$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f8a07d-340e-3bbe-9587-f51fe550946a.roa File: a6f8a07d-340e-3bbe-9587-f51fe550946a.roa (raw, json) Hash identifier: Z1L6pxH423X7a7U+zktM0uON+vLr5Etjnsbhq8VnFBA= Subject key identifier: 90:74:8C:79:91:88:0D:4E:6D:8D:AF:E6:F8:0E:12:AA:B9:E9:30:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847313D3D6E259D43F040700280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f8a07d-340e-3bbe-9587-f51fe550946a.roa Signing time: Thu 12 Sep 2024 18:37:57 +0000 ROA not before: Thu 12 Sep 2024 18:37:57 +0000 ROA not after: Wed 11 Dec 2024 19:37:57 +0000 asID: 7029 IP address blocks: 173.189.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:3d:3d:6e:25:9d:43:f0:40:70:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 18:37:57 2024 GMT Not After : Dec 11 19:37:57 2024 GMT Subject: CN=7aea70f2-14f7-4d07-8bfb-3359832110f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:76:d1:8a:82:00:cc:d2:ad:76:97:5d:40: 52:6e:e0:5f:1d:4f:a8:01:44:51:de:7b:2c:7c:2e: 9a:40:df:26:6e:3f:4f:0f:e1:7f:37:56:1d:b0:09: 38:69:b8:09:9d:99:35:b3:8d:90:4c:4c:bf:90:f9: 73:e1:46:e4:ea:3f:8a:b5:a6:a5:fe:f0:d4:c8:ea: 0c:39:fc:c1:38:c5:26:30:c5:11:04:42:3e:73:17: c5:40:93:3b:a6:17:d8:e6:bc:dd:91:36:d6:23:e1: 94:b3:d8:f1:e8:b3:13:b2:f2:ae:83:4c:0f:b1:49: d7:d8:ca:97:99:37:34:bc:90:14:40:da:68:48:c6: ce:8b:a1:9d:e6:3e:1b:cb:e0:9b:68:aa:27:3c:d3: b3:e4:45:0e:cb:55:c1:02:7e:6f:47:7e:2e:a6:c6: 9a:f9:15:d5:2e:ef:d5:1d:91:d2:f6:4f:71:43:70: 0a:f8:04:22:40:5e:d9:20:05:51:ff:de:f5:69:8c: cf:b7:4a:3b:3d:5c:aa:39:d5:c3:4f:ec:8c:91:44: 3d:21:97:dc:5e:e2:20:e5:80:4e:d3:4e:40:7f:d8: c7:e8:5a:eb:58:3a:fc:c8:b8:0f:2e:55:ee:59:13: 01:d8:26:44:ea:ca:19:dc:26:4a:dd:63:28:fb:3b: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:74:8C:79:91:88:0D:4E:6D:8D:AF:E6:F8:0E:12:AA:B9:E9:30:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6f8a07d-340e-3bbe-9587-f51fe550946a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:72:b8:2b:7f:81:34:fa:fd:f4:e2:4f:9c:e6:93:7d:54:c6: dc:00:86:61:95:42:2c:34:d9:b6:4b:a9:87:67:ba:c3:73:53: ab:1a:28:5f:5e:3b:65:c5:96:9a:10:5b:88:a4:62:ea:2f:ce: ce:5c:43:13:26:00:31:80:35:e8:72:8c:c5:a8:f1:7d:e8:f2: 13:8f:c1:c6:5b:7c:d8:cd:34:4e:ab:30:45:47:47:da:52:00: 9f:3c:4c:ba:ca:d2:c6:35:68:41:a2:2c:25:51:74:e6:f8:6f: 0e:87:a5:a0:f5:59:4b:05:f6:70:4e:16:47:0d:19:a4:3a:02: 4b:37:dd:27:63:a4:fb:b2:82:5e:75:4e:b9:88:05:0c:08:21: c2:33:da:f4:47:9e:8c:7a:7a:78:58:c1:77:9f:e0:b2:d7:82: 18:8e:ac:8e:0c:e5:8c:8e:15:8a:17:73:b4:65:3a:fc:71:e7: b9:99:8c:00:5a:52:3d:5c:0e:83:f4:56:ab:46:41:1e:1d:c2: 18:65:68:24:86:bc:25:7a:f8:2c:1a:47:96:b1:38:16:00:b0: 0a:a1:00:4a:97:69:f3:8d:01:e4:a9:3f:5f:fe:e1:a1:35:1d: a7:16:86:8d:fa:f7:4a:78:7b:16:ba:06:4d:09:25:93:c5:bb: 34:ed:b3:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxPT1uJZ1D8EBwAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE4Mzc1N1oXDTI0MTIxMTE5Mzc1N1owLzEtMCsGA1UEAxMk N2FlYTcwZjItMTRmNy00ZDA3LThiZmItMzM1OTgzMjExMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPh20YqCAMzSrXaXXUBSbuBfHU+oAURR3nss fC6aQN8mbj9PD+F/N1YdsAk4abgJnZk1s42QTEy/kPlz4Ubk6j+Ktaal/vDUyOoM OfzBOMUmMMURBEI+cxfFQJM7phfY5rzdkTbWI+GUs9jx6LMTsvKug0wPsUnX2MqX mTc0vJAUQNpoSMbOi6Gd5j4by+CbaKonPNOz5EUOy1XBAn5vR34upsaa+RXVLu/V HZHS9k9xQ3AK+AQiQF7ZIAVR/971aYzPt0o7PVyqOdXDT+yMkUQ9IZfcXuIg5YBO 005Af9jH6FrrWDr8yLgPLlXuWRMB2CZE6soZ3CZK3WMo+ztT0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB0jHmRiA1ObY2v5vgOEqq56TB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTZmOGEwN2QtMzQwZS0z YmJlLTk1ODctZjUxZmU1NTA5NDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1yuCt/gTT6/fTiT5zmk31UxtwAhmGVQiw02bZLqYdnusNzU6saKF9e O2XFlpoQW4ikYuovzs5cQxMmADGANehyjMWo8X3o8hOPwcZbfNjNNE6rMEVHR9pS AJ88TLrK0sY1aEGiLCVRdOb4bw6HpaD1WUsF9nBOFkcNGaQ6Aks33SdjpPuygl51 TrmIBQwIIcIz2vRHnox6enhYwXef4LLXghiOrI4M5YyOFYoXc7RlOvxx57mZjABa Uj1cDoP0VqtGQR4dwhhlaCSGvCV6+CwaR5axOBYAsAqhAEqXafONAeSpP1/+4aE1 HacWho3690p4exa6Bk0JJZPFuzTts8k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:03 2024 by rpki-client on console-ams.rpki-client.org