$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7fb1302-2f5d-39f8-b0f2-0087996d6a3b.roa File: d7fb1302-2f5d-39f8-b0f2-0087996d6a3b.roa (raw, json) Hash identifier: aaMlaSz+LG3Tj5PBIpl42DhCQf74ocqPzRns8Jy7bj8= Subject key identifier: F3:67:5B:C2:3F:82:99:F9:A2:B2:00:E0:49:86:A4:BB:70:AD:F5:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15504FC272E0F5D8FF48F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7fb1302-2f5d-39f8-b0f2-0087996d6a3b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 173.190.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:04:fc:27:2e:0f:5d:8f:f4:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=9dccde7a-5fb5-4d1d-bbfd-2691fd24c115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:e8:ce:86:09:15:8a:dd:f5:17:04:54:ff: 5a:a2:7a:28:83:35:12:15:57:96:43:c7:fd:7a:95: a2:c4:8f:88:dd:4c:81:9c:8e:03:83:80:25:8f:d8: d0:2d:4b:e2:e0:c8:fe:f7:eb:a7:ea:b8:27:01:11: a3:d2:6f:37:3c:b4:fc:7d:d0:0b:6a:c7:9d:a1:f3: 10:2d:ca:02:ad:07:47:fd:a9:45:59:07:dc:8d:c0: df:04:ab:84:df:01:23:21:1b:8d:84:68:11:a2:dc: 9b:d7:99:3a:ff:cc:6f:74:c2:77:b7:e0:11:5f:29: 63:d9:93:22:22:6c:e8:64:59:91:5b:9c:79:4a:1d: 6f:40:2e:44:a6:55:e1:93:7e:fb:e5:b0:6d:57:83: 56:51:7d:a7:a0:cd:e6:01:50:ce:2d:85:1a:ce:aa: 8c:7c:81:27:57:28:fc:7a:90:b4:fa:72:71:3b:d7: 31:36:6f:0e:d0:ec:8f:aa:b8:4d:8f:7a:b7:0c:03: ed:76:1e:e3:2d:3c:47:fa:15:12:46:43:34:c4:77: 62:46:c0:51:18:65:fd:e9:51:b9:4c:2a:b9:4a:50: 9e:d9:2d:95:f8:a6:3c:01:41:e1:2d:fa:60:cf:81: ac:0f:ba:75:27:ba:99:a3:8f:dd:e4:5e:7e:80:c8: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:67:5B:C2:3F:82:99:F9:A2:B2:00:E0:49:86:A4:BB:70:AD:F5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7fb1302-2f5d-39f8-b0f2-0087996d6a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7a:31:90:71:9f:ce:a4:81:e5:ed:75:c4:a0:e3:9e:fa:0c: cd:ee:f3:b2:a6:f9:b4:8e:61:5d:62:50:55:cb:61:17:16:9f: d2:56:fe:55:73:7c:02:3e:ef:ad:27:22:0e:14:af:a9:35:66: 8f:f3:b0:6b:59:23:dc:11:eb:4f:2f:22:e3:c5:57:ea:a3:ec: f0:e9:54:f1:f4:32:c2:75:ba:d7:a0:fc:66:0c:e8:a9:4d:03: 55:68:51:78:1b:47:9e:ff:18:6c:49:95:1e:d0:e6:24:07:ab: 0a:8f:44:c9:59:bb:65:8e:4b:86:1b:3f:74:3e:ae:e5:a7:4c: 8c:5c:37:f3:51:3f:55:c0:30:9b:10:78:97:95:fc:1e:e1:82: f9:23:06:ac:c0:9e:95:6d:ff:4f:3d:7e:a7:6d:9b:27:9d:3b: 26:ac:64:32:bf:e7:c7:94:12:6c:9e:6e:21:e0:c7:1a:4d:31: 03:fb:a8:48:5a:87:83:ab:86:7d:e6:dd:47:aa:e5:a8:74:f8: 78:23:32:21:c5:cb:53:44:aa:da:85:c1:c3:b7:02:1b:b1:fb: 81:19:cd:18:e6:81:6f:dc:44:3f:d5:1e:9e:e4:b7:fa:22:e8: c8:f6:99:91:41:b9:28:ae:6f:b0:af:bd:7f:80:f5:6f:b4:ee: ef:47:40:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQT8Jy4PXY/0j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OWRjY2RlN2EtNWZiNS00ZDFkLWJiZmQtMjY5MWZkMjRjMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCTozoYJFYrd9RcEVP9aonoogzUSFVeWQ8f9 epWixI+I3UyBnI4Dg4Alj9jQLUvi4Mj+9+un6rgnARGj0m83PLT8fdALasedofMQ LcoCrQdH/alFWQfcjcDfBKuE3wEjIRuNhGgRotyb15k6/8xvdMJ3t+ARXylj2ZMi ImzoZFmRW5x5Sh1vQC5EplXhk3775bBtV4NWUX2noM3mAVDOLYUazqqMfIEnVyj8 epC0+nJxO9cxNm8O0OyPqrhNj3q3DAPtdh7jLTxH+hUSRkM0xHdiRsBRGGX96VG5 TCq5SlCe2S2V+KY8AUHhLfpgz4GsD7p1J7qZo4/d5F5+gMh5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNnW8I/gpn5orIA4EmGpLtwrfUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdmYjEzMDItMmY1ZC0z OWY4LWIwZjItMDA4Nzk5NmQ2YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ6MZBxn86kgeXtdcSg4576DM3u87Km+bSOYV1iUFXLYRcWn9JW/lVz fAI+760nIg4Ur6k1Zo/zsGtZI9wR608vIuPFV+qj7PDpVPH0MsJ1uteg/GYM6KlN A1VoUXgbR57/GGxJlR7Q5iQHqwqPRMlZu2WOS4YbP3Q+ruWnTIxcN/NRP1XAMJsQ eJeV/B7hgvkjBqzAnpVt/089fqdtmyedOyasZDK/58eUEmyebiHgxxpNMQP7qEha h4Orhn3m3Ueq5ah0+HgjMiHFy1NEqtqFwcO3Ahux+4EZzRjmgW/cRD/VHp7kt/oi 6Mj2mZFBuSiub7CvvX+A9W+07u9HQBk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:13 2024 by rpki-client on console-ams.rpki-client.org