$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa File: 741043d5-25b2-3b17-899c-4e53d971fee2.roa (raw, json) Hash identifier: xWT0RctpvHv7Xb68Bi88TTPq+IcmUHcJ8irpmdRHtR8= Subject key identifier: AD:FE:32:2F:E1:50:DB:98:86:54:5D:30:8D:02:7D:60:C6:98:40:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15537149ACBE2A966BD5F32 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.221.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:37:14:9a:cb:e2:a9:66:bd:5f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=3e4432f0-2ae2-47c1-8698-378e3786cf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:be:50:fc:20:26:ec:ca:f8:2a:f7:9d:34: 7b:a3:e6:b0:3f:0d:40:68:3d:a7:c3:98:43:ec:dc: a5:91:06:89:0f:0e:ba:23:1f:e5:c2:e5:e7:85:89: 13:86:fa:ab:e0:53:4e:c9:7d:17:1e:e8:70:78:d0: d9:42:08:db:b2:9a:9e:b3:62:fb:59:a2:83:39:51: ba:fb:32:0b:fe:d3:b6:fe:64:c0:7b:32:4e:6d:0d: bd:5b:69:04:72:df:3b:ed:1c:7c:ae:a1:3e:03:53: d9:13:e0:50:f3:26:04:13:ad:b6:22:cc:5a:3b:64: 1c:05:d5:4e:a0:89:8f:d3:f1:70:44:c0:57:0d:77: 2f:ec:d0:b3:b8:29:9f:73:1c:94:c3:85:29:e3:bd: c7:87:6a:85:e3:57:7f:4f:8b:a7:cc:cf:f6:73:c3: 53:c2:de:87:a0:0d:f5:91:60:89:58:3d:39:f9:5b: c8:2f:ab:db:f3:9f:2f:02:29:57:dc:37:4c:13:78: 3e:d7:19:3e:36:33:07:b1:7a:70:c8:82:46:40:b5: 88:f8:9e:07:b2:5d:a6:73:83:26:5c:25:f6:f5:8b: 38:5e:3a:f7:c3:f7:0b:48:ea:20:a2:e3:87:8f:41: ee:ca:6a:80:14:46:a5:17:95:dc:94:9d:4e:b7:9c: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FE:32:2F:E1:50:DB:98:86:54:5D:30:8D:02:7D:60:C6:98:40:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8f:d6:26:3c:ed:a3:94:1a:4c:3d:2f:4b:7a:07:07:5f:13: c2:ab:e9:74:aa:ec:f1:c6:bb:53:6b:61:9e:6f:c4:ac:06:ac: 2a:62:2a:c2:84:b4:02:10:4e:00:1c:b8:3e:7b:d2:7a:02:a5: 7b:2f:84:91:0a:e0:50:f3:2e:d2:15:d8:f2:de:88:33:18:82: a6:c9:57:ae:69:8a:ae:89:41:0e:85:0b:25:86:72:83:28:3a: 0d:78:6c:20:2e:e7:cb:f4:f3:11:55:2d:f8:ac:14:3d:10:77: 62:22:22:c2:62:99:50:61:c4:4a:5d:7a:23:cb:d9:92:05:6f: d2:5d:81:b6:b5:34:48:8e:a7:89:c1:6f:3b:9f:49:c2:38:02: 7e:34:c4:89:e7:86:85:2d:ea:cc:5f:19:b2:a9:33:a9:09:81: f5:87:8a:79:0c:f4:49:ed:d3:9e:68:ae:1e:4f:72:55:32:9d: 3e:ac:68:8c:4d:72:fd:0d:6d:b9:f4:eb:13:aa:69:c4:bc:6c: 85:33:b7:8d:fb:23:f4:3a:d0:a1:7b:19:ad:a1:a1:ea:44:c8: 1f:29:a2:a5:a8:02:a6:d8:1e:a5:69:2b:fc:54:ea:71:99:d2: 75:6e:a1:19:73:54:3f:c7:14:c4:ad:8b:04:d4:6a:f7:2b:6c: 42:04:62:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTcUmsviqWa9XzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk M2U0NDMyZjAtMmFlMi00N2MxLTg2OTgtMzc4ZTM3ODZjZjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeO+UPwgJuzK+Cr3nTR7o+awPw1AaD2nw5hD 7NylkQaJDw66Ix/lwuXnhYkThvqr4FNOyX0XHuhweNDZQgjbspqes2L7WaKDOVG6 +zIL/tO2/mTAezJObQ29W2kEct877Rx8rqE+A1PZE+BQ8yYEE622IsxaO2QcBdVO oImP0/FwRMBXDXcv7NCzuCmfcxyUw4Up473Hh2qF41d/T4unzM/2c8NTwt6HoA31 kWCJWD05+VvIL6vb858vAilX3DdME3g+1xk+NjMHsXpwyIJGQLWI+J4Hsl2mc4Mm XCX29Ys4Xjr3w/cLSOogouOHj0HuymqAFEalF5XclJ1Ot5xymQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3+Mi/hUNuYhlRdMI0CfWDGmEA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzQxMDQzZDUtMjViMi0z YjE3LTg5OWMtNGU1M2Q5NzFmZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiP1iY87aOUGkw9L0t6BwdfE8Kr6XSq7PHGu1NrYZ5vxKwGrCpiKsKE tAIQTgAcuD570noCpXsvhJEK4FDzLtIV2PLeiDMYgqbJV65piq6JQQ6FCyWGcoMo Og14bCAu58v08xFVLfisFD0Qd2IiIsJimVBhxEpdeiPL2ZIFb9Jdgba1NEiOp4nB bzufScI4An40xInnhoUt6sxfGbKpM6kJgfWHinkM9Ent055orh5PclUynT6saIxN cv0Nbbn06xOqacS8bIUzt437I/Q60KF7Ga2hoepEyB8poqWoAqbYHqVpK/xU6nGZ 0nVuoRlzVD/HFMStiwTUavcrbEIEYuU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:49 2024 by rpki-client on console-ams.rpki-client.org