$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa File: 39a32451-9a04-30e0-93d2-78eeb318af4d.roa (raw, json) Hash identifier: oCXNvkAoehdRhVicebAU7gIRw6dCH+0wt6zrt5CZoGY= Subject key identifier: 7E:70:D1:62:F4:22:74:33:CF:0A:62:9C:49:81:B4:5A:F0:89:90:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E0E254B3D1961B92C200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 65.23.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e0:e2:54:b3:d1:96:1b:92:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=38544537-be69-445a-a523-838a8dfac5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:d0:a3:16:37:f4:1e:73:3b:70:1a:e5:ec: 42:90:07:71:5a:8f:c9:19:c5:63:a7:1b:b8:dd:af: d1:c3:48:c5:35:54:96:cf:9d:a4:8d:e0:7f:55:5b: 65:74:44:33:4e:62:89:b6:44:bd:04:26:cf:07:65: e9:03:a3:b1:9d:10:18:01:8e:76:17:7a:f0:24:38: 35:0b:fb:c5:45:74:ce:25:df:84:7b:a4:6f:db:34: ec:41:9e:a5:43:10:91:b7:5a:cf:59:f2:e9:7d:db: df:c2:83:3b:48:49:50:55:6a:9b:de:bc:9a:03:b1: 98:49:f2:46:c4:08:13:14:21:25:da:5e:ad:4a:4d: 17:08:3d:4f:66:0d:fe:3a:5d:b1:72:8c:c0:0b:19: 35:e1:a6:24:b9:65:9e:ee:70:00:97:aa:61:70:bc: 6f:f5:00:f3:f7:65:83:4b:80:32:5e:88:e6:fe:d9: e5:42:76:17:34:96:6e:6b:27:05:b9:e6:8a:c9:88: 30:d9:f1:6e:2a:7d:25:0b:67:c4:5f:e2:cb:ee:4a: 91:40:43:ab:da:37:33:0d:7b:68:e3:2f:84:fa:71: 2d:ac:ef:18:d4:02:7b:fb:22:d5:36:76:de:d2:f7: 5e:33:95:93:e5:43:66:bd:47:c0:e7:75:e3:d9:c9: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:70:D1:62:F4:22:74:33:CF:0A:62:9C:49:81:B4:5A:F0:89:90:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 65.23.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3f:85:ff:6f:4b:b4:d7:77:20:dd:da:06:b9:42:e6:f9:6c: eb:e8:ee:53:9e:3c:9b:a9:24:0d:a9:2d:38:2f:ed:e3:62:2f: d3:1e:81:ad:6d:ba:84:a9:d3:fc:9f:c2:37:c8:01:29:e6:f1: 9f:83:0a:24:a0:c2:79:36:5d:45:4d:db:f4:71:18:0b:80:85: cc:f6:aa:1d:53:d7:d6:f9:1a:62:14:ca:e3:03:30:bc:5f:d5: ba:2b:c5:12:20:4e:bb:dc:87:7b:20:8e:79:43:a1:91:01:e5: 8d:78:a0:b2:d9:30:3f:69:d8:5c:fc:3f:ca:ee:a6:03:d4:b5: 87:5d:d0:a8:6b:32:a0:7f:24:8e:81:85:67:b7:2a:89:cb:26: d7:a7:b5:08:55:71:f6:ff:11:07:a3:62:3d:73:1a:6a:e6:c2: ae:f5:b5:89:42:f4:4c:36:ad:f7:19:03:75:8b:f1:61:ea:39: 32:66:21:e0:75:95:ff:17:07:7c:92:4c:90:38:60:4c:35:3e: 79:34:5c:ae:93:cc:2a:6c:18:91:0a:12:c6:3f:ef:af:01:83: 28:3e:b2:79:35:77:24:15:e1:e2:13:d0:f8:82:aa:ca:95:b7: 44:55:3b:30:df:04:b9:7f:f3:55:c3:ea:84:9f:e6:4f:07:2a: a3:54:bd:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuDiVLPRlhuSwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk Mzg1NDQ1MzctYmU2OS00NDVhLWE1MjMtODM4YThkZmFjNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wPQoxY39B5zO3Aa5exCkAdxWo/JGcVjpxu4 3a/Rw0jFNVSWz52kjeB/VVtldEQzTmKJtkS9BCbPB2XpA6OxnRAYAY52F3rwJDg1 C/vFRXTOJd+Ee6Rv2zTsQZ6lQxCRt1rPWfLpfdvfwoM7SElQVWqb3ryaA7GYSfJG xAgTFCEl2l6tSk0XCD1PZg3+Ol2xcozACxk14aYkuWWe7nAAl6phcLxv9QDz92WD S4AyXojm/tnlQnYXNJZuaycFueaKyYgw2fFuKn0lC2fEX+LL7kqRQEOr2jczDXto 4y+E+nEtrO8Y1AJ7+yLVNnbe0vdeM5WT5UNmvUfA53Xj2clYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5w0WL0InQzzwpinEmBtFrwiZCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzlhMzI0NTEtOWEwNC0z MGUwLTkzZDItNzhlZWIzMThhZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQRcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc/hf9vS7TXdyDd2ga5Qub5bOvo7lOePJupJA2pLTgv7eNiL9Mega1t uoSp0/yfwjfIASnm8Z+DCiSgwnk2XUVN2/RxGAuAhcz2qh1T19b5GmIUyuMDMLxf 1borxRIgTrvch3sgjnlDoZEB5Y14oLLZMD9p2Fz8P8rupgPUtYdd0KhrMqB/JI6B hWe3KonLJtentQhVcfb/EQejYj1zGmrmwq71tYlC9Ew2rfcZA3WL8WHqOTJmIeB1 lf8XB3ySTJA4YEw1Pnk0XK6TzCpsGJEKEsY/768Bgyg+snk1dyQV4eIT0PiCqsqV t0RVOzDfBLl/81XD6oSf5k8HKqNUvZ8= -----END CERTIFICATE-----Generated at Sat May 18 01:40:30 2024 by rpki-client on console-fra.rpki-client.org