$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa File: fcb87d2a-c770-3ded-9521-5c84bee112c2.roa (raw, json) Hash identifier: Ys6fmrQawEEoBZ6U6mxY2adjn/KbbNNGO3GnvpqwhM8= Subject key identifier: 91:C7:A8:99:24:77:7F:FC:EE:23:C6:DE:C4:10:DC:B3:19:0E:23:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EFEF86F33DC555A28BB46000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 7029 IP address blocks: 173.191.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:86:f3:3d:c5:55:a2:8b:b4:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=20d69640-07c7-4071-8bd9-c23a2c387925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:f4:82:60:f8:71:61:be:b2:84:c6:89:3f: d3:c6:1d:c0:da:e8:f4:c8:41:2a:82:54:0f:21:09: d8:80:3e:f8:36:27:91:d4:1f:fd:ea:37:5c:40:43: b8:e2:c0:dc:5c:87:f2:d8:c4:cf:a3:05:b4:da:c4: 9b:f9:2b:87:9d:9e:c0:b1:d7:5a:2e:62:8c:5d:e0: 9d:85:cd:b3:c6:77:be:bc:9c:c4:05:66:3e:21:9c: 4d:54:cf:d6:27:6e:af:12:a5:10:ba:84:ab:dc:54: 0b:3e:e7:94:61:d8:7d:1f:44:fd:a2:c0:ad:8c:ea: 37:30:63:58:c5:e2:b4:65:b8:8d:09:08:48:5d:68: 93:c4:df:17:1f:59:fb:6c:61:e0:18:37:09:1d:12: 1c:eb:d1:f4:9d:d4:2c:4b:e2:c4:eb:62:cb:4d:f9: 3e:6f:57:f0:20:a4:78:ca:93:0b:2b:85:34:ee:90: c8:27:87:79:40:3f:5f:d4:a5:a1:6c:f9:b5:bc:12: 1c:4d:c3:cc:00:fe:eb:88:3a:37:16:80:96:69:e1: d0:e7:9e:3d:22:db:19:f2:93:86:ec:2f:0b:1d:c1: 86:8d:93:f0:c0:04:56:2c:d8:f4:21:f2:46:52:ae: 77:35:9e:69:02:8b:c3:a5:d9:c3:9f:79:7c:62:4e: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C7:A8:99:24:77:7F:FC:EE:23:C6:DE:C4:10:DC:B3:19:0E:23:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:99:c8:0f:8b:96:22:f1:10:dc:4e:92:4f:92:2e:f3:2e:36: a0:d5:1f:13:7b:6f:0a:2d:13:80:68:61:79:1b:e4:0c:d4:95: d0:2f:5c:25:11:bd:8d:5e:11:5a:00:c0:1c:a7:04:00:19:a8: 24:86:55:5f:c3:cd:e8:a1:a7:5b:31:ef:fb:9c:81:eb:2c:6e: 17:e8:ae:81:4f:11:c2:a4:86:ec:cd:77:4f:e6:b5:69:e6:1d: ec:67:d3:b8:a6:9b:a4:70:d2:f2:73:d5:0f:c5:e8:80:0c:69: ad:74:d2:09:7b:45:95:ea:bb:e8:93:eb:1b:76:03:1b:43:a7: 95:c8:2b:49:c8:ba:54:33:60:d5:a7:54:e4:4b:4d:65:f6:66: 66:34:85:30:5c:b7:04:c6:be:9b:de:6e:ff:dd:ff:35:3a:58: 8e:91:e1:96:04:ec:ba:e9:0b:84:06:2a:3b:9f:45:18:61:f1: 92:b7:39:72:91:2e:93:c0:e1:9a:60:29:d0:ed:18:1b:8b:89: 86:53:6b:74:d5:8a:9b:73:59:99:5a:6f:fd:af:04:48:45:ba: 07:64:1a:12:7e:95:8a:d3:cf:58:f3:4d:29:a7:27:05:c9:7c: 1d:d6:95:1a:a6:ba:d9:a5:7c:f0:ea:fe:86:aa:04:eb:f4:c2: 9f:81:a9:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74bzPcVVoou0YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk MjBkNjk2NDAtMDdjNy00MDcxLThiZDktYzIzYTJjMzg3OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw/0gmD4cWG+soTGiT/Txh3A2uj0yEEqglQP IQnYgD74NieR1B/96jdcQEO44sDcXIfy2MTPowW02sSb+SuHnZ7AsddaLmKMXeCd hc2zxne+vJzEBWY+IZxNVM/WJ26vEqUQuoSr3FQLPueUYdh9H0T9osCtjOo3MGNY xeK0ZbiNCQhIXWiTxN8XH1n7bGHgGDcJHRIc69H0ndQsS+LE62LLTfk+b1fwIKR4 ypMLK4U07pDIJ4d5QD9f1KWhbPm1vBIcTcPMAP7riDo3FoCWaeHQ5549ItsZ8pOG 7C8LHcGGjZPwwARWLNj0IfJGUq53NZ5pAovDpdnDn3l8Yk4wVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHHqJkkd3/87iPG3sQQ3LMZDiO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNiODdkMmEtYzc3MC0z ZGVkLTk1MjEtNWM4NGJlZTExMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqZyA+LliLxENxOkk+SLvMuNqDVHxN7bwotE4BoYXkb5AzUldAvXCUR vY1eEVoAwBynBAAZqCSGVV/Dzeihp1sx7/ucgessbhforoFPEcKkhuzNd0/mtWnm Hexn07imm6Rw0vJz1Q/F6IAMaa100gl7RZXqu+iT6xt2AxtDp5XIK0nIulQzYNWn VORLTWX2ZmY0hTBctwTGvpvebv/d/zU6WI6R4ZYE7LrpC4QGKjufRRhh8ZK3OXKR LpPA4ZpgKdDtGBuLiYZTa3TViptzWZlab/2vBEhFugdkGhJ+lYrTz1jzTSmnJwXJ fB3WlRqmutmlfPDq/oaqBOv0wp+Bqf0= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:41 2024 by rpki-client on console-fra.rpki-client.org