70:c7:bf: 8a:7e:f4:51:55:e1:05:1d:50:79:f2:bc:a8:f3:26:c8:f2:2a: 05:9b:57:38:a2:d7:fa:e5:ee:ce:c8:42:5b:d8:88:e9:6f:a2: 9e:d3:ae:64:e7:f7:ce:32:de:a2:9a:43:7e:b1:0b:61:5d:dd: 23:4d:91:ba:d5:07:36:44:c8:1f:f7:5d:49:49:d6:36:05:67: b4:13:5a:87:74:13:3c:18:24:0a:33:a7:40:c3:24:d0:68:94: 09:27:ac:e5:9b:ae:47:f4:53:54:d6:bb:8d:b1:31:6e:59:99: b7:34:ae:90:66:3d:4e:3f:c2:82:1e:ca:32:28:b2:8c:89:e5: 91:26:7b:06:b0:54:e2:3f:26:34:f3:4d:59:19:53:89:dd:05: c0:cf:d2:52:8b:c1:25:5c:02:ae:31:35:04:67:dd:8f:db:95: 70:a0:08:d9:40:71:ee:da:12:2d:19:eb:8e:63:f8:1e:23:13: 01:d5:d2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTY9ZKWMaq+A6lgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTg4ZmFhZjktZWU4OC00MzgzLWFlZmQtNTI4NzM5OTE2MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE0Z0+eZeKBLXDyaM0w0oEbIZFvUG5RltVa/ r+1hyLmJpOTEQSAEL+rGz+PMxX3tJSJ7nL08aiKguoEueLn5AZhjr8jHCbrGHjdN pCsCjNaOfq2D6pe8m9FlMJS9Pz6ox4xYmOvshjHtrOGE0Rjf080A7ejB3MiiW09k 7rBpU2jKd/U/4TDqtHphs17qWELFCc6HCO0aLpaKtqAF6gVA0X7zVTQgRA+uf+Pi 60B0Clg0XRt9QgPtMDkpzhDxZBioYILURGCzAHTZauUzM9LsSD0/7OmP6ac9zqSw pLQ9Th9q4BZg679E7tuxWceEtmemGEj5jmPWbNH/OsvACPivxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9pxE+8EzpOPFi/YtGOz2I/ADvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA2MTFiNDQtMGMzOC0z OGY2LTgzZDAtZjhjYWE0NmMyNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsiVQAUCfZZtIfCvDlpuhLkJkf5s22jlHU6lp++K9SpntWbNQBK4thq TeF7c1psuMXgYi5LMeQNu0i1PgWaEZ/4gy9sdnDHv4p+9FFV4QUdUHnyvKjzJsjy KgWbVzii1/rl7s7IQlvYiOlvop7TrmTn984y3qKaQ36xC2Fd3SNNkbrVBzZEyB/3 XUlJ1jYFZ7QTWod0EzwYJAozp0DDJNBolAknrOWbrkf0U1TWu42xMW5Zmbc0rpBm PU4/woIeyjIosoyJ5ZEmewawVOI/JjTzTVkZU4ndBcDP0lKLwSVcAq4xNQRn3Y/b lXCgCNlAce7aEi0Z645j+B4jEwHV0sg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:01 2024 by rpki-client on console-fra.rpki-client.org