$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2693e2a-8a7e-3f2f-a3fd-a69fbffed95a.roa File: a2693e2a-8a7e-3f2f-a3fd-a69fbffed95a.roa (raw, json) Hash identifier: Fpsk/G7Q3HPG+qtIaYsOHdVfHqBmEBWDDJGf9Iw/Ptk= Subject key identifier: BE:0B:09:94:FF:05:38:C4:4B:3A:C6:50:C6:2C:C2:8D:C6:6C:82:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15504D8E5DF540CA9FEC080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2693e2a-8a7e-3f2f-a3fd-a69fbffed95a.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.189.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:04:d8:e5:df:54:0c:a9:fe:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=5957a7b5-faec-43a5-9107-25f1aaa47b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:c4:8e:1b:99:d7:8f:40:61:23:d4:fe:3f: 72:e4:d7:2a:44:42:91:be:48:36:b1:f4:08:d0:a7: 32:64:21:1c:bb:f6:6f:bc:37:77:52:17:9a:db:67: b9:76:98:35:d6:33:ce:a6:09:f4:4e:0a:6e:ba:5c: 95:bd:e2:8a:bb:21:cf:0d:23:b0:8a:74:82:c0:f6: 0e:84:fa:62:e0:19:b5:6e:db:14:dc:9b:4e:77:0c: 60:94:59:ce:2e:4b:de:4b:c8:6d:e8:53:c9:b6:c0: 3d:ac:27:9a:7b:25:a7:b7:5a:38:1b:2e:25:da:a0: 7f:43:89:58:4d:2d:62:38:79:3e:3f:96:8d:eb:48: 56:9f:7b:ae:73:02:0b:ab:16:3f:1d:0b:7c:7a:2c: 36:df:8c:76:23:7b:49:5b:03:9a:5e:3d:62:08:55: 2a:2f:f1:74:c1:12:0f:48:d2:1e:ed:11:9b:11:83: 55:89:34:25:90:45:c5:19:18:b1:49:8c:93:f9:d3: 7e:bb:c4:40:9c:87:97:c4:a9:57:8d:93:06:f8:86: ad:d6:a4:e0:b9:29:ae:65:a7:57:b8:79:ee:dc:5a: 8c:bd:ce:b1:30:94:02:29:90:cb:b8:68:83:99:59: cc:86:31:e0:10:66:11:48:72:ae:9f:61:30:6d:f5: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0B:09:94:FF:05:38:C4:4B:3A:C6:50:C6:2C:C2:8D:C6:6C:82:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2693e2a-8a7e-3f2f-a3fd-a69fbffed95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:57:4f:38:a7:f7:ac:a4:61:ff:08:09:12:f0:52:74:4c:23: 93:53:02:30:38:ca:91:6c:fc:d0:7b:eb:f3:d0:1f:46:ee:77: 56:e3:09:01:7b:0f:b6:4a:67:68:b1:7e:d9:c3:72:ef:67:84: 2e:be:40:48:6c:ea:e0:6a:d5:b5:53:0b:8a:ae:36:d9:73:27: 41:81:c8:fd:e6:a0:67:59:16:43:3e:49:b4:77:4d:6e:3f:47: ca:a5:ff:4a:98:b8:db:e5:84:7e:8f:9a:01:80:01:c2:5a:9b: e0:47:e9:77:b4:9e:8f:f0:32:ba:22:e3:ff:2a:c5:64:5d:8c: 0a:c3:0f:5a:c4:aa:35:11:d1:e2:40:55:e4:22:03:79:25:c4: cb:4d:d5:a7:4a:d0:c1:92:a1:4e:4b:13:a6:7a:b2:d7:f2:6b: 55:9a:f6:2e:3a:02:bb:7f:f3:9c:5c:a2:b8:10:75:1f:2f:a4: 54:e2:0f:6b:e9:96:8a:c7:2e:25:11:77:23:de:6e:60:89:48: 93:f1:da:e9:20:59:32:4c:34:24:45:71:ce:79:2a:27:ae:89: e2:de:24:c8:67:92:d9:ec:b0:fa:5f:9d:85:ba:4f:d5:cc:94: 8a:74:04:7e:8d:d6:cf:18:7a:a7:d5:46:a0:46:81:13:79:a2: d7:10:3f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQTY5d9UDKn+wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NTk1N2E3YjUtZmFlYy00M2E1LTkxMDctMjVmMWFhYTQ3YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKDEjhuZ149AYSPU/j9y5NcqREKRvkg2sfQI 0KcyZCEcu/ZvvDd3Uhea22e5dpg11jPOpgn0TgpuulyVveKKuyHPDSOwinSCwPYO hPpi4Bm1btsU3JtOdwxglFnOLkveS8ht6FPJtsA9rCeaeyWnt1o4Gy4l2qB/Q4lY TS1iOHk+P5aN60hWn3uucwILqxY/HQt8eiw234x2I3tJWwOaXj1iCFUqL/F0wRIP SNIe7RGbEYNViTQlkEXFGRixSYyT+dN+u8RAnIeXxKlXjZMG+Iat1qTguSmuZadX uHnu3FqMvc6xMJQCKZDLuGiDmVnMhjHgEGYRSHKun2EwbfVEewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4LCZT/BTjESzrGUMYswo3GbILHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI2OTNlMmEtOGE3ZS0z ZjJmLWEzZmQtYTY5ZmJmZmVkOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFXTzin96ykYf8ICRLwUnRMI5NTAjA4ypFs/NB76/PQH0bud1bjCQF7 D7ZKZ2ixftnDcu9nhC6+QEhs6uBq1bVTC4quNtlzJ0GByP3moGdZFkM+SbR3TW4/ R8ql/0qYuNvlhH6PmgGAAcJam+BH6Xe0no/wMroi4/8qxWRdjArDD1rEqjUR0eJA VeQiA3klxMtN1adK0MGSoU5LE6Z6stfya1Wa9i46Art/85xcorgQdR8vpFTiD2vp lorHLiURdyPebmCJSJPx2ukgWTJMNCRFcc55KieuieLeJMhnktnssPpfnYW6T9XM lIp0BH6N1s8YeqfVRqBGgRN5otcQP80= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:50 2024 by rpki-client on console-ams.rpki-client.org