$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa File: a2da74c7-e42a-3467-9e54-de2f59929c42.roa (raw, json) Hash identifier: pvMsdpY8mIrmlOD0pDWGF/F1hOsIywDRji7YYhIfotM= Subject key identifier: 44:A0:82:02:20:57:86:E6:AE:02:11:A6:4F:85:A0:F4:B9:63:40:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584788865547E313998270792F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa Signing time: Mon 14 Oct 2024 01:00:31 +0000 ROA not before: Mon 14 Oct 2024 01:00:31 +0000 ROA not after: Sun 12 Jan 2025 02:00:31 +0000 asID: 7029 IP address blocks: 173.187.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:88:86:55:47:e3:13:99:82:70:79:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 14 01:00:31 2024 GMT Not After : Jan 12 02:00:31 2025 GMT Subject: CN=8b40bb05-96ea-4c5e-a625-8f1d37a89953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:be:28:65:3d:aa:3b:f4:3d:6f:c9:04:4f:6e: ad:00:be:60:38:9e:59:8c:bd:e5:32:f0:49:f7:74: 9b:fa:55:86:42:97:05:04:bb:3a:62:ba:f1:81:9b: 70:55:95:e5:83:88:20:d8:ca:87:c3:5f:05:14:06: 3a:3d:65:b5:a2:f2:93:dc:84:79:44:67:7c:c3:19: 3d:2e:41:30:e3:a7:6d:11:ba:ed:50:e6:be:1d:3b: 32:84:5b:29:e7:74:99:4c:5f:70:7b:37:f8:6e:3f: ee:52:cc:49:53:a4:b3:aa:a3:72:3e:b1:39:23:c8: 3e:00:98:c1:ba:53:0b:87:17:38:85:3b:bc:cf:6e: 1c:af:2c:8a:9e:47:0e:77:5f:cc:3a:a9:e7:7d:b4: 1d:63:02:50:9a:18:73:fc:ae:14:52:e5:d0:5c:c2: 05:62:8f:e0:8f:9e:c9:99:c1:3e:d8:29:05:3f:66: 1b:fb:77:32:4f:93:ed:89:e6:7c:b5:a6:59:75:c0: cf:e2:a7:cc:f2:dd:10:c9:36:da:3b:d1:aa:e8:b9: 15:ab:6b:97:b8:e6:7a:c9:90:40:2c:c1:8a:9f:da: ca:99:88:5c:c6:c4:46:f3:9f:8f:f7:b5:e0:93:92: 37:06:3d:6e:f6:ac:86:f7:11:cd:c9:de:d6:d3:ac: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A0:82:02:20:57:86:E6:AE:02:11:A6:4F:85:A0:F4:B9:63:40:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3b:6f:d8:82:23:e7:ab:7a:09:6c:fa:04:75:29:67:30:83: 13:91:3a:30:4c:c5:e8:83:94:a5:66:57:f6:af:c2:a0:dd:b7: e6:fe:89:2d:13:27:9e:96:62:b8:58:f0:16:c6:de:77:01:39: e9:70:f4:80:74:66:53:00:69:e4:cb:93:56:f0:15:91:dd:20: 42:bb:fc:c6:57:31:38:20:e6:ce:9b:1f:f5:8c:31:61:87:8e: 40:89:1b:bf:d5:1a:b2:fe:62:c5:e0:ec:86:57:13:57:63:3e: 60:86:1f:cf:ac:52:a5:30:27:19:ec:e8:d4:be:ea:c1:43:48: d4:c6:29:32:31:95:4b:cb:71:39:90:40:9a:94:81:00:89:03: dc:67:5b:41:6f:83:fa:30:99:37:b5:11:84:c7:b6:a9:7d:8e: 36:8f:9a:06:d0:2b:46:c2:4e:67:10:ae:77:53:31:51:c1:9a: a2:5c:63:34:bd:40:5d:a6:81:f4:67:06:41:19:01:09:95:50: b8:61:4e:22:cb:28:f4:9a:5f:5c:7a:6b:dd:8e:bd:8d:0d:ef: 54:ee:c7:1f:de:c3:dd:d5:a0:0c:67:fc:3e:fb:45:57:8c:2d: fc:85:d8:2d:82:c0:1e:b4:ac:9d:16:31:23:f9:db:44:2c:e6: 27:a7:f1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeIhlVH4xOZgnB5LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAxNDAxMDAzMVoXDTI1MDExMjAyMDAzMVowLzEtMCsGA1UEAxMk OGI0MGJiMDUtOTZlYS00YzVlLWE2MjUtOGYxZDM3YTg5OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr4oZT2qO/Q9b8kET26tAL5gOJ5ZjL3lMvBJ 93Sb+lWGQpcFBLs6YrrxgZtwVZXlg4gg2MqHw18FFAY6PWW1ovKT3IR5RGd8wxk9 LkEw46dtEbrtUOa+HTsyhFsp53SZTF9wezf4bj/uUsxJU6SzqqNyPrE5I8g+AJjB ulMLhxc4hTu8z24cryyKnkcOd1/MOqnnfbQdYwJQmhhz/K4UUuXQXMIFYo/gj57J mcE+2CkFP2Yb+3cyT5PtieZ8taZZdcDP4qfM8t0QyTbaO9Gq6LkVq2uXuOZ6yZBA LMGKn9rKmYhcxsRG85+P97Xgk5I3Bj1u9qyG9xHNyd7W06zTqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESgggIgV4bmrgIRpk+FoPS5Y0B6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJkYTc0YzctZTQyYS0z NDY3LTllNTQtZGUyZjU5OTI5YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA7b9iCI+eregls+gR1KWcwgxOROjBMxeiDlKVmV/avwqDdt+b+iS0T J56WYrhY8BbG3ncBOelw9IB0ZlMAaeTLk1bwFZHdIEK7/MZXMTgg5s6bH/WMMWGH jkCJG7/VGrL+YsXg7IZXE1djPmCGH8+sUqUwJxns6NS+6sFDSNTGKTIxlUvLcTmQ QJqUgQCJA9xnW0Fvg/owmTe1EYTHtql9jjaPmgbQK0bCTmcQrndTMVHBmqJcYzS9 QF2mgfRnBkEZAQmVULhhTiLLKPSaX1x6a92OvY0N71Tuxx/ew93VoAxn/D77RVeM LfyF2C2CwB60rJ0WMSP520Qs5ien8Rs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:15 2024 by rpki-client on console-fra.rpki-client.org