$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa File: c2e69a4e-a91b-3d73-bea6-467992e1639a.roa (raw, json) Hash identifier: I4BHtv//JxNv03lNYNX3bZlJFG1uM8QfsLdoXJ5kARc= Subject key identifier: FD:A5:D7:F2:6E:FD:5E:CC:64:81:DD:51:EB:45:C5:FD:F1:1E:42:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6C00DC534B1A7659C9A3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 173.186.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:00:dc:53:4b:1a:76:59:c9:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=6e1389fa-dca7-4d3b-893c-1b1eceee5790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:18:21:e4:45:fb:fb:d5:92:fe:f0:54:88:9e: 68:14:5e:09:45:7b:dc:88:28:29:a7:b7:a8:b3:a8: 46:2f:cf:a4:96:b0:0c:ad:79:c2:e1:02:9f:e7:6b: 36:a2:9b:71:1c:4a:8c:43:2c:09:61:8e:00:ab:c7: d6:d4:6c:5e:b4:f3:18:6e:0b:07:c0:ae:65:be:ba: 42:fb:0d:50:0e:f2:63:12:f6:63:36:ea:bc:3b:fe: cf:5b:fa:31:de:08:37:85:11:30:a9:9f:db:1c:37: 45:c3:9e:b0:1a:6b:7a:56:45:84:fe:88:33:7e:24: 4d:50:07:db:40:77:31:4e:55:92:85:a2:77:90:39: 2a:e5:df:b5:3e:f3:58:08:9e:8b:d8:5c:e5:ad:4d: ad:4b:34:9a:1c:0f:55:2a:f8:84:87:4a:24:ba:74: 10:61:ba:b7:55:34:f6:56:57:fa:98:28:15:c7:41: a5:77:ce:99:3b:4e:47:4c:1d:96:f7:f3:13:0a:f7: 44:20:41:1c:f7:ea:9e:da:36:84:51:8d:13:f0:48: ba:18:e9:a3:6a:ec:9c:ba:59:72:82:61:7e:d8:28: 3c:1d:eb:81:27:f7:78:81:1e:6c:01:40:13:2e:5d: f2:7f:24:a2:2c:c5:40:1f:dc:59:68:3d:70:66:54: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:D7:F2:6E:FD:5E:CC:64:81:DD:51:EB:45:C5:FD:F1:1E:42:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:bc:47:d4:41:99:30:53:89:18:7c:39:4f:f8:b7:05:78:33: f8:fa:70:94:64:7a:a4:b3:a9:55:23:0b:7e:af:c4:bf:6f:11: 28:02:54:8f:04:30:7f:2c:03:03:d3:44:2f:54:ed:53:c7:f7: 04:b0:ac:cd:7b:cd:78:7f:f8:23:22:12:a2:a3:0a:15:f6:f3: 1b:af:8e:e8:28:a9:6a:f8:e9:d1:0a:59:7f:bc:04:23:53:d7: 09:df:7b:f4:3d:00:d5:7d:17:ef:89:a3:e7:24:29:7b:50:79: 1d:77:98:1e:23:83:8a:af:36:53:46:78:fa:e6:27:dc:a3:15: 4c:14:d0:35:95:b9:70:63:aa:49:b2:6d:07:dd:d0:0e:17:39: e5:0a:72:6e:bf:ae:6d:dd:89:d2:12:4c:4a:dd:8d:64:82:ef: ed:44:71:92:6b:c0:e6:75:62:d5:92:00:83:d3:36:cf:5d:57: 96:c9:11:90:43:f9:ec:e0:d9:bb:9c:bd:27:5c:60:87:7e:d8: ea:7f:d4:bb:27:0d:93:68:e9:7d:8d:03:44:37:71:4b:03:17: 90:37:66:0f:1d:ae:08:0a:94:f9:38:e3:82:c5:aa:c7:46:9b: bf:16:fc:b4:5c:4e:1f:b8:73:c1:d9:3f:c9:46:38:d1:29:10: ce:b1:47:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbADcU0sadlnJo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk NmUxMzg5ZmEtZGNhNy00ZDNiLTg5M2MtMWIxZWNlZWU1NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBgh5EX7+9WS/vBUiJ5oFF4JRXvciCgpp7eo s6hGL8+klrAMrXnC4QKf52s2optxHEqMQywJYY4Aq8fW1GxetPMYbgsHwK5lvrpC +w1QDvJjEvZjNuq8O/7PW/ox3gg3hREwqZ/bHDdFw56wGmt6VkWE/ogzfiRNUAfb QHcxTlWShaJ3kDkq5d+1PvNYCJ6L2FzlrU2tSzSaHA9VKviEh0okunQQYbq3VTT2 Vlf6mCgVx0Gld86ZO05HTB2W9/MTCvdEIEEc9+qe2jaEUY0T8Ei6GOmjauycully gmF+2Cg8HeuBJ/d4gR5sAUATLl3yfySiLMVAH9xZaD1wZlShrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2l1/Ju/V7MZIHdUetFxf3xHkItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJlNjlhNGUtYTkxYi0z ZDczLWJlYTYtNDY3OTkyZTE2MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG8R9RBmTBTiRh8OU/4twV4M/j6cJRkeqSzqVUjC36vxL9vESgCVI8E MH8sAwPTRC9U7VPH9wSwrM17zXh/+CMiEqKjChX28xuvjugoqWr46dEKWX+8BCNT 1wnfe/Q9ANV9F++Jo+ckKXtQeR13mB4jg4qvNlNGePrmJ9yjFUwU0DWVuXBjqkmy bQfd0A4XOeUKcm6/rm3didISTErdjWSC7+1EcZJrwOZ1YtWSAIPTNs9dV5bJEZBD +ezg2bucvSdcYId+2Op/1LsnDZNo6X2NA0Q3cUsDF5A3Zg8drggKlPk444LFqsdG m78W/LRcTh+4c8HZP8lGONEpEM6xR3k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:21 2024 by rpki-client on console-fra.rpki-client.org