$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa File: ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa (raw, json) Hash identifier: TIvQAmc0HDEPitKXkJfUD4Bmux8KBDuxSHwykAoXDpA= Subject key identifier: 39:6D:4D:13:0E:A0:9F:90:B9:78:1B:51:E4:06:B0:84:09:8A:E5:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847311A492E7B9A1E4C88AFC000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa Signing time: Thu 12 Sep 2024 17:27:31 +0000 ROA not before: Thu 12 Sep 2024 17:27:31 +0000 ROA not after: Wed 11 Dec 2024 18:27:31 +0000 asID: 7029 IP address blocks: 173.191.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:1a:49:2e:7b:9a:1e:4c:88:af:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:27:31 2024 GMT Not After : Dec 11 18:27:31 2024 GMT Subject: CN=ce35b127-fa68-4404-a145-bcddb42406aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:08:9e:a5:90:d3:59:d3:a0:9f:89:5f:8b:f7: 5e:03:0c:4d:42:7c:05:92:2b:be:0d:92:5c:c2:ee: e1:0d:71:57:0c:c5:08:2b:af:e7:0b:77:73:b2:e5: 86:86:38:6c:8f:7f:c0:4f:25:31:55:0b:63:63:63: c2:7d:03:bc:fa:6e:3b:9d:a3:f7:eb:b4:77:72:d4: f5:21:3c:e7:21:cd:02:77:57:b1:4f:6d:22:a3:62: 06:1f:cb:b0:8a:25:65:60:da:72:8f:24:83:bb:27: 8c:7d:82:89:ae:63:ed:4d:26:0b:3a:60:34:76:f7: 19:d6:01:80:bb:9d:13:e9:66:42:a7:b8:a3:64:55: 29:c0:f5:8a:5e:8d:71:32:3f:3b:df:fb:57:7b:e8: a1:da:4f:af:31:1a:82:26:5a:9b:d1:07:26:bd:6f: fc:6f:19:73:37:a2:eb:91:cc:34:dd:e2:a6:48:47: 75:e0:04:15:d9:6c:c5:4e:3c:10:f4:3f:2c:dd:f9: ec:87:f0:af:44:ea:c1:eb:c4:22:1c:88:f9:6c:66: 37:d6:a4:b4:e5:d3:6f:5a:de:de:bd:a2:ea:23:3d: 7e:c7:83:36:f5:0f:29:3f:f2:cd:f4:b2:b3:67:0b: a4:57:d8:f9:f8:d7:57:a4:84:ba:90:e1:73:79:29: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:4D:13:0E:A0:9F:90:B9:78:1B:51:E4:06:B0:84:09:8A:E5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac1816ef-f693-3a2c-bce4-791ca42d5e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8c:ae:d8:7e:4a:a9:b2:69:d7:86:43:3b:9f:d0:d5:29:14: 43:b1:cf:5e:8f:c9:5a:cc:9a:27:1b:6a:0d:ff:4c:9c:ed:2f: a1:d4:c2:01:e0:7d:1e:7c:e3:6b:a1:57:8f:08:72:a9:e5:43: 5e:72:ef:9f:5d:8b:c4:cb:b1:4f:dd:2b:b2:14:c3:e2:bc:42: 43:13:71:01:ae:20:49:1f:62:88:b9:70:e6:20:9e:f0:37:85: 6d:90:b6:74:82:93:76:72:4f:d1:e6:42:56:ef:5a:df:70:f8: 33:0e:bb:2a:67:0f:c6:ab:b8:a7:fa:b3:cd:0d:f9:16:91:7a: c6:46:9d:e9:5f:db:83:ab:e4:30:ef:c4:ac:63:cd:38:31:e4: 5e:ac:60:00:85:cb:75:ac:fc:4f:37:31:a2:e9:db:d6:27:d2: f3:46:6e:c5:3c:cc:46:9b:79:92:de:c0:33:ea:2e:77:bf:19: 51:7a:9d:ba:e9:9d:a7:e3:a3:c7:e2:d2:9f:f8:0a:33:57:b1: b5:d1:b7:2f:b3:f4:53:5a:48:94:49:b3:93:a4:ca:bf:b3:cc: 5c:00:f7:df:c6:e7:f8:91:1f:c6:b5:aa:8b:a9:5e:d1:df:8a: c6:d1:be:f1:18:e9:ff:c6:3b:53:84:0a:ac:0d:ed:d2:68:eb: 8d:cb:6b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxGkkue5oeTIivwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjczMVoXDTI0MTIxMTE4MjczMVowLzEtMCsGA1UEAxMk Y2UzNWIxMjctZmE2OC00NDA0LWExNDUtYmNkZGI0MjQwNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggiepZDTWdOgn4lfi/deAwxNQnwFkiu+DZJc wu7hDXFXDMUIK6/nC3dzsuWGhjhsj3/ATyUxVQtjY2PCfQO8+m47naP367R3ctT1 ITznIc0Cd1exT20io2IGH8uwiiVlYNpyjySDuyeMfYKJrmPtTSYLOmA0dvcZ1gGA u50T6WZCp7ijZFUpwPWKXo1xMj873/tXe+ih2k+vMRqCJlqb0QcmvW/8bxlzN6Lr kcw03eKmSEd14AQV2WzFTjwQ9D8s3fnsh/CvROrB68QiHIj5bGY31qS05dNvWt7e vaLqIz1+x4M29Q8pP/LN9LKzZwukV9j5+NdXpIS6kOFzeSnxGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDltTRMOoJ+QuXgbUeQGsIQJiuUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWMxODE2ZWYtZjY5My0z YTJjLWJjZTQtNzkxY2E0MmQ1ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeMrth+SqmyadeGQzuf0NUpFEOxz16PyVrMmicbag3/TJztL6HUwgHg fR5842uhV48IcqnlQ15y759di8TLsU/dK7IUw+K8QkMTcQGuIEkfYoi5cOYgnvA3 hW2QtnSCk3ZyT9HmQlbvWt9w+DMOuypnD8aruKf6s80N+RaResZGnelf24Or5DDv xKxjzTgx5F6sYACFy3Ws/E83MaLp29Yn0vNGbsU8zEabeZLewDPqLne/GVF6nbrp nafjo8fi0p/4CjNXsbXRty+z9FNaSJRJs5Okyr+zzFwA99/G5/iRH8a1qoupXtHf isbRvvEY6f/GO1OECqwN7dJo643LaxY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:17 2024 by rpki-client on console-fra.rpki-client.org