$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/085f4ac4-8b47-3ff3-ba2a-a15f7297ae69.roa File: 085f4ac4-8b47-3ff3-ba2a-a15f7297ae69.roa (raw, json) Hash identifier: 1gD0V4tfg+QaZFom/Ox0KSeVEm8bVu192HaCKP3m61Y= Subject key identifier: D1:E2:FF:DB:00:4B:CE:6C:FA:40:95:FD:BB:0A:27:D1:80:62:65:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D562AFC5E6857CA63E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/085f4ac4-8b47-3ff3-ba2a-a15f7297ae69.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.130.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d5:62:af:c5:e6:85:7c:a6:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=5ec0ca41-95ee-4001-9899-f38360c980e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:d9:e4:db:77:0c:e6:f3:d5:06:0f:75:a6: 6e:e9:71:21:cd:fd:60:81:97:f3:18:c1:50:50:a3: 78:ac:6c:ac:80:7d:23:72:77:e7:16:22:9e:e8:ba: e3:44:06:75:e6:f8:44:91:c4:8e:55:41:2f:ce:08: 06:65:3f:8d:6b:2d:36:fb:88:60:4f:35:be:03:5e: 2a:e2:17:20:2b:81:10:3f:2d:71:d5:08:36:41:2e: f5:ab:32:d2:6c:2c:87:c7:e5:c6:67:ca:21:74:16: f8:bc:0b:71:82:20:59:fb:c7:3f:4f:dd:74:27:bc: 37:9e:ec:10:c2:bf:a6:12:e4:9a:5d:18:25:29:ab: 35:83:c9:3e:25:c9:71:e3:e3:82:7a:62:82:fe:d7: ac:08:47:63:45:9f:e5:2e:de:94:fc:88:d3:02:9d: 6f:21:96:84:76:38:b6:e5:96:7a:81:bb:b3:c4:45: 4a:d5:6b:58:e5:38:60:92:a0:27:b7:e0:21:04:00: e3:ef:c3:50:18:95:68:43:9c:7e:de:2e:e2:ed:80: e1:f6:58:11:24:06:b6:3e:f9:91:be:d5:36:d8:ae: 13:f4:19:fd:92:da:43:fa:05:0d:83:bb:da:9f:16: 72:57:5f:55:91:ab:39:f6:bf:41:9f:7e:b1:8f:90: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:FF:DB:00:4B:CE:6C:FA:40:95:FD:BB:0A:27:D1:80:62:65:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/085f4ac4-8b47-3ff3-ba2a-a15f7297ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.130.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:78:6d:f9:c7:6b:24:df:94:ad:8c:ce:fa:c0:ba:95:1a:8d: e9:03:31:14:7e:76:88:f7:3e:0b:2a:dd:20:b9:3c:86:41:15: 18:0b:2c:ef:7c:d7:b4:27:87:92:d2:86:df:21:f5:34:43:fb: 14:81:31:1d:e5:b7:48:20:d7:af:75:8a:75:70:44:29:1f:39: 00:9c:5b:ba:e9:8a:86:28:9c:3c:53:75:65:e5:04:29:b9:46: 71:3c:85:07:37:01:a9:07:7b:de:f0:ec:9c:82:bd:26:4c:59: f6:8d:cb:6c:16:d1:74:65:54:02:0e:f7:95:43:b5:b4:e9:4d: 72:5e:b1:35:2d:be:2e:4f:48:f5:f1:75:7e:5f:70:17:f1:fa: b0:04:5c:7c:83:c4:e2:2c:34:da:d3:1b:db:35:c3:0f:98:1f: 6b:af:75:92:d2:40:8a:95:e7:6c:b7:33:a1:4c:a7:ca:c7:7c: c5:25:35:a0:05:cc:b9:b6:70:6b:70:b3:5e:bf:b6:ff:f7:74: 90:ce:30:8c:01:99:4e:6d:c2:bb:49:b4:f8:58:0f:b2:a7:86: 1f:d3:d0:14:4f:08:cf:98:03:70:80:43:b4:3f:72:ba:1d:12: e4:70:9b:d0:64:07:ed:2a:b2:99:4e:6d:d0:ba:d3:5c:39:38: f8:c8:a8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMtVir8XmhXymPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NWVjMGNhNDEtOTVlZS00MDAxLTk4OTktZjM4MzYwYzk4MGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h3Z5Nt3DObz1QYPdaZu6XEhzf1ggZfzGMFQ UKN4rGysgH0jcnfnFiKe6LrjRAZ15vhEkcSOVUEvzggGZT+Nay02+4hgTzW+A14q 4hcgK4EQPy1x1Qg2QS71qzLSbCyHx+XGZ8ohdBb4vAtxgiBZ+8c/T910J7w3nuwQ wr+mEuSaXRglKas1g8k+Jclx4+OCemKC/tesCEdjRZ/lLt6U/IjTAp1vIZaEdji2 5ZZ6gbuzxEVK1WtY5ThgkqAnt+AhBADj78NQGJVoQ5x+3i7i7YDh9lgRJAa2PvmR vtU22K4T9Bn9ktpD+gUNg7vanxZyV19Vkas59r9Bn36xj5CAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHi/9sAS85s+kCV/bsKJ9GAYmV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg1ZjRhYzQtOGI0Ny0z ZmYzLWJhMmEtYTE1ZjcyOTdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKILIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx4bfnHayTflK2MzvrAupUajekDMRR+doj3Pgsq3SC5PIZBFRgLLO98 17Qnh5LSht8h9TRD+xSBMR3lt0gg1691inVwRCkfOQCcW7rpioYonDxTdWXlBCm5 RnE8hQc3AakHe97w7JyCvSZMWfaNy2wW0XRlVAIO95VDtbTpTXJesTUtvi5PSPXx dX5fcBfx+rAEXHyDxOIsNNrTG9s1ww+YH2uvdZLSQIqV52y3M6FMp8rHfMUlNaAF zLm2cGtws16/tv/3dJDOMIwBmU5twrtJtPhYD7Knhh/T0BRPCM+YA3CAQ7Q/crod EuRwm9BkB+0qsplObdC601w5OPjIqJ8= -----END CERTIFICATE-----Generated at Fri May 24 02:52:07 2024 by rpki-client on console-ams.rpki-client.org