$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08b96706-4779-3270-97dc-166c077e0b2e.roa File: 08b96706-4779-3270-97dc-166c077e0b2e.roa (raw, json) Hash identifier: xKAqM91uPOkjWNgDP9qNl5f7+MKnq29K0kElG7qSoT4= Subject key identifier: 30:D1:B5:00:04:39:29:5D:7C:2F:50:08:6E:22:88:6C:4F:30:45:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E8AA0292E23ECA750400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08b96706-4779-3270-97dc-166c077e0b2e.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 67.214.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e8:aa:02:92:e2:3e:ca:75:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=2b6a58f9-5589-47f1-8d87-5908702dda19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:e7:c0:2e:1c:d0:68:6f:56:84:3d:0e:31: 11:a2:b1:ad:bc:fb:2f:6d:61:82:1c:80:6f:29:61: c8:a5:78:e5:95:59:c6:8e:bd:3b:79:51:43:87:d7: 30:7f:56:bd:a5:27:77:17:b7:6c:ee:4e:55:7b:fd: 6e:1d:f1:09:18:11:29:76:16:6e:48:ae:01:10:b0: 97:c4:94:cc:b4:40:79:cb:bc:b3:30:91:cf:37:13: 7a:66:40:c3:bf:fb:7e:ce:9a:15:12:81:05:1e:1d: cb:15:97:ac:65:77:8d:97:83:2b:63:69:b2:12:53: 8c:cc:08:40:84:b9:4d:cf:4f:23:5a:59:8e:4e:12: 8b:76:cc:e4:39:39:12:c3:ee:6c:25:58:b5:fb:08: 40:41:97:02:05:fc:23:01:48:fa:12:4d:9d:02:4f: 74:8b:2e:c5:a1:92:19:81:18:f4:c9:db:49:e9:15: ac:8b:96:73:b3:43:16:2c:d7:26:b1:9d:41:80:f2: d0:7d:cc:76:db:67:a8:61:2f:88:e8:5c:2d:42:2c: 93:eb:30:24:05:63:09:73:90:57:ca:69:46:00:04: f6:a6:5e:a3:41:d0:11:a8:b0:16:48:78:46:5d:42: af:1e:82:ec:87:97:4c:a6:19:6a:0c:fe:51:46:5e: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:B5:00:04:39:29:5D:7C:2F:50:08:6E:22:88:6C:4F:30:45:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08b96706-4779-3270-97dc-166c077e0b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.214.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:04:e8:dd:7a:7d:44:b4:20:f4:25:64:33:26:49:1f:8d:a5: da:f2:42:f5:58:3c:06:01:bf:47:1d:e7:0b:8b:62:a2:6b:9b: 41:a5:06:b1:fd:29:05:ae:d0:f6:9c:88:a4:97:eb:4b:53:24: bd:5d:68:20:52:98:82:86:fd:f2:58:05:b2:77:0b:3d:26:9f: a1:72:a4:15:c6:f8:79:ec:bc:0b:60:f2:ea:2c:41:a8:f2:79: 58:ed:03:0b:5c:bf:70:0d:d5:a4:25:38:93:11:4c:09:64:13: 1b:87:a9:cf:07:39:2a:1b:16:a2:03:25:71:f3:a9:b2:ae:f1: 6e:27:f6:1e:48:37:02:75:97:fa:f9:29:12:db:4e:52:f9:c8: a4:57:cf:a9:c9:2b:76:ef:2d:90:15:34:c7:f5:4c:34:e6:92: bd:70:d5:75:0e:a2:59:cc:b0:c0:53:dd:ef:41:30:40:b1:ab: 0b:4d:44:9e:c0:33:2a:c7:4e:b3:49:16:b6:58:b1:30:d5:77: a3:08:fd:f4:a7:a3:af:08:a6:ab:7e:41:e8:06:ea:22:45:1e: e5:87:ef:41:e0:f0:4b:61:02:10:f7:97:6c:2d:c4:8e:60:18: fd:46:da:b4:38:88:2c:83:13:aa:28:bc:96:3f:c4:17:98:3d: 1c:61:69:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuiqApLiPsp1BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MmI2YTU4ZjktNTU4OS00N2YxLThkODctNTkwODcwMmRkYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz23nwC4c0GhvVoQ9DjERorGtvPsvbWGCHIBv KWHIpXjllVnGjr07eVFDh9cwf1a9pSd3F7ds7k5Ve/1uHfEJGBEpdhZuSK4BELCX xJTMtEB5y7yzMJHPNxN6ZkDDv/t+zpoVEoEFHh3LFZesZXeNl4MrY2myElOMzAhA hLlNz08jWlmOThKLdszkOTkSw+5sJVi1+whAQZcCBfwjAUj6Ek2dAk90iy7FoZIZ gRj0ydtJ6RWsi5Zzs0MWLNcmsZ1BgPLQfcx222eoYS+I6FwtQiyT6zAkBWMJc5BX ymlGAAT2pl6jQdARqLAWSHhGXUKvHoLsh5dMphlqDP5RRl7gVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDRtQAEOSldfC9QCG4iiGxPMEUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhiOTY3MDYtNDc3OS0z MjcwLTk3ZGMtMTY2YzA3N2UwYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwE6N16fUS0IPQlZDMmSR+NpdryQvVYPAYBv0cd5wuLYqJrm0GlBrH9 KQWu0PaciKSX60tTJL1daCBSmIKG/fJYBbJ3Cz0mn6FypBXG+HnsvAtg8uosQajy eVjtAwtcv3AN1aQlOJMRTAlkExuHqc8HOSobFqIDJXHzqbKu8W4n9h5INwJ1l/r5 KRLbTlL5yKRXz6nJK3bvLZAVNMf1TDTmkr1w1XUOolnMsMBT3e9BMECxqwtNRJ7A MyrHTrNJFrZYsTDVd6MI/fSno68Ipqt+QegG6iJFHuWH70Hg8EthAhD3l2wtxI5g GP1G2rQ4iCyDE6oovJY/xBeYPRxhaUw= -----END CERTIFICATE-----Generated at Sat May 18 01:40:26 2024 by rpki-client on console-fra.rpki-client.org