$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa File: 2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa (raw, json) Hash identifier: gKeXC+3pBGBl+Ry05DDChjAHOBfq9WIYULNTk6XLwfI= Subject key identifier: B3:94:CA:93:16:E2:56:6E:73:2A:E8:36:37:DB:D7:C6:3D:C5:71:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332F8158E88B7AED5D42E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 75.89.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:f8:15:8e:88:b7:ae:d5:d4:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=95cbef3f-2512-42df-892c-a7fcc5af80a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:6e:56:e8:69:72:7f:45:9d:bc:05:f1:de: 79:7b:8f:68:f4:91:df:66:e1:3a:0a:94:4b:b2:42: 78:b8:57:f8:09:4e:42:c6:b8:a1:a3:b0:fc:f6:0f: 6d:9d:5d:57:7d:f3:e1:4f:0d:0a:b6:b4:b6:57:d0: f5:9c:c0:24:14:e1:e2:3e:8a:48:c8:3f:38:0b:31: 53:bc:5e:74:6a:17:c9:c9:47:dd:56:6a:3f:d5:be: ab:04:60:10:a1:45:fc:6f:af:9f:6b:0b:49:63:00: 20:ee:18:4b:01:36:89:1a:5f:31:84:c7:fb:52:c6: df:44:42:88:bf:4a:ce:ad:33:45:a0:65:55:f8:ba: b0:05:37:bd:9d:09:c7:78:05:19:1e:04:5c:2c:cf: d6:69:c3:6f:45:12:32:8f:50:94:da:60:a9:66:ea: 2e:f7:ba:6f:3e:a4:81:c3:23:f0:62:b0:59:fe:66: 8f:f4:8b:3e:73:b4:4f:88:7d:20:d4:4b:7d:bc:e9: 95:68:ab:e1:03:a8:bc:98:f2:21:5a:42:55:82:73: 66:66:27:50:f9:29:d7:53:d8:31:99:b7:aa:29:f5: 1e:5b:ed:eb:10:ca:2b:ef:cf:ae:6c:c4:37:3a:ac: f9:3f:c2:93:5f:6d:61:40:6f:0e:17:3f:21:e9:14: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:CA:93:16:E2:56:6E:73:2A:E8:36:37:DB:D7:C6:3D:C5:71:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:06:1b:f6:1b:fd:c8:8b:29:7a:a9:6a:7b:7b:93:8a:b6:25: 1e:b8:42:b2:1e:52:ff:20:9a:07:61:75:49:fe:18:46:6a:b7: db:f1:4a:8a:76:3b:39:63:2c:34:ec:54:fc:9e:17:6d:69:63: 64:28:f0:02:b1:c0:1f:b0:a9:1c:da:84:dd:ec:2d:c4:9f:02: 3e:47:38:e2:90:47:cf:8b:c1:eb:ee:cb:e1:bf:01:7f:bd:ce: ac:1a:f8:ae:ca:73:46:9a:cf:ef:1c:ab:ab:7d:f2:15:b8:0e: 13:fc:95:92:78:f2:bd:d3:10:d0:0d:3d:95:29:8a:42:12:2e: bf:32:91:43:44:e2:20:fe:de:5e:e6:74:1d:2d:80:3d:99:02: c4:f0:81:99:4a:42:00:9c:2b:02:d8:d9:36:67:bf:b7:2a:7a: bb:01:8d:ef:bb:aa:c6:0c:63:ff:e2:56:1a:44:9d:dd:0b:fa: 59:44:7d:cc:61:57:0d:5d:74:2a:bd:76:5e:c4:0b:5e:45:24: 02:16:86:d8:c1:40:b9:ae:11:3c:9e:df:32:68:bf:8b:d6:d9: 5e:ec:67:ba:e2:31:ee:8a:d5:4c:5d:2f:11:e4:b9:a4:cc:5f: c0:0c:41:94:18:85:3a:e9:3a:79:ea:56:f7:ab:d0:81:21:ec: 00:3a:b9:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvgVjoi3rtXULoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OTVjYmVmM2YtMjUxMi00MmRmLTg5MmMtYTdmY2M1YWY4MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDFuVuhpcn9FnbwF8d55e49o9JHfZuE6CpRL skJ4uFf4CU5Cxriho7D89g9tnV1XffPhTw0KtrS2V9D1nMAkFOHiPopIyD84CzFT vF50ahfJyUfdVmo/1b6rBGAQoUX8b6+fawtJYwAg7hhLATaJGl8xhMf7UsbfREKI v0rOrTNFoGVV+LqwBTe9nQnHeAUZHgRcLM/WacNvRRIyj1CU2mCpZuou97pvPqSB wyPwYrBZ/maP9Is+c7RPiH0g1Et9vOmVaKvhA6i8mPIhWkJVgnNmZidQ+SnXU9gx mbeqKfUeW+3rEMor78+ubMQ3Oqz5P8KTX21hQG8OFz8h6RQjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOUypMW4lZucyroNjfb18Y9xXECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJkZTVlYmUtYzlkMS0z MWExLWEzMTQtMjViN2YxOWZjYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8GG/Yb/ciLKXqpant7k4q2JR64QrIeUv8gmgdhdUn+GEZqt9vxSop2 OzljLDTsVPyeF21pY2Qo8AKxwB+wqRzahN3sLcSfAj5HOOKQR8+Lwevuy+G/AX+9 zqwa+K7Kc0aaz+8cq6t98hW4DhP8lZJ48r3TENANPZUpikISLr8ykUNE4iD+3l7m dB0tgD2ZAsTwgZlKQgCcKwLY2TZnv7cqersBje+7qsYMY//iVhpEnd0L+llEfcxh Vw1ddCq9dl7EC15FJAIWhtjBQLmuETye3zJov4vW2V7sZ7riMe6K1UxdLxHkuaTM X8AMQZQYhTrpOnnqVver0IEh7AA6uVs= -----END CERTIFICATE-----Generated at Sat May 18 01:40:29 2024 by rpki-client on console-fra.rpki-client.org