$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa File: 670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa (raw, json) Hash identifier: 3tQH0afLJtV2/d/Qt2yY0B4zrMXp5ESIBmxHDiCUhPs= Subject key identifier: 6A:31:06:BF:5B:13:DE:8E:C1:37:6F:AD:CE:D9:E7:9B:78:76:01:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847209AC6C351951DC0260F7520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa Signing time: Fri 06 Sep 2024 19:37:40 +0000 ROA not before: Fri 06 Sep 2024 19:37:40 +0000 ROA not after: Thu 05 Dec 2024 20:37:40 +0000 asID: 7029 IP address blocks: 151.213.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:20:9a:c6:c3:51:95:1d:c0:26:0f:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 19:37:40 2024 GMT Not After : Dec 5 20:37:40 2024 GMT Subject: CN=a553c224-59ca-4389-bfdb-0d9cc7957003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:6e:60:82:41:2a:cf:98:df:76:b2:8a:af: da:9a:f9:f4:cb:29:a7:84:62:59:92:1e:86:0f:c8: b7:26:fe:96:82:bb:99:3d:43:09:d9:26:62:3b:20: 0f:0f:11:1a:1e:f9:e4:8b:9e:96:b4:6a:d9:9a:bc: b8:d0:c0:1c:05:29:d2:1b:9f:f7:bb:81:f3:48:6d: 6c:77:72:6e:65:b1:d0:03:09:26:6a:f7:92:6f:c1: 38:e8:09:d6:04:9d:ba:54:6b:c1:66:c6:21:97:41: fe:e2:2d:73:4d:da:cc:b6:d0:77:92:a3:e8:2b:64: aa:a2:55:30:12:24:60:12:a9:7d:ce:fa:59:23:6e: 2f:89:1a:d8:d7:b4:ca:fb:c2:d3:f7:0d:77:a9:4c: 11:9a:91:0d:e8:dd:5b:04:00:a7:01:6f:64:98:c2: 9e:a3:73:d3:0c:ca:80:a3:44:ce:45:4b:f6:bd:da: a0:94:c7:21:3d:ae:f4:cd:dd:f9:3b:33:be:e1:37: 56:a3:67:de:fe:f5:e9:d2:fd:e3:72:56:bf:e9:24: 1a:9b:63:c0:9e:7d:25:fc:f0:5e:2a:a8:2c:7a:f2: b0:14:72:06:c8:8a:7f:97:12:96:e5:7e:98:94:68: 7f:11:27:b5:08:11:96:1b:24:b7:50:d2:33:53:49: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:31:06:BF:5B:13:DE:8E:C1:37:6F:AD:CE:D9:E7:9B:78:76:01:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/670ddf6e-23cb-3962-bdbf-1c20a8a32067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c7:a3:04:9f:57:6d:58:a4:70:30:c5:1a:1a:20:c3:5f:28: 32:c4:bf:79:a6:ec:02:15:8c:81:68:18:b6:22:98:b7:bc:0f: ea:c9:c8:8e:53:72:46:1e:cd:3d:3d:31:0c:7f:b7:f0:59:79: c6:da:77:24:31:ad:ec:4f:ae:a0:b6:a2:4d:ef:57:94:09:f1: 31:22:c5:4c:63:a3:52:d3:fd:4d:77:8d:da:f8:c7:b6:be:4c: e4:1f:8d:61:08:11:5f:78:b6:d0:a3:7f:fb:39:dc:46:18:bc: 9e:83:dd:9d:f5:9c:28:5a:38:1e:77:9a:bb:08:10:a1:f2:cb: dc:cd:d1:a2:04:71:30:20:93:75:12:f9:8c:4f:c9:5b:d6:f6: bb:36:a1:87:5b:10:ff:11:e4:3f:0a:8e:76:d9:02:7d:c0:91: a1:92:99:5d:a8:a0:75:d4:4b:4c:e8:ce:78:45:91:f0:1b:80: 56:d6:b2:e5:00:2e:c4:19:64:29:c8:60:01:45:11:9d:a7:d5: 13:f6:7a:36:a4:15:28:67:a2:01:13:3b:73:cd:d7:ee:23:27: 99:7e:11:b4:e4:a4:2f:b4:0b:e0:a4:1c:b5:ef:86:45:04:e2: e4:90:19:e0:12:5d:39:f7:75:b8:ae:e4:74:8e:c8:d3:1f:b6: 34:7a:cf:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcgmsbDUZUdwCYPdSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNjE5Mzc0MFoXDTI0MTIwNTIwMzc0MFowLzEtMCsGA1UEAxMk YTU1M2MyMjQtNTljYS00Mzg5LWJmZGItMGQ5Y2M3OTU3MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSFuYIJBKs+Y33ayiq/amvn0yymnhGJZkh6G D8i3Jv6WgruZPUMJ2SZiOyAPDxEaHvnki56WtGrZmry40MAcBSnSG5/3u4HzSG1s d3JuZbHQAwkmaveSb8E46AnWBJ26VGvBZsYhl0H+4i1zTdrMttB3kqPoK2SqolUw EiRgEql9zvpZI24viRrY17TK+8LT9w13qUwRmpEN6N1bBACnAW9kmMKeo3PTDMqA o0TORUv2vdqglMchPa70zd35OzO+4TdWo2fe/vXp0v3jcla/6SQam2PAnn0l/PBe KqgsevKwFHIGyIp/lxKW5X6YlGh/ESe1CBGWGyS3UNIzU0l3lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoxBr9bE96OwTdvrc7Z55t4dgHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjcwZGRmNmUtMjNjYi0z OTYyLWJkYmYtMWMyMGE4YTMyMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrHowSfV21YpHAwxRoaIMNfKDLEv3mm7AIVjIFoGLYimLe8D+rJyI5T ckYezT09MQx/t/BZecbadyQxrexPrqC2ok3vV5QJ8TEixUxjo1LT/U13jdr4x7a+ TOQfjWEIEV94ttCjf/s53EYYvJ6D3Z31nChaOB53mrsIEKHyy9zN0aIEcTAgk3US +YxPyVvW9rs2oYdbEP8R5D8KjnbZAn3AkaGSmV2ooHXUS0zoznhFkfAbgFbWsuUA LsQZZCnIYAFFEZ2n1RP2ejakFShnogETO3PN1+4jJ5l+EbTkpC+0C+CkHLXvhkUE 4uSQGeASXTn3dbiu5HSOyNMftjR6zxA= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:39 2024 by rpki-client on console-ams.rpki-client.org