$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a499d8d-92d3-3ee8-bee3-269f09a22a48.roa File: 3a499d8d-92d3-3ee8-bee3-269f09a22a48.roa (raw, json) Hash identifier: Sz1ndxNqhyaW2Q20FtdGi2B12gTKJAsZYSMrWF/ffLY= Subject key identifier: FE:C6:09:89:C6:5C:BA:E0:7B:A9:F3:85:95:21:AA:0A:50:D8:BA:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553333BC7732332A6AB919040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a499d8d-92d3-3ee8-bee3-269f09a22a48.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 27338 IP address blocks: 66.0.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:3b:c7:73:23:32:a6:ab:91:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=6bafef32-6a5d-43eb-8adb-a93d7d23b06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:87:11:fd:a5:15:a5:a0:e6:44:86:96:3f:d5: 69:2b:a1:95:68:cf:68:05:68:60:0e:21:97:62:78: 18:82:2b:44:26:b7:cc:1c:18:28:67:82:89:44:19: 73:63:7a:64:0d:55:56:43:95:49:be:b1:f8:d6:42: f2:bd:63:4e:f2:c6:23:53:2a:3e:19:9b:93:c4:b7: 94:9e:9b:e4:ad:f6:34:fc:ed:3b:c3:68:35:b8:36: b8:fc:4b:59:e1:24:99:32:0a:d0:11:d4:e7:d5:43: 54:d5:49:06:71:42:e4:db:5a:15:d2:7d:e1:c7:cc: 5d:50:6d:c1:1a:8b:fa:d4:42:24:e7:17:41:6d:b1: 79:f5:fb:c4:99:8e:b2:e8:8d:e3:40:8f:92:ea:28: 00:35:b3:ce:2f:14:6b:77:e6:a2:cf:76:9d:bc:7e: d7:ef:2f:7f:47:d0:1b:89:d3:dc:6b:f5:c3:68:33: c4:3a:f8:5b:e2:24:6f:38:6b:dc:36:0a:ea:b2:7f: 11:3e:9a:f5:d1:fe:ff:87:7b:a5:97:19:d7:ef:19: d2:dc:85:2e:1b:0d:f5:30:16:c9:e5:97:47:d4:e2: 47:af:59:c7:53:fd:0c:6e:75:53:a0:6f:79:c4:2f: 7d:97:ad:b9:c0:5e:78:52:4d:74:eb:86:00:8e:e1: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:09:89:C6:5C:BA:E0:7B:A9:F3:85:95:21:AA:0A:50:D8:BA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a499d8d-92d3-3ee8-bee3-269f09a22a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:32:70:63:59:34:4d:8f:25:67:54:9b:96:3b:bb:9d:54:d1: ee:a8:de:08:e5:c5:a1:1b:31:ee:8c:0d:82:d2:ce:7f:80:71: c4:de:b8:f4:ed:42:40:22:e7:6c:b0:ac:df:61:14:69:3c:d3: 0a:60:d8:52:80:63:d6:31:e8:85:0c:41:a1:ec:71:b0:0f:2f: b3:08:fd:8a:2c:6f:81:a9:38:55:26:ee:83:b8:18:c0:c1:8d: 79:7f:9d:97:63:00:bb:1a:83:4f:f5:ca:6e:a2:0d:84:d8:4b: cf:77:80:0c:74:ee:99:c2:e0:f9:d9:cf:a1:ca:c5:d3:b1:a1: 09:31:79:7d:f2:53:74:7d:77:49:5f:78:ab:eb:e0:81:9c:d5: d3:03:2c:46:97:fe:f4:7c:84:4d:39:44:50:5e:eb:01:ce:e6: f6:20:f0:cc:fc:14:10:38:15:3c:54:3f:b3:3e:45:7d:91:4b: 16:69:7a:d4:91:bb:12:df:5f:21:cd:b9:0f:78:06:6f:63:f7: f6:7e:e8:ff:d5:65:67:8b:5a:01:3d:30:c4:c4:3f:7e:40:29: f0:f4:35:6c:01:6c:c7:de:b2:04:80:3b:58:a7:fa:2f:42:fc: f0:c7:a2:cb:80:5f:42:13:c5:73:06:fa:75:df:7b:ef:d7:9f: bf:b2:cf:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMzvHcyMypquRkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NmJhZmVmMzItNmE1ZC00M2ViLThhZGItYTkzZDdkMjNiMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ocR/aUVpaDmRIaWP9VpK6GVaM9oBWhgDiGX YngYgitEJrfMHBgoZ4KJRBlzY3pkDVVWQ5VJvrH41kLyvWNO8sYjUyo+GZuTxLeU npvkrfY0/O07w2g1uDa4/EtZ4SSZMgrQEdTn1UNU1UkGcULk21oV0n3hx8xdUG3B Gov61EIk5xdBbbF59fvEmY6y6I3jQI+S6igANbPOLxRrd+aiz3advH7X7y9/R9Ab idPca/XDaDPEOvhb4iRvOGvcNgrqsn8RPpr10f7/h3ullxnX7xnS3IUuGw31MBbJ 5ZdH1OJHr1nHU/0MbnVToG95xC99l625wF54Uk1064YAjuFTFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7GCYnGXLrge6nzhZUhqgpQ2LpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2E0OTlkOGQtOTJkMy0z ZWU4LWJlZTMtMjY5ZjA5YTIyYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgA9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUycGNZNE2PJWdUm5Y7u51U0e6o3gjlxaEbMe6MDYLSzn+AccTeuPTt QkAi52ywrN9hFGk80wpg2FKAY9Yx6IUMQaHscbAPL7MI/Yosb4GpOFUm7oO4GMDB jXl/nZdjALsag0/1ym6iDYTYS893gAx07pnC4PnZz6HKxdOxoQkxeX3yU3R9d0lf eKvr4IGc1dMDLEaX/vR8hE05RFBe6wHO5vYg8Mz8FBA4FTxUP7M+RX2RSxZpetSR uxLfXyHNuQ94Bm9j9/Z+6P/VZWeLWgE9MMTEP35AKfD0NWwBbMfesgSAO1in+i9C /PDHosuAX0ITxXMG+nXfe+/Xn7+yz78= -----END CERTIFICATE-----Generated at Thu May 23 20:11:41 2024 by rpki-client on console-ams.rpki-client.org