$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab7286-a5eb-325a-b2bf-19029d98c328.roa File: baab7286-a5eb-325a-b2bf-19029d98c328.roa (raw, json) Hash identifier: 2Rf13mXD1Xyd2+V1w7NkbHW69sIT2BgmwTUzIQHPsvU= Subject key identifier: 3C:E2:61:F9:43:A2:D0:2F:FD:54:75:EA:A0:C0:3F:A7:DB:7E:75:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847209AE9CA3F334C45B4E33C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab7286-a5eb-325a-b2bf-19029d98c328.roa Signing time: Fri 06 Sep 2024 19:37:57 +0000 ROA not before: Fri 06 Sep 2024 19:37:57 +0000 ROA not after: Thu 05 Dec 2024 20:37:57 +0000 asID: 7029 IP address blocks: 173.187.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:20:9a:e9:ca:3f:33:4c:45:b4:e3:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 19:37:57 2024 GMT Not After : Dec 5 20:37:57 2024 GMT Subject: CN=fb1855ce-1a2f-44e8-98a7-29ffb5b7ea4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:d4:6d:e7:46:24:8b:17:2b:82:e2:ac:ec: 1c:a9:e6:89:8a:18:4b:e3:c3:42:09:5e:90:a8:dd: 6b:61:65:42:66:87:bb:83:aa:b5:b1:05:cf:98:c6: 9d:ae:71:af:2d:ad:bc:a8:de:87:f9:c7:35:31:50: fd:85:47:e8:f9:0e:f9:68:a9:05:01:18:3f:cf:30: ec:9a:11:9d:36:32:16:74:f3:ce:51:84:14:0d:e4: d1:69:3d:f3:c0:f9:ee:b4:95:7e:69:3b:aa:2f:4f: fc:34:18:be:3b:bc:0f:21:e0:40:7d:8c:47:c0:4b: 31:1d:f6:3c:dd:a1:64:4f:39:66:c0:c7:af:96:3c: 70:c3:1a:e3:2b:00:a3:32:39:e7:7f:5e:1c:9f:7b: d2:d2:d2:d2:91:12:52:55:cc:36:0d:26:63:13:c5: a9:68:e1:d7:8c:00:6a:c0:47:30:dc:af:20:3d:10: dc:be:27:9c:73:8d:2c:0e:4e:a2:0a:a7:01:9c:10: 57:cc:8a:dc:33:86:6e:36:4c:f7:f6:3e:43:23:2b: 47:e5:34:27:da:16:6b:a1:64:51:59:c0:af:4f:26: bc:0c:e0:4e:6e:30:56:c9:50:0d:e0:c9:8f:53:16: f7:0e:7a:f0:53:1b:f8:47:e1:2e:6a:e2:dc:2d:46: 4d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E2:61:F9:43:A2:D0:2F:FD:54:75:EA:A0:C0:3F:A7:DB:7E:75:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baab7286-a5eb-325a-b2bf-19029d98c328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:97:8f:e6:69:3c:18:08:6e:bb:ec:d2:ad:6c:66:26:15:79: 01:59:84:70:a6:c3:f1:39:32:1a:32:7f:56:bb:7f:fa:bf:ec: 41:31:68:2b:05:9e:d4:d3:ff:a5:ba:84:6e:ff:20:38:95:8d: 80:e8:76:56:0d:c6:f5:80:e2:a2:70:17:57:18:d2:b9:e5:45: 28:5e:94:1d:94:9f:b2:4d:0e:18:22:a1:57:51:ce:b9:6f:0f: 7d:f2:2d:70:2b:b1:79:29:d4:35:58:08:8a:6e:63:e9:de:68: f4:3e:51:11:79:c4:24:26:eb:6f:98:ff:4c:5b:07:a8:80:f6: 7d:89:e9:fb:c5:e2:47:83:f6:d9:99:8e:54:a6:3a:a5:5d:bf: 52:52:dc:ed:bb:05:62:9f:89:66:34:37:9c:5e:db:72:5e:63: 0b:8c:04:46:a5:c9:60:df:eb:56:82:c0:3d:36:9b:0b:84:3f: 01:88:90:07:1b:56:87:13:ee:77:47:0f:d1:c2:fd:0d:c1:c4: 66:06:e3:e0:a1:bb:18:65:e3:c3:c3:13:81:9f:b9:24:cc:77: 4e:93:6e:1d:d1:8d:19:9e:fa:20:ec:97:77:74:34:f8:4c:07: 6b:37:ac:da:ea:87:3e:64:63:bf:7e:6e:1e:96:ac:18:3d:7c: 32:4d:d0:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcgmunKPzNMRbTjPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkwNjE5Mzc1N1oXDTI0MTIwNTIwMzc1N1owLzEtMCsGA1UEAxMk ZmIxODU1Y2UtMWEyZi00NGU4LTk4YTctMjlmZmI1YjdlYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo93UbedGJIsXK4LirOwcqeaJihhL48NCCV6Q qN1rYWVCZoe7g6q1sQXPmMadrnGvLa28qN6H+cc1MVD9hUfo+Q75aKkFARg/zzDs mhGdNjIWdPPOUYQUDeTRaT3zwPnutJV+aTuqL0/8NBi+O7wPIeBAfYxHwEsxHfY8 3aFkTzlmwMevljxwwxrjKwCjMjnnf14cn3vS0tLSkRJSVcw2DSZjE8WpaOHXjABq wEcw3K8gPRDcviecc40sDk6iCqcBnBBXzIrcM4ZuNkz39j5DIytH5TQn2hZroWRR WcCvTya8DOBObjBWyVAN4MmPUxb3DnrwUxv4R+EuauLcLUZNywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDziYflDotAv/VR16qDAP6fbfnUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFhYjcyODYtYTVlYi0z MjVhLWIyYmYtMTkwMjlkOThjMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2Xj+ZpPBgIbrvs0q1sZiYVeQFZhHCmw/E5Mhoyf1a7f/q/7EExaCsF ntTT/6W6hG7/IDiVjYDodlYNxvWA4qJwF1cY0rnlRShelB2Un7JNDhgioVdRzrlv D33yLXArsXkp1DVYCIpuY+neaPQ+URF5xCQm62+Y/0xbB6iA9n2J6fvF4keD9tmZ jlSmOqVdv1JS3O27BWKfiWY0N5xe23JeYwuMBEalyWDf61aCwD02mwuEPwGIkAcb VocT7ndHD9HC/Q3BxGYG4+Chuxhl48PDE4GfuSTMd06Tbh3RjRme+iDsl3d0NPhM B2s3rNrqhz5kY79+bh6WrBg9fDJN0Do= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:20 2024 by rpki-client on console-fra.rpki-client.org