$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa File: f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa (raw, json) Hash identifier: OUIjjZB8bgkPwpXZ7dBlc1L0GqcpvqfBa/e3HHKDR8E= Subject key identifier: BE:AF:8C:80:CB:72:70:F1:99:BB:E1:72:14:A3:C7:4D:47:E7:D3:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15537C814E28FD94FFA4B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 174.131.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:37:c8:14:e2:8f:d9:4f:fa:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=3684a63e-00ed-4dd2-ad41-c2104d0a1861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:08:cb:6f:34:8e:82:7a:a8:b3:1c:2e:c4: ff:50:e5:73:5b:fb:e5:72:47:f4:73:c4:c1:72:f7: 16:af:e0:c5:e7:13:d8:c9:50:c2:a4:cf:42:33:24: 81:45:2e:21:04:f2:9e:d9:ad:86:fe:a1:21:3a:fd: 17:e9:b4:f5:dd:4c:37:51:1b:c7:5c:a0:d6:91:97: 95:b5:0d:b5:98:07:fc:3c:96:bf:f0:14:d3:db:5b: 11:6f:ff:93:ae:68:f3:88:03:6a:11:47:75:5a:2a: b9:82:11:6a:35:53:cd:b8:1d:99:6a:54:8c:de:14: 2b:cf:e2:90:60:d9:b4:7a:f0:6f:4a:e6:a7:36:7b: e3:1f:5c:4c:e2:b0:ac:a0:bb:72:14:c6:b0:94:8d: 14:7d:6f:7c:24:37:53:e4:15:be:47:d4:04:7e:a9: 85:6c:0c:92:42:a1:64:da:c1:e1:d8:da:38:17:9c: e4:0c:db:38:4f:1d:18:aa:05:92:c8:04:d8:d5:a8: fc:9c:61:2c:e0:7e:90:b1:0f:c7:95:da:2f:96:4b: 4f:65:f0:ca:b1:13:7a:c9:58:8a:79:a9:9c:cb:0f: b2:ee:50:e2:00:ce:63:38:8f:cd:78:48:c4:0a:95: 6f:f2:12:c5:d2:3a:71:62:94:5b:f5:53:ca:66:91: 7c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AF:8C:80:CB:72:70:F1:99:BB:E1:72:14:A3:C7:4D:47:E7:D3:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f9:e4:9e:79:d7:8a:a5:25:46:b9:79:fa:83:c1:78:80:fe: 5a:c2:8d:b7:fe:8d:81:0d:19:68:97:2b:9a:4e:25:55:c3:4b: 08:98:7a:3c:f6:fb:cb:eb:d0:a4:65:07:de:67:c6:d2:69:05: 9b:30:66:8f:10:32:ea:1e:26:e6:31:89:bf:a0:e4:44:3d:2d: bb:7b:48:3c:c2:a1:ce:4b:06:23:33:2d:f7:33:61:9e:c2:d8: 1e:61:1c:b2:dd:e9:3b:67:e4:48:e2:f3:58:58:20:8a:d0:fa: ca:a1:59:c9:07:ff:e2:8e:e2:17:3d:5f:f6:1a:4d:b4:f8:30: 29:a9:f6:53:09:25:f2:3d:d8:62:d3:7d:c9:42:3b:e4:05:5b: be:e2:8c:a7:4f:47:3d:b1:54:e4:63:10:79:11:cf:4f:9b:c4: 6c:d7:30:99:4c:46:e2:18:69:ac:10:de:dc:67:db:7e:a1:be: ba:38:45:6d:58:55:34:ac:41:43:19:d1:37:8a:20:8a:20:fa: 94:a6:e8:74:48:b0:ce:14:c5:4e:30:9b:5c:73:d5:16:f7:5a: 8c:d1:dd:01:3e:55:c8:e0:b8:80:24:ff:bf:32:61:59:3e:ad: c0:71:63:80:fd:7a:a8:6b:a5:eb:48:c6:46:b0:db:6d:2b:61: 14:e4:59:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTfIFOKP2U/6SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MzY4NGE2M2UtMDBlZC00ZGQyLWFkNDEtYzIxMDRkMGExODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7gIy280joJ6qLMcLsT/UOVzW/vlckf0c8TB cvcWr+DF5xPYyVDCpM9CMySBRS4hBPKe2a2G/qEhOv0X6bT13Uw3URvHXKDWkZeV tQ21mAf8PJa/8BTT21sRb/+TrmjziANqEUd1Wiq5ghFqNVPNuB2ZalSM3hQrz+KQ YNm0evBvSuanNnvjH1xM4rCsoLtyFMawlI0UfW98JDdT5BW+R9QEfqmFbAySQqFk 2sHh2No4F5zkDNs4Tx0YqgWSyATY1aj8nGEs4H6QsQ/HldovlktPZfDKsRN6yViK eamcyw+y7lDiAM5jOI/NeEjECpVv8hLF0jpxYpRb9VPKZpF8pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6vjIDLcnDxmbvhchSjx01H59O/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM2YzgyZDgtZTNmMi0z MDIzLTg1YmEtOGQ0YTBlOWEwNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI755J5514qlJUa5efqDwXiA/lrCjbf+jYENGWiXK5pOJVXDSwiYejz2 +8vr0KRlB95nxtJpBZswZo8QMuoeJuYxib+g5EQ9Lbt7SDzCoc5LBiMzLfczYZ7C 2B5hHLLd6Ttn5Eji81hYIIrQ+sqhWckH/+KO4hc9X/YaTbT4MCmp9lMJJfI92GLT fclCO+QFW77ijKdPRz2xVORjEHkRz0+bxGzXMJlMRuIYaawQ3txn236hvro4RW1Y VTSsQUMZ0TeKIIog+pSm6HRIsM4UxU4wm1xz1Rb3WozR3QE+VcjguIAk/78yYVk+ rcBxY4D9eqhrpetIxkaw220rYRTkWdg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:17 2024 by rpki-client on console-ams.rpki-client.org