$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa File: a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa (raw, json) Hash identifier: VlLn6PJIoFPlCj3lMi2qEsE/LbukP/tQuXpJEusMsUk= Subject key identifier: 15:2A:1D:0D:0A:73:ED:79:2D:2A:AF:C4:63:3F:2D:1D:14:41:68:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15505CDF4DB42F87A623B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 174.130.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:05:cd:f4:db:42:f8:7a:62:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=f7f5c42c-6804-463b-a18a-b947c723aab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:c7:7a:a3:2d:ad:03:ff:4c:9c:b2:13:8c: c4:fb:88:6b:83:e8:01:11:6b:f4:e3:26:82:82:c6: 5b:eb:87:fb:4f:9e:01:67:28:fd:e4:1b:59:61:7d: 67:90:3a:e6:80:0a:45:5d:21:05:31:28:52:98:25: af:78:6b:53:63:24:67:6e:20:d3:b2:83:1e:e8:ea: 01:85:e3:02:0c:e2:79:dd:de:34:76:b5:dc:47:d6: a8:07:9e:9e:f2:f3:12:ad:df:6a:81:69:c0:60:68: 8f:11:11:86:52:c1:b2:38:b3:77:91:21:8f:bd:70: a3:8a:97:12:a5:01:99:87:59:23:7f:bb:ab:65:a9: f4:90:33:4b:03:f0:42:1c:48:55:a5:bc:b3:6f:72: 15:b8:9c:4a:88:48:4d:0e:48:a2:8c:ce:be:ef:2f: 8a:5d:d7:b7:cf:03:df:b1:69:54:af:e4:0b:49:bd: 24:f4:93:c7:a4:a7:95:1a:08:f6:52:f4:58:dc:f3: 12:c5:82:3c:08:e6:72:3e:09:50:4e:19:64:5c:7e: 4b:c3:dd:e6:14:f7:07:b6:9f:4a:80:5e:5b:95:39: 7e:41:56:49:c3:2b:f4:5f:94:cc:08:20:9d:e2:96: 6c:cf:7c:ef:bc:b2:3a:96:04:f2:d2:f9:c4:a1:37: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2A:1D:0D:0A:73:ED:79:2D:2A:AF:C4:63:3F:2D:1D:14:41:68:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3da803b-f3a5-3a3d-ba9f-c1a4c45d3e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b3:15:5e:1a:45:03:fc:6e:54:b6:21:94:6b:2d:42:fb:b1: 6a:b1:5f:c0:c3:6b:bd:ac:3f:7c:3d:4a:8f:b2:26:0c:01:f9: 34:33:cd:e4:ea:40:ec:f0:b4:b1:4a:ad:22:26:12:3e:82:1d: fb:4d:ed:76:c8:49:cd:70:06:5d:ea:b9:67:a1:88:b2:47:45: fe:75:32:f1:b7:ac:a2:0b:90:47:07:7d:e7:32:1f:66:6d:04: c3:2f:e9:6c:d8:ee:be:49:59:35:7d:26:b4:f2:05:fc:e8:6d: c7:a8:04:65:14:07:9c:fb:d6:d3:5d:53:25:a0:27:1e:4b:fb: 44:05:30:9c:8f:6e:e9:39:d2:9b:02:55:68:ab:40:88:0b:14: 73:30:31:79:f9:49:47:2a:45:32:b2:ba:2b:0c:b5:b6:0f:6e: 10:83:da:4b:2f:a1:9c:b8:e5:99:25:1b:af:dd:e0:c1:be:04: 19:b7:cd:92:e6:55:33:d0:21:63:4d:b2:25:48:a7:61:80:b0: 6a:da:e5:1c:ee:af:fe:24:f4:53:55:47:43:f6:a0:d6:f8:db: fe:8b:8e:35:6b:02:7d:a1:b0:6c:f9:17:52:38:a0:b6:5c:60: 4e:96:7e:99:fb:66:8c:93:c3:67:9e:7f:e5:b8:4f:90:c4:bb: df:66:18:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQXN9NtC+HpiO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZjdmNWM0MmMtNjgwNC00NjNiLWExOGEtYjk0N2M3MjNhYWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIrHeqMtrQP/TJyyE4zE+4hrg+gBEWv04yaC gsZb64f7T54BZyj95BtZYX1nkDrmgApFXSEFMShSmCWveGtTYyRnbiDTsoMe6OoB heMCDOJ53d40drXcR9aoB56e8vMSrd9qgWnAYGiPERGGUsGyOLN3kSGPvXCjipcS pQGZh1kjf7urZan0kDNLA/BCHEhVpbyzb3IVuJxKiEhNDkiijM6+7y+KXde3zwPf sWlUr+QLSb0k9JPHpKeVGgj2UvRY3PMSxYI8COZyPglQThlkXH5Lw93mFPcHtp9K gF5blTl+QVZJwyv0X5TMCCCd4pZsz3zvvLI6lgTy0vnEoTfX3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUqHQ0Kc+15LSqvxGM/LR0UQWi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNkYTgwM2ItZjNhNS0z YTNkLWJhOWYtYzFhNGM0NWQzZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAazFV4aRQP8blS2IZRrLUL7sWqxX8DDa72sP3w9So+yJgwB+TQzzeTq QOzwtLFKrSImEj6CHftN7XbISc1wBl3quWehiLJHRf51MvG3rKILkEcHfecyH2Zt BMMv6WzY7r5JWTV9JrTyBfzobceoBGUUB5z71tNdUyWgJx5L+0QFMJyPbuk50psC VWirQIgLFHMwMXn5SUcqRTKyuisMtbYPbhCD2ksvoZy45ZklG6/d4MG+BBm3zZLm VTPQIWNNsiVIp2GAsGra5Rzur/4k9FNVR0P2oNb42/6LjjVrAn2hsGz5F1I4oLZc YE6Wfpn7ZoyTw2eef+W4T5DEu99mGIM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:02 2024 by rpki-client on console-ams.rpki-client.org