$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c86854f-03e1-35bd-ab42-09ca4c29250d.roa File: 6c86854f-03e1-35bd-ab42-09ca4c29250d.roa (raw, json) Hash identifier: nb2pFbXH8RBgTVwoHvEtmNASLDrdCXQiuDlHbSH/hig= Subject key identifier: 40:3B:16:23:3A:FF:99:77:06:43:48:8B:6B:EC:71:49:27:BB:55:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15534FC7BD97BEA7FEE6000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c86854f-03e1-35bd-ab42-09ca4c29250d.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.184.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:34:fc:7b:d9:7b:ea:7f:ee:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=cfa9100e-f83c-4ff2-b57f-09b03aa9bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:b1:9a:30:bc:ca:bd:20:d0:d0:9d:2c:41: 05:c7:ea:39:05:04:49:ec:e2:91:3c:b3:8f:a9:a8: 13:d8:6a:87:9a:44:0d:75:59:89:a1:15:77:f0:62: c3:cb:33:42:d9:19:ff:2c:0c:01:e1:c3:5e:bf:59: 5c:ee:15:40:eb:40:f5:15:48:4e:4e:66:5c:79:fd: fa:c2:90:55:35:ff:95:9d:16:29:3c:95:4a:58:79: 92:e2:75:75:18:e9:7b:70:43:87:2a:48:7a:01:c6: 42:68:22:82:58:24:d6:27:2b:64:ae:61:2f:a9:e9: 1b:ef:a2:cd:54:00:b8:25:33:6e:69:f3:db:19:64: 25:f8:64:9b:08:16:27:21:fa:fe:23:9c:e9:11:94: e6:40:3f:b2:9b:cc:75:b2:87:29:14:f4:f3:b9:04: 67:a1:0b:e8:52:40:b9:50:fb:04:52:65:c4:5c:50: eb:bb:c2:dc:49:58:c8:d3:51:58:6e:f3:b0:d4:a7: 21:2e:ab:41:c5:dc:9d:fa:79:a2:eb:e3:15:51:d3: 76:20:e9:3a:50:da:1a:a9:06:68:3f:d7:2d:01:f2: ec:11:68:14:c6:db:43:25:43:48:18:06:cc:12:57: 6b:30:c4:e8:aa:bd:f2:ab:07:bb:f4:5e:45:4f:3e: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:16:23:3A:FF:99:77:06:43:48:8B:6B:EC:71:49:27:BB:55:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c86854f-03e1-35bd-ab42-09ca4c29250d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:80:be:34:5e:0f:c1:e8:24:d9:81:83:97:4b:83:77:e6:5b: 34:7e:81:57:81:50:fa:f5:52:07:c3:41:da:7c:81:e0:31:87: 5f:26:cf:4d:da:bb:5f:4f:63:4c:45:82:49:c0:49:0e:ad:08: 66:5f:eb:5f:c6:64:39:c4:5b:24:85:14:83:e5:7a:0e:d4:00: fb:b1:ef:e0:68:e6:b2:19:77:ed:38:14:34:48:24:8a:8d:87: ba:5b:b6:01:9a:f2:d2:f2:e8:82:6b:67:e2:26:7e:72:11:52: 44:a2:27:7c:8f:0d:29:3e:e9:cb:f8:42:7e:c5:91:83:b7:12: ba:df:1a:54:c2:cd:4d:af:82:12:fe:5d:ed:fe:2c:e7:bb:47: c1:75:4f:8d:75:c4:6d:35:b3:1a:df:68:96:58:4f:cd:23:56: 4e:89:32:a7:a0:51:ee:0d:98:fd:3b:19:6f:02:82:15:ff:40: 6e:0f:25:a4:53:44:7e:5b:94:50:39:95:0d:c5:04:e1:38:f0: cc:10:6d:0e:20:c8:80:1e:a7:bf:ad:c9:44:45:f4:6d:30:f8: 1f:f2:d3:14:a3:53:58:af:87:f0:67:6d:42:ed:72:d6:19:b3: 93:d8:7a:1f:8c:b5:ca:4f:7a:72:86:68:d2:6b:29:20:77:97: fd:eb:3b:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTT8e9l76n/uYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk Y2ZhOTEwMGUtZjgzYy00ZmYyLWI1N2YtMDliMDNhYTliZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb+xmjC8yr0g0NCdLEEFx+o5BQRJ7OKRPLOP qagT2GqHmkQNdVmJoRV38GLDyzNC2Rn/LAwB4cNev1lc7hVA60D1FUhOTmZcef36 wpBVNf+VnRYpPJVKWHmS4nV1GOl7cEOHKkh6AcZCaCKCWCTWJytkrmEvqekb76LN VAC4JTNuafPbGWQl+GSbCBYnIfr+I5zpEZTmQD+ym8x1socpFPTzuQRnoQvoUkC5 UPsEUmXEXFDru8LcSVjI01FYbvOw1KchLqtBxdyd+nmi6+MVUdN2IOk6UNoaqQZo P9ctAfLsEWgUxttDJUNIGAbMEldrMMToqr3yqwe79F5FTz7FewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA7FiM6/5l3BkNIi2vscUknu1WKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmM4Njg1NGYtMDNlMS0z NWJkLWFiNDItMDljYTRjMjkyNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGAvjReD8HoJNmBg5dLg3fmWzR+gVeBUPr1UgfDQdp8geAxh18mz03a u19PY0xFgknASQ6tCGZf61/GZDnEWySFFIPleg7UAPux7+Bo5rIZd+04FDRIJIqN h7pbtgGa8tLy6IJrZ+ImfnIRUkSiJ3yPDSk+6cv4Qn7FkYO3ErrfGlTCzU2vghL+ Xe3+LOe7R8F1T411xG01sxrfaJZYT80jVk6JMqegUe4NmP07GW8CghX/QG4PJaRT RH5blFA5lQ3FBOE48MwQbQ4gyIAep7+tyURF9G0w+B/y0xSjU1ivh/BnbULtctYZ s5PYeh+MtcpPenKGaNJrKSB3l/3rO5k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:06 2024 by rpki-client on console-fra.rpki-client.org