$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8619e1a4-37e0-3dd9-84af-f8eefd9e4d0e.roa File: 8619e1a4-37e0-3dd9-84af-f8eefd9e4d0e.roa (raw, json) Hash identifier: DqdyszfGBVCmPr8sl1whNKw4muTjRX0yXSyo/nttOcU= Subject key identifier: 17:41:8C:ED:DA:AC:86:93:A3:67:FF:DE:58:87:4F:9C:FF:EB:EC:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155378335427A62D44902C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8619e1a4-37e0-3dd9-84af-f8eefd9e4d0e.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 174.130.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:37:83:35:42:7a:62:d4:49:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=af87664f-8d1a-4759-9e6a-3fb4b61a107b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:8b:cf:7e:57:35:d3:83:3f:37:4a:79:80: ce:8d:93:bd:d8:00:ff:d7:eb:c8:8e:cf:bd:cd:80: fb:57:c4:2a:35:c7:c0:20:2b:62:02:94:ea:5d:93: af:b2:2f:da:81:99:6d:b2:5c:67:20:e4:ec:bb:15: a2:44:74:b0:3c:33:9d:0c:ed:5b:04:e4:95:43:62: 62:8e:66:3f:df:5d:97:59:ac:fc:48:fd:73:5c:98: 61:7b:68:c1:89:6d:e9:40:d5:b4:b3:7f:9e:25:65: 91:f5:51:4b:4c:e9:44:39:43:a3:9e:00:b2:be:91: db:c2:09:ec:b0:f2:7e:37:c4:09:77:67:da:ba:70: 28:16:f6:b1:6e:fd:9b:e0:79:41:2d:f0:fb:b7:88: 11:54:9e:8f:70:bc:94:4d:1b:f9:1a:91:00:c3:2f: b0:d2:f1:32:54:2b:98:80:54:ad:db:51:42:e6:55: b6:a3:71:ea:4d:75:1d:31:2c:9c:2b:19:2a:83:6e: af:f2:8e:da:ed:e0:04:38:ea:9f:0d:f1:36:a4:b0: c3:97:2a:68:7b:e7:ab:d4:bd:e4:d3:ac:b6:3e:d7: 5d:23:d3:80:18:c4:89:d9:41:db:94:85:69:1f:dc: 93:5e:e3:b2:ad:c7:3c:6b:4b:35:42:e0:38:fd:a5: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:41:8C:ED:DA:AC:86:93:A3:67:FF:DE:58:87:4F:9C:FF:EB:EC:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8619e1a4-37e0-3dd9-84af-f8eefd9e4d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2e:78:53:6d:ec:64:db:bd:51:c4:b8:4d:16:8a:3e:38:85: 1f:10:2e:3b:98:db:65:1f:a5:e9:f7:03:c5:e5:28:0f:cf:eb: f7:d6:38:80:2c:65:48:64:f2:17:b8:6e:a6:00:61:c0:85:51: 6c:50:71:e9:47:2b:79:25:2e:62:5d:34:d1:a0:02:99:a3:89: f5:e0:b9:9b:cc:8f:81:37:af:0e:06:37:3a:33:3f:fe:8f:42: d7:13:30:33:4f:c2:2c:90:ce:17:2f:05:59:5d:6a:da:29:42: 0e:ac:c7:8c:96:03:58:cc:b1:be:bb:92:74:d2:22:9d:7b:c9: 74:ba:9d:92:47:15:ef:76:67:54:a0:8b:fa:3a:ee:3f:3b:14: 3a:eb:2e:73:bd:53:82:40:e0:65:48:2d:4a:04:54:26:24:d9: 89:5b:b1:6e:bc:51:a7:0f:07:f3:c8:f4:6f:15:52:ad:c1:96: d5:1d:17:f3:75:94:87:c8:c6:a3:3f:40:b4:e0:3d:5b:81:bb: 92:28:0c:af:2c:f1:67:84:d3:a8:84:c1:ed:b0:74:45:e8:62: 08:eb:b4:c7:56:8d:21:1e:0b:81:4d:0d:de:b1:79:3d:41:bb: 04:03:2b:30:b0:99:c1:81:f1:40:f7:75:65:d9:81:9f:61:96: c7:ca:96:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTeDNUJ6YtRJAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YWY4NzY2NGYtOGQxYS00NzU5LTllNmEtM2ZiNGI2MWExMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0iLz35XNdODPzdKeYDOjZO92AD/1+vIjs+9 zYD7V8QqNcfAICtiApTqXZOvsi/agZltslxnIOTsuxWiRHSwPDOdDO1bBOSVQ2Ji jmY/312XWaz8SP1zXJhhe2jBiW3pQNW0s3+eJWWR9VFLTOlEOUOjngCyvpHbwgns sPJ+N8QJd2faunAoFvaxbv2b4HlBLfD7t4gRVJ6PcLyUTRv5GpEAwy+w0vEyVCuY gFSt21FC5lW2o3HqTXUdMSycKxkqg26v8o7a7eAEOOqfDfE2pLDDlypoe+er1L3k 06y2PtddI9OAGMSJ2UHblIVpH9yTXuOyrcc8a0s1QuA4/aWsBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdBjO3arIaTo2f/3liHT5z/6+ySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODYxOWUxYTQtMzdlMC0z ZGQ5LTg0YWYtZjhlZWZkOWU0ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkueFNt7GTbvVHEuE0Wij44hR8QLjuY22Ufpen3A8XlKA/P6/fWOIAs ZUhk8he4bqYAYcCFUWxQcelHK3klLmJdNNGgApmjifXguZvMj4E3rw4GNzozP/6P QtcTMDNPwiyQzhcvBVldatopQg6sx4yWA1jMsb67knTSIp17yXS6nZJHFe92Z1Sg i/o67j87FDrrLnO9U4JA4GVILUoEVCYk2YlbsW68UacPB/PI9G8VUq3BltUdF/N1 lIfIxqM/QLTgPVuBu5IoDK8s8WeE06iEwe2wdEXoYgjrtMdWjSEeC4FNDd6xeT1B uwQDKzCwmcGB8UD3dWXZgZ9hlsfKlh0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:53 2024 by rpki-client on console-ams.rpki-client.org