$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12fc16cc-3bd9-3b99-ab57-ad2614380f17.roa File: 12fc16cc-3bd9-3b99-ab57-ad2614380f17.roa (raw, json) Hash identifier: I06fwVIgYSbBT8mDVp1clC9K50HC/SVk4kdDNG7YTNw= Subject key identifier: 5E:15:E2:B9:86:77:7B:4A:35:1E:68:34:72:F2:EE:C0:05:BD:07:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332F8701E74A266F6D48180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12fc16cc-3bd9-3b99-ab57-ad2614380f17.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 75.89.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:f8:70:1e:74:a2:66:f6:d4:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=646176e4-be21-4f14-8331-884a88c52a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:89:5b:23:0d:80:ab:37:4d:d8:eb:d7:b0: df:6f:95:c2:eb:1f:29:0a:31:f4:3b:3c:51:66:5d: e8:fb:a1:ce:4d:7a:1b:f6:8d:09:89:7f:5d:aa:c1: a0:3f:df:f2:bc:c6:b0:4f:d8:82:e5:5f:98:f8:4b: 73:d1:20:1b:34:c6:c5:32:c2:f8:32:dc:3d:82:5a: 1f:14:b9:dd:3f:38:05:44:2b:dc:51:66:be:03:0d: b2:93:a6:a5:80:dc:95:36:ee:3f:3d:30:6d:cc:45: 3f:cc:45:0f:3f:60:27:fa:16:cd:ce:b1:e0:69:fc: e1:99:f9:e4:88:bc:f1:ca:39:93:61:01:ad:4f:4c: 6c:8e:4b:ae:08:87:b5:c7:95:24:92:d8:ba:b3:74: 7f:69:e4:f0:5a:29:d0:7f:9e:bc:ef:22:10:e6:fc: d3:b6:f8:2a:d4:53:c8:c4:1b:1b:66:1a:25:e2:7a: 64:e4:6d:8a:bc:b7:c1:ba:06:da:03:27:ea:68:78: be:d8:e6:25:f5:22:16:15:f8:86:78:5c:e3:4b:01: 3c:29:c1:94:88:e4:8a:40:28:4f:0a:c3:de:8f:e2: 75:26:b0:8b:27:25:48:f0:36:05:a6:84:87:cd:c6: 3d:4d:86:a2:ec:11:86:17:45:4f:d9:52:42:ff:9c: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:15:E2:B9:86:77:7B:4A:35:1E:68:34:72:F2:EE:C0:05:BD:07:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12fc16cc-3bd9-3b99-ab57-ad2614380f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:85:25:c6:a1:30:7d:22:88:bb:9a:fa:f6:c4:c9:c5:36:29: b1:93:62:e2:9d:97:56:cf:19:2a:b6:ce:69:82:e5:e7:ee:34: 6a:ed:f6:03:f3:29:d3:c2:b9:a9:32:01:50:99:cd:b7:bf:66: a6:a2:18:41:93:0b:c4:90:4d:e3:94:07:14:28:98:64:ad:f8: 71:59:ca:78:21:44:4b:4f:c8:67:e5:6e:33:e6:fd:84:af:09: f8:50:fe:dd:5b:55:8d:c5:7e:b4:7a:8c:e0:a8:a5:1e:7e:73: 2c:8d:51:6c:9e:31:c3:d1:7d:06:2b:30:98:c0:ad:a2:20:a6: 3b:f4:d5:f6:8c:92:c9:8d:61:ac:5f:be:1f:96:26:81:b4:de: 18:9f:07:25:32:8f:7e:47:56:15:cf:af:bb:35:db:2b:fb:88: a4:65:c2:30:85:ea:67:5d:ce:73:1d:36:42:ef:c4:0c:dc:fb: 27:b4:b1:99:6c:61:6b:4a:20:6f:47:2d:0a:b9:e7:fd:ed:25: 88:47:e2:ab:4c:d4:07:2d:2d:4e:ff:4d:48:fe:1f:4e:c9:6b: 96:f3:0e:b4:17:4d:29:d9:a2:96:db:61:bd:f5:ad:80:ae:86: 0c:f8:dd:b5:b6:53:25:3c:55:e1:20:ab:e6:ca:ae:15:d4:02: 87:72:7a:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvhwHnSiZvbUgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NjQ2MTc2ZTQtYmUyMS00ZjE0LTgzMzEtODg0YTg4YzUyYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7SJWyMNgKs3Tdjr17Dfb5XC6x8pCjH0OzxR Zl3o+6HOTXob9o0JiX9dqsGgP9/yvMawT9iC5V+Y+Etz0SAbNMbFMsL4Mtw9glof FLndPzgFRCvcUWa+Aw2yk6algNyVNu4/PTBtzEU/zEUPP2An+hbNzrHgafzhmfnk iLzxyjmTYQGtT0xsjkuuCIe1x5Ukkti6s3R/aeTwWinQf5687yIQ5vzTtvgq1FPI xBsbZhol4npk5G2KvLfBugbaAyfqaHi+2OYl9SIWFfiGeFzjSwE8KcGUiOSKQChP CsPej+J1JrCLJyVI8DYFpoSHzcY9TYai7BGGF0VP2VJC/5yoewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4V4rmGd3tKNR5oNHLy7sAFvQegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJmYzE2Y2MtM2JkOS0z Yjk5LWFiNTctYWQyNjE0MzgwZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqFJcahMH0iiLua+vbEycU2KbGTYuKdl1bPGSq2zmmC5efuNGrt9gPz KdPCuakyAVCZzbe/ZqaiGEGTC8SQTeOUBxQomGSt+HFZynghREtPyGflbjPm/YSv CfhQ/t1bVY3FfrR6jOCopR5+cyyNUWyeMcPRfQYrMJjAraIgpjv01faMksmNYaxf vh+WJoG03hifByUyj35HVhXPr7s12yv7iKRlwjCF6mddznMdNkLvxAzc+ye0sZls YWtKIG9HLQq55/3tJYhH4qtM1ActLU7/TUj+H07Ja5bzDrQXTSnZopbbYb31rYCu hgz43bW2UyU8VeEgq+bKrhXUAodyets= -----END CERTIFICATE-----Generated at Fri May 24 02:52:08 2024 by rpki-client on console-ams.rpki-client.org