$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa File: 7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa (raw, json) Hash identifier: 1fwJtjPSQFO86x/iHT01J4EpcRgu+t1ui6BnAgxzWd8= Subject key identifier: A2:BB:CC:93:DB:D4:6E:10:EE:6E:DF:F9:3E:06:47:A8:00:6C:04:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847209AECAF417A740051395D68 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa Signing time: Fri 06 Sep 2024 19:37:58 +0000 ROA not before: Fri 06 Sep 2024 19:37:58 +0000 ROA not after: Thu 05 Dec 2024 20:37:58 +0000 asID: 7029 IP address blocks: 173.188.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:20:9a:ec:af:41:7a:74:00:51:39:5d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 19:37:58 2024 GMT Not After : Dec 5 20:37:58 2024 GMT Subject: CN=3f94055c-0ef3-455b-9222-ccdaf4aadff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:53:58:67:6c:db:7e:51:c4:db:fd:80:92: ff:04:7d:a6:ad:63:0e:b2:b3:d6:1d:12:01:9d:89: bb:46:cb:f0:d4:11:44:4c:71:85:c0:fd:ae:c1:c4: 65:d7:2a:71:e6:ee:a7:b2:67:b3:00:28:07:dd:fd: 9a:ca:22:b4:7e:ad:ab:e7:da:65:a9:eb:3d:df:94: 36:a9:60:60:eb:63:f3:b5:30:fb:54:8b:5a:63:b8: 48:40:dc:46:73:40:b8:bf:d6:3e:37:16:4c:4d:ac: a7:f6:02:3d:2e:e5:bc:c3:34:29:84:8c:6e:19:8e: 9f:c1:a7:66:47:9b:a8:74:08:ef:d1:c6:08:27:ca: 39:b5:82:ff:fc:73:06:46:79:c8:9c:16:13:a9:2c: 4b:28:c0:e0:ac:90:7e:c8:e9:be:c3:04:da:e9:cf: 05:bc:c3:9a:d9:59:7f:d0:37:60:db:33:0c:1f:fc: 50:c2:7d:8c:b0:95:fd:97:6b:e9:81:5d:07:a7:33: 44:8a:ac:f4:ac:49:c2:df:f2:01:72:15:81:c7:af: b5:6e:24:17:c5:48:ae:f9:8c:ef:9c:eb:63:e0:fb: 2d:18:ae:47:5f:24:be:9a:b9:09:e2:4a:d4:7d:3e: 15:72:82:9f:63:72:07:8c:08:dd:c3:86:94:c7:c2: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:CC:93:DB:D4:6E:10:EE:6E:DF:F9:3E:06:47:A8:00:6C:04:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:14:98:5c:e7:8e:f3:89:b4:e7:9d:bd:08:9c:a7:42:25:7e: 24:d4:ab:2f:2c:bc:02:f9:8e:36:76:ee:1b:8a:22:f4:46:00: 3d:4d:93:ea:82:09:b6:80:ff:77:f6:21:a5:4f:53:54:af:72: af:7e:6a:cb:a6:de:2f:24:e4:bb:30:fa:39:79:a7:25:5c:1c: e4:b6:72:d0:0f:79:fa:23:6e:da:e7:2d:e4:79:3e:46:f0:02: d1:0b:97:b2:a3:71:4f:41:51:19:55:54:29:5a:a0:80:07:1c: 0e:be:a9:d1:e6:bd:84:59:37:ef:c5:cb:8d:98:29:b5:50:88: cb:b0:1e:e9:10:64:88:10:e5:9a:70:07:f2:bb:c7:5f:71:15: d0:33:bc:38:1f:15:c4:4f:46:3c:ae:b3:77:80:2f:f0:be:2b: 69:df:e2:af:fc:3a:09:a4:c2:70:38:55:9f:e4:54:d3:4f:3b: b8:9a:7e:10:80:21:21:b9:4a:63:6b:77:c9:27:1c:e9:87:7e: c4:8b:e0:af:e7:fe:ba:b8:0c:fb:b4:49:15:5d:78:5a:74:f7: e9:29:5c:ac:37:fd:f0:f5:77:aa:73:5f:00:60:58:e9:40:33: fa:37:99:48:e0:80:b4:97:69:15:ac:b6:d5:46:83:bf:e5:1c: 74:d7:d0:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcgmuyvQXp0AFE5XWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNjE5Mzc1OFoXDTI0MTIwNTIwMzc1OFowLzEtMCsGA1UEAxMk M2Y5NDA1NWMtMGVmMy00NTViLTkyMjItY2NkYWY0YWFkZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNpTWGds235RxNv9gJL/BH2mrWMOsrPWHRIB nYm7Rsvw1BFETHGFwP2uwcRl1ypx5u6nsmezACgH3f2ayiK0fq2r59plqes935Q2 qWBg62PztTD7VItaY7hIQNxGc0C4v9Y+NxZMTayn9gI9LuW8wzQphIxuGY6fwadm R5uodAjv0cYIJ8o5tYL//HMGRnnInBYTqSxLKMDgrJB+yOm+wwTa6c8FvMOa2Vl/ 0Ddg2zMMH/xQwn2MsJX9l2vpgV0HpzNEiqz0rEnC3/IBchWBx6+1biQXxUiu+Yzv nOtj4PstGK5HXyS+mrkJ4krUfT4VcoKfY3IHjAjdw4aUx8J76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK7zJPb1G4Q7m7f+T4GR6gAbASTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzc3MWY4NTctYWI0YS0z MjcwLWExY2QtZTZjMDBhYzAyY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAUmFznjvOJtOedvQicp0IlfiTUqy8svAL5jjZ27huKIvRGAD1Nk+qC CbaA/3f2IaVPU1Svcq9+asum3i8k5Lsw+jl5pyVcHOS2ctAPefojbtrnLeR5Pkbw AtELl7KjcU9BURlVVClaoIAHHA6+qdHmvYRZN+/Fy42YKbVQiMuwHukQZIgQ5Zpw B/K7x19xFdAzvDgfFcRPRjyus3eAL/C+K2nf4q/8OgmkwnA4VZ/kVNNPO7iafhCA ISG5SmNrd8knHOmHfsSL4K/n/rq4DPu0SRVdeFp09+kpXKw3/fD1d6pzXwBgWOlA M/o3mUjggLSXaRWsttVGg7/lHHTX0FM= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:42 2024 by rpki-client on console-ams.rpki-client.org