$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa File: cb48a02a-551b-382a-abd0-23a66116f121.roa (raw, json) Hash identifier: h2BgRoCQaigF6sSlnOpA0RrEHc5azbtuaPB3XZiW2bY= Subject key identifier: 9B:8B:84:A3:58:67:51:2F:DE:FB:36:66:BD:7A:F9:8C:D5:15:02:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EE8A36A1380EA0C3385E0A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 173.189.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:36:a1:38:0e:a0:c3:38:5e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=bfcff795-1c55-4b1a-8bec-edbcd15e64f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:31:d6:49:84:e4:d5:a7:75:4e:b3:4a:46: a1:c8:81:55:b4:cc:86:c2:1b:64:14:48:25:11:9d: 38:a1:34:23:ad:8a:e0:e9:0a:bf:a8:59:23:06:91: da:3f:d1:6d:fe:a7:9a:a4:2f:d5:74:5a:1b:6a:e4: db:95:ff:ed:64:b2:c8:3e:3f:dd:d9:b7:c4:43:9a: ea:0d:40:23:e1:7f:bc:a7:7a:88:16:74:2c:d6:08: 9d:93:52:ad:8b:95:b8:9e:87:e7:d0:a0:4d:bd:d0: 1c:8b:0e:95:5c:98:65:c6:39:1f:ad:a1:df:ce:cc: 92:99:96:cf:81:5e:6b:5a:88:a1:60:63:6a:02:0c: e3:1b:0e:56:ea:5c:58:f9:e4:65:62:ae:32:b6:21: 44:c2:d4:c9:ca:df:39:02:bf:c9:ef:f2:0a:26:13: 0e:72:d8:a2:05:cb:fb:72:38:22:0b:9b:12:b0:69: 93:ec:88:fb:f4:d3:23:81:38:a1:9d:c3:7e:95:32: af:4f:81:94:ca:6d:48:07:37:7d:66:64:20:fe:6c: 9a:a8:8d:f4:cd:be:79:c4:51:ec:3b:7a:5e:29:08: c8:09:19:e7:78:24:c3:45:67:1b:0c:d2:ec:9a:f2: 26:59:1e:ae:f8:d5:3c:08:b6:d7:48:e8:6a:a6:01: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:84:A3:58:67:51:2F:DE:FB:36:66:BD:7A:F9:8C:D5:15:02:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c5:c0:32:a5:42:87:78:c0:fb:80:9a:38:f7:b3:ef:b0:64: 0b:d9:9d:77:56:ad:5c:cb:28:f4:4b:0e:87:17:b4:b5:c0:ca: d2:aa:60:50:bf:4b:67:aa:b8:79:4f:ae:f1:1f:42:30:8e:3b: 6e:13:0d:c5:97:d4:53:ab:01:cc:83:bb:70:be:54:37:15:d3: 7f:a7:14:84:aa:f6:5d:e8:8b:16:03:69:c8:e4:28:ac:1a:be: aa:9e:e8:a5:a5:15:d5:e7:72:b5:94:c8:26:1c:7f:7b:21:9e: 16:0f:ba:df:0e:e5:a9:64:97:8e:26:3c:0c:0d:bc:1d:c1:9e: 23:c9:c1:7a:a9:c4:91:49:b9:dd:42:50:cb:c0:5d:52:93:1f: 76:51:14:0b:ec:1c:55:6e:09:9a:c1:20:8a:00:af:21:6d:57: ba:f3:4f:e4:ee:46:45:6f:6d:87:ca:ee:fd:23:ce:1f:06:f0: 07:58:31:d9:b5:4b:24:53:7f:49:cf:f4:a1:ac:a9:58:9a:35: b3:91:79:ff:aa:52:6f:54:24:6a:b6:ec:bd:2e:9a:94:b5:5a: 47:13:48:a4:1d:1a:5a:2e:d1:34:cb:3b:d4:d4:f0:49:16:77: b2:06:b4:5d:23:a8:42:2d:d6:1f:c4:03:75:43:c6:7a:0d:3d: e2:ea:1b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijahOA6gwzheCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk YmZjZmY3OTUtMWM1NS00YjFhLThiZWMtZWRiY2QxNWU2NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxsx1kmE5NWndU6zSkahyIFVtMyGwhtkFEgl EZ04oTQjrYrg6Qq/qFkjBpHaP9Ft/qeapC/VdFobauTblf/tZLLIPj/d2bfEQ5rq DUAj4X+8p3qIFnQs1gidk1Kti5W4nofn0KBNvdAciw6VXJhlxjkfraHfzsySmZbP gV5rWoihYGNqAgzjGw5W6lxY+eRlYq4ytiFEwtTJyt85Ar/J7/IKJhMOctiiBcv7 cjgiC5sSsGmT7Ij79NMjgTihncN+lTKvT4GUym1IBzd9ZmQg/myaqI30zb55xFHs O3peKQjICRnneCTDRWcbDNLsmvImWR6u+NU8CLbXSOhqpgE8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuLhKNYZ1Ev3vs2Zr16+YzVFQLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2I0OGEwMmEtNTUxYi0z ODJhLWFiZDAtMjNhNjYxMTZmMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3FwDKlQod4wPuAmjj3s++wZAvZnXdWrVzLKPRLDocXtLXAytKqYFC/ S2equHlPrvEfQjCOO24TDcWX1FOrAcyDu3C+VDcV03+nFISq9l3oixYDacjkKKwa vqqe6KWlFdXncrWUyCYcf3shnhYPut8O5alkl44mPAwNvB3BniPJwXqpxJFJud1C UMvAXVKTH3ZRFAvsHFVuCZrBIIoAryFtV7rzT+TuRkVvbYfK7v0jzh8G8AdYMdm1 SyRTf0nP9KGsqViaNbORef+qUm9UJGq27L0umpS1WkcTSKQdGlou0TTLO9TU8EkW d7IGtF0jqEIt1h/EA3VDxnoNPeLqG+Q= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:11 2024 by rpki-client on console-ams.rpki-client.org