$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa File: 5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa (raw, json) Hash identifier: 6stmXYfYKE06h8OP7zJcbBSiaX1HIuBdMKCHOQ2TRdE= Subject key identifier: 14:80:4C:46:B2:80:42:67:EC:36:FC:98:EE:EA:C6:BB:80:A3:AC:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858471A4474323A9E1BA3DC87FC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa Signing time: Wed 04 Sep 2024 13:08:54 +0000 ROA not before: Wed 04 Sep 2024 13:08:54 +0000 ROA not after: Tue 03 Dec 2024 14:08:54 +0000 asID: 7029 IP address blocks: 173.184.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:44:74:32:3a:9e:1b:a3:dc:87:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 13:08:54 2024 GMT Not After : Dec 3 14:08:54 2024 GMT Subject: CN=9e4e1653-0806-49d8-86bf-78d0a4d6e82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:d5:2b:71:e7:76:4a:8a:7e:68:83:d9:ec: 39:02:fe:e8:95:ea:ed:0c:49:d5:8d:ec:51:c6:1e: e9:94:a2:4c:6a:e2:b2:39:e3:e6:19:80:db:02:6e: cd:36:b7:59:9b:f3:28:cf:f2:21:14:ce:35:47:ef: fd:04:09:9b:e1:30:44:4b:77:35:04:61:44:7e:53: cd:5a:a8:23:bd:28:63:59:73:5b:c2:d4:02:e9:00: 69:44:ac:ed:8f:00:22:13:12:f9:c4:73:66:3a:b0: ec:74:95:9a:66:a3:62:62:03:03:78:29:1a:b5:25: 90:35:d5:f7:66:01:dd:f5:06:7f:23:79:8b:f1:a6: 07:01:dc:6c:6d:cb:51:c6:e9:b6:09:c5:f7:4c:f5: ac:3d:ac:cb:57:f1:0f:70:f8:5a:04:ae:05:9f:fe: a0:40:74:a9:6f:c1:c6:a9:dd:5f:26:95:3b:51:33: c0:d6:91:c4:d8:ac:c2:8a:8d:62:62:be:2e:de:85: 5d:c2:1e:5e:aa:b7:2f:c3:04:f4:39:a1:ec:09:85: 9d:0a:6e:ca:86:a3:fc:7b:d1:9f:3f:1a:f4:d9:41: de:1e:0a:9d:b5:91:d2:db:07:e7:0a:77:16:a8:fa: b4:8e:ad:fb:0a:3e:bd:94:3f:b8:bb:ab:2b:82:20: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:80:4C:46:B2:80:42:67:EC:36:FC:98:EE:EA:C6:BB:80:A3:AC:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5b:b1:bd:99:e7:0c:60:32:4c:84:e3:71:9f:4a:59:43:68: 4e:8c:96:24:a1:0d:52:18:e6:ed:a2:22:12:fd:55:e3:9c:9b: 5a:89:82:30:88:ce:4e:e3:33:ed:f1:85:09:ce:fb:d7:81:79: 85:34:dc:4e:6c:7d:0a:d7:8f:02:49:73:fa:4a:80:ec:8e:2b: 38:a2:8f:67:12:3c:28:11:c5:c6:7d:bf:78:6b:30:91:c0:ff: 27:f0:59:d9:79:e8:f9:5c:f8:30:4f:8d:79:a7:63:26:26:71: 0a:4c:1d:cb:fe:dd:9b:b9:49:5d:04:83:d8:be:64:7b:7b:8b: 25:77:62:5b:e7:33:42:ef:1c:1c:2b:84:ef:66:6e:0c:56:e6: 9c:c6:cc:90:d5:33:04:83:bc:f7:c6:fc:5f:43:e2:80:1c:5a: 7c:3c:12:75:9a:e2:40:c5:13:55:73:b4:00:cf:4e:05:d7:22: 90:e6:96:85:00:54:d5:47:e8:4f:53:ed:f7:d6:90:16:0d:62: fa:5b:4b:b7:ba:40:d5:d1:5f:bd:e5:86:e5:c2:80:64:88:06: d6:65:e1:b5:25:10:8d:9c:02:31:bc:6e:36:8c:b9:c1:7b:d6: ae:90:51:16:71:55:ad:f0:eb:17:1b:af:7d:96:06:a7:16:4d: dc:b3:77:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcaRHQyOp4bo9yH/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNDEzMDg1NFoXDTI0MTIwMzE0MDg1NFowLzEtMCsGA1UEAxMk OWU0ZTE2NTMtMDgwNi00OWQ4LTg2YmYtNzhkMGE0ZDZlODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuirVK3HndkqKfmiD2ew5Av7olertDEnVjexR xh7plKJMauKyOePmGYDbAm7NNrdZm/Moz/IhFM41R+/9BAmb4TBES3c1BGFEflPN WqgjvShjWXNbwtQC6QBpRKztjwAiExL5xHNmOrDsdJWaZqNiYgMDeCkatSWQNdX3 ZgHd9QZ/I3mL8aYHAdxsbctRxum2CcX3TPWsPazLV/EPcPhaBK4Fn/6gQHSpb8HG qd1fJpU7UTPA1pHE2KzCio1iYr4u3oVdwh5eqrcvwwT0OaHsCYWdCm7KhqP8e9Gf Pxr02UHeHgqdtZHS2wfnCncWqPq0jq37Cj69lD+4u6srgiDiCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSATEaygEJn7Db8mO7qxruAo6ycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWYwN2Q5YTktYjliNS0z NzYyLTgxY2YtZGFjMTQ3MzAwMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpbsb2Z5wxgMkyE43GfSllDaE6MliShDVIY5u2iIhL9VeOcm1qJgjCI zk7jM+3xhQnO+9eBeYU03E5sfQrXjwJJc/pKgOyOKziij2cSPCgRxcZ9v3hrMJHA /yfwWdl56Plc+DBPjXmnYyYmcQpMHcv+3Zu5SV0Eg9i+ZHt7iyV3YlvnM0LvHBwr hO9mbgxW5pzGzJDVMwSDvPfG/F9D4oAcWnw8EnWa4kDFE1VztADPTgXXIpDmloUA VNVH6E9T7ffWkBYNYvpbS7e6QNXRX73lhuXCgGSIBtZl4bUlEI2cAjG8bjaMucF7 1q6QURZxVa3w6xcbr32WBqcWTdyzd2U= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:04 2024 by rpki-client on console-fra.rpki-client.org