$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa File: 9fe2032b-02a1-37ad-a386-655ef1884c8c.roa (raw, json) Hash identifier: 1XqDf3IVwdQspvDhYKq9wZVd1HS9r7uPQzkwSR+twj4= Subject key identifier: 7D:AD:52:62:D1:B0:5A:F2:65:D5:6A:B5:0C:39:98:4D:86:F9:22:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6C006372FF08FAB8D4FD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 173.184.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:00:63:72:ff:08:fa:b8:d4:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=85f8a458-9c69-4bc1-9f52-4fcaa33329b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:7d:37:db:34:9e:4b:23:f6:3f:2c:f9:78: 99:d8:f8:98:29:ff:b7:b6:09:3f:c4:e6:6d:cc:a9: be:ed:c8:20:f6:c6:c1:49:13:aa:23:ce:7a:cd:55: 79:6d:ac:fa:59:1a:3a:fa:d2:81:3a:53:1a:d6:56: f5:5d:ad:06:5b:da:ab:2a:94:8b:14:a2:a2:62:d1: 32:a6:4c:05:58:1a:cc:43:74:c1:5d:fd:09:6e:ef: a9:0b:7e:1f:d3:de:2e:72:4d:01:76:76:9a:64:4c: 1e:c4:24:63:67:3b:c3:15:9f:36:76:ea:b2:b2:2b: b0:45:82:d0:16:9f:7a:ae:7a:d9:7b:d7:1b:17:a6: 47:44:ed:40:46:60:25:96:50:a1:ef:02:0a:0b:b7: ba:24:1c:21:d0:c0:da:c1:21:c4:bf:d6:89:5c:b5: 9e:60:99:84:b3:6d:dd:b4:3e:d5:1a:67:e3:4a:80: de:ab:fe:b6:fd:6c:7a:09:4b:ba:1d:a2:58:fd:ee: ff:7a:a8:b2:c2:cc:be:05:10:8b:db:40:0f:f1:e7: 56:48:4b:2b:d6:61:78:16:fc:bb:54:8c:84:cb:7a: 13:65:16:1e:bb:4a:20:4a:5d:79:85:7d:89:d5:92: 73:60:35:e7:ab:e3:86:22:34:0d:c6:71:56:53:b6: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AD:52:62:D1:B0:5A:F2:65:D5:6A:B5:0C:39:98:4D:86:F9:22:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fe2032b-02a1-37ad-a386-655ef1884c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2e:88:10:2e:4f:0c:84:d4:c9:77:66:04:ac:cd:80:d9:b9: 9f:2e:80:54:a0:0f:73:c3:48:a3:9c:79:85:69:44:6e:ed:e0: 04:89:fa:69:2d:b8:d8:e1:dc:06:3f:d2:3a:16:1a:72:bc:02: a0:21:59:d3:ea:10:a6:f5:8b:17:9a:0f:27:9b:db:e2:31:cb: 4e:2b:28:3b:a7:c2:32:c8:6d:23:91:a5:2f:ef:5d:d8:3d:ba: a2:55:c2:fc:d1:68:a6:f6:a6:97:48:59:0b:df:ba:e8:24:3a: 42:9e:8f:94:f9:48:f7:bc:f1:b4:e2:28:d4:54:59:0c:6d:48: f4:86:f6:a1:3b:94:6e:ed:e3:d4:da:b5:f3:f8:4d:dc:a2:d5: fd:30:0b:1f:21:1c:43:9a:9c:e3:ea:b6:4f:e0:47:fb:7c:54: 1f:94:63:14:a5:13:1c:35:b9:c3:da:16:af:6b:2c:47:2a:c2: b9:ff:b7:5c:67:36:2c:44:1a:e0:43:74:ad:d9:89:8c:30:02: 0a:91:57:93:b4:3b:1f:7f:a2:c0:95:f0:e4:a5:c0:6c:e3:61: e4:21:3d:41:35:dd:63:94:49:40:7f:92:6a:ee:09:55:d9:3e: bd:d1:8f:e5:6d:73:80:2f:dc:5f:f8:2b:06:32:db:ad:93:2b: 97:72:aa:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbABjcv8I+rjU/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk ODVmOGE0NTgtOWM2OS00YmMxLTlmNTItNGZjYWEzMzMyOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2l9N9s0nksj9j8s+XiZ2PiYKf+3tgk/xOZt zKm+7cgg9sbBSROqI856zVV5baz6WRo6+tKBOlMa1lb1Xa0GW9qrKpSLFKKiYtEy pkwFWBrMQ3TBXf0Jbu+pC34f094uck0BdnaaZEwexCRjZzvDFZ82duqysiuwRYLQ Fp96rnrZe9cbF6ZHRO1ARmAlllCh7wIKC7e6JBwh0MDawSHEv9aJXLWeYJmEs23d tD7VGmfjSoDeq/62/Wx6CUu6HaJY/e7/eqiywsy+BRCL20AP8edWSEsr1mF4Fvy7 VIyEy3oTZRYeu0ogSl15hX2J1ZJzYDXnq+OGIjQNxnFWU7aVnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2tUmLRsFryZdVqtQw5mE2G+SIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZlMjAzMmItMDJhMS0z N2FkLWEzODYtNjU1ZWYxODg0YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQuiBAuTwyE1Ml3ZgSszYDZuZ8ugFSgD3PDSKOceYVpRG7t4ASJ+mkt uNjh3AY/0joWGnK8AqAhWdPqEKb1ixeaDyeb2+Ixy04rKDunwjLIbSORpS/vXdg9 uqJVwvzRaKb2ppdIWQvfuugkOkKej5T5SPe88bTiKNRUWQxtSPSG9qE7lG7t49Ta tfP4Tdyi1f0wCx8hHEOanOPqtk/gR/t8VB+UYxSlExw1ucPaFq9rLEcqwrn/t1xn NixEGuBDdK3ZiYwwAgqRV5O0Ox9/osCV8OSlwGzjYeQhPUE13WOUSUB/kmruCVXZ Pr3Rj+Vtc4Av3F/4KwYy262TK5dyqiA= -----END CERTIFICATE-----Generated at Mon Nov 25 03:12:47 2024 by rpki-client on console-ams.rpki-client.org