$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa File: 6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa (raw, json) Hash identifier: sNhUOvrTYmZ0rbqYtgczx2PzeLYKGV8m/p+Svmv1t6Q= Subject key identifier: BE:9F:50:F0:08:3F:48:36:53:C4:DC:CB:3D:F5:8A:31:55:DE:B0:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858471A437614777A8C84134A2C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa Signing time: Wed 04 Sep 2024 13:06:54 +0000 ROA not before: Wed 04 Sep 2024 13:06:54 +0000 ROA not after: Tue 03 Dec 2024 14:06:54 +0000 asID: 7029 IP address blocks: 173.188.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:43:76:14:77:7a:8c:84:13:4a:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 13:06:54 2024 GMT Not After : Dec 3 14:06:54 2024 GMT Subject: CN=b3b2d600-1255-4924-a514-af0c0d23fa19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:09:ef:df:ff:95:3c:a2:74:f1:c1:9e:5a: b6:65:62:3a:0c:e4:9d:e3:e6:ec:27:59:b4:da:b6: 89:b6:ce:75:15:25:20:7a:cf:88:86:21:12:a3:3e: a4:27:e8:33:4a:a7:03:67:a9:8f:12:4e:08:4d:41: 21:70:04:34:1a:90:24:1e:07:19:75:db:90:f1:c4: 46:52:34:d0:9c:dd:34:c9:36:cf:08:76:05:a2:f2: 9f:64:e3:8b:b3:d6:b5:0b:e4:70:b9:14:37:5a:66: 19:a9:68:57:bc:90:3b:62:3f:f9:de:a5:73:cf:61: ea:f4:8a:a4:f6:f1:ed:5b:f3:c4:c7:c3:98:af:37: 47:f2:60:f2:ed:82:bd:05:24:bb:01:6a:75:94:f2: 72:34:20:ea:47:d4:be:29:ed:4b:f9:b5:45:5e:f2: 7a:e8:3f:f8:5f:40:4c:20:6b:4f:ca:0f:a2:b2:c4: 42:ca:99:48:31:8b:5a:65:2a:33:4c:fa:c1:80:09: 4b:42:c9:a2:f3:fb:67:a5:35:88:6b:88:3e:30:86: f4:96:f5:82:30:c0:cf:0f:21:53:66:14:cc:24:f1: 00:0e:ae:3c:bf:93:8b:1d:5f:d1:94:4f:5d:43:38: 64:ea:39:42:68:4b:ab:2b:0c:9b:cc:5a:5c:f0:ef: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9F:50:F0:08:3F:48:36:53:C4:DC:CB:3D:F5:8A:31:55:DE:B0:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a774f4c-a43e-363d-bf90-79a8bd95f2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:85:86:e9:1a:c8:f1:a0:89:dd:94:16:b2:5d:07:2e:0b:10: 8c:02:c0:e1:bc:75:e1:9c:e2:16:cd:19:d3:c1:69:fc:45:a5: 54:20:28:a5:14:5b:61:18:51:1b:d1:bf:63:e9:b3:1d:84:b7: b4:29:57:06:60:0c:88:90:53:7f:a3:bb:ea:ad:83:83:f1:e3: 7a:ec:6d:9b:cf:b2:50:9b:7c:dc:9b:86:09:31:d1:0d:8d:a5: 72:c8:68:89:a6:a6:4d:56:c3:c0:a0:d7:c7:1d:7e:59:09:37: c4:93:df:74:31:92:2c:8c:28:e6:6b:ba:e4:e0:c8:e8:96:a8: 3a:77:1b:e8:5b:f9:9b:df:9a:60:d9:41:cb:5f:d4:ee:f4:3f: 69:eb:73:cb:ab:52:06:ad:38:82:04:f3:90:85:05:b8:85:b5: 19:bb:16:a2:84:16:47:07:f9:76:b0:b3:f0:b6:6a:76:d1:53: b0:53:bf:df:66:09:e1:b3:7f:91:92:cb:e6:e9:d3:71:b9:97: a2:10:e2:a1:f2:78:ff:e6:d1:52:57:55:5d:ff:3a:a7:c7:76: ba:f0:df:d2:c0:38:2d:b9:b7:8f:c1:97:08:e0:c5:2e:e4:74: 9f:91:8e:9a:5e:c2:71:b0:67:bb:69:20:f2:f6:ff:f8:59:b3: 39:b5:d7:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcaQ3YUd3qMhBNKLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNDEzMDY1NFoXDTI0MTIwMzE0MDY1NFowLzEtMCsGA1UEAxMk YjNiMmQ2MDAtMTI1NS00OTI0LWE1MTQtYWYwYzBkMjNmYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO4J79//lTyidPHBnlq2ZWI6DOSd4+bsJ1m0 2raJts51FSUges+IhiESoz6kJ+gzSqcDZ6mPEk4ITUEhcAQ0GpAkHgcZdduQ8cRG UjTQnN00yTbPCHYFovKfZOOLs9a1C+RwuRQ3WmYZqWhXvJA7Yj/53qVzz2Hq9Iqk 9vHtW/PEx8OYrzdH8mDy7YK9BSS7AWp1lPJyNCDqR9S+Ke1L+bVFXvJ66D/4X0BM IGtPyg+issRCyplIMYtaZSozTPrBgAlLQsmi8/tnpTWIa4g+MIb0lvWCMMDPDyFT ZhTMJPEADq48v5OLHV/RlE9dQzhk6jlCaEurKwybzFpc8O8T5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6fUPAIP0g2U8Tcyz31ijFV3rDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmE3NzRmNGMtYTQzZS0z NjNkLWJmOTAtNzlhOGJkOTVmMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2FhukayPGgid2UFrJdBy4LEIwCwOG8deGc4hbNGdPBafxFpVQgKKUU W2EYURvRv2Ppsx2Et7QpVwZgDIiQU3+ju+qtg4Px43rsbZvPslCbfNybhgkx0Q2N pXLIaImmpk1Ww8Cg18cdflkJN8ST33QxkiyMKOZruuTgyOiWqDp3G+hb+ZvfmmDZ Qctf1O70P2nrc8urUgatOIIE85CFBbiFtRm7FqKEFkcH+Xaws/C2anbRU7BTv99m CeGzf5GSy+bp03G5l6IQ4qHyeP/m0VJXVV3/OqfHdrrw39LAOC25t4/BlwjgxS7k dJ+RjppewnGwZ7tpIPL2//hZszm119E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:06 2024 by rpki-client on console-fra.rpki-client.org