$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa File: 3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa (raw, json) Hash identifier: rmTqRcZjdVTzx9PCFSKC+fbpmFbIx7oqxPmLDP4pOkQ= Subject key identifier: FA:DA:20:D5:0A:18:6F:5A:E3:80:52:1F:CE:8A:2F:13:F1:79:D4:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D4BD61D595D75F12B180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 6983 IP address blocks: 209.165.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d4:bd:61:d5:95:d7:5f:12:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=b39b3224-9240-4ae9-ad52-7c55a66174ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:c5:ce:54:9e:a7:4c:bb:d8:85:bc:54:19: 50:ef:8e:07:80:2c:16:49:4f:75:59:b5:8e:6a:f3: df:24:46:c8:46:fd:94:36:ea:03:47:e2:84:86:ce: 8f:76:b5:5d:68:7b:c4:6c:dd:3f:2e:3c:b2:be:c8: 70:8c:48:e3:35:96:99:ee:5f:ae:34:7b:30:4c:90: 0d:8e:a4:af:99:2c:9e:4c:38:33:86:c0:08:f7:8f: 86:23:28:cb:29:d7:99:3a:e6:ff:22:e5:fe:8b:a0: 23:69:73:aa:03:40:2d:5b:5c:70:68:2c:98:8b:09: c4:c9:6a:44:de:a7:53:0c:5d:f3:c1:e9:f0:62:98: d5:3f:f8:69:5f:e5:ec:9a:2e:3c:86:e5:b6:24:6f: 53:b2:bc:10:ab:e5:c2:f7:64:af:c0:3b:58:7d:f5: 77:df:e4:f3:83:96:0b:b6:33:92:02:d0:f0:91:c1: 36:f5:86:5e:b7:4a:6a:fb:8d:6c:36:49:5f:41:09: 3c:ab:2d:98:9b:d2:02:2c:43:51:1d:cb:17:2f:73: 7e:77:06:7d:5c:54:49:91:a1:cd:9d:ab:3e:08:62: e5:81:5b:2a:2d:c3:d5:6f:b9:d0:dc:fc:27:0d:b5: 28:68:0a:90:46:31:c6:0c:cb:1f:7d:bc:d0:e4:db: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:20:D5:0A:18:6F:5A:E3:80:52:1F:CE:8A:2F:13:F1:79:D4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b677eb0-d637-3ae1-add8-63293b5d0ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:67:81:38:72:25:48:03:6e:58:f2:ad:e0:b4:54:30:5c:27: a1:70:f0:37:a1:b6:d8:fd:bf:bf:38:88:d0:17:5c:1a:9d:ad: 32:38:9d:8e:dd:8e:15:0a:67:e1:2f:86:74:11:f2:f8:d3:83: 3b:bf:f5:9e:bb:3f:af:40:0e:46:2f:92:d9:ff:22:0c:56:bc: b8:ab:30:d7:07:ef:59:0c:b1:be:a4:54:d1:33:5f:aa:84:91: 31:c3:08:3d:d9:26:ce:85:06:02:e0:e4:a5:4f:6f:b5:50:d5: 69:43:86:d3:83:61:65:7e:15:bc:4a:7e:e5:49:b5:d7:87:0e: 5c:ea:b1:44:db:22:16:78:30:21:15:35:7c:73:dc:9e:80:65: ec:7d:4f:5a:40:5a:3b:05:04:a9:38:42:db:2f:b0:06:98:95: 4f:68:12:a0:ab:4f:89:5c:ba:83:26:7a:75:55:e5:1f:ea:e8: f1:6b:7b:74:74:f7:95:70:b6:ca:b4:79:c6:54:88:f1:a5:c4: 79:e3:ef:69:5c:5b:b0:b2:0f:da:a6:a7:4f:77:16:b2:ed:4d: 3d:34:fa:f1:b4:5c:ca:96:36:2e:b7:ef:e2:0b:79:93:5a:8f: 1e:17:c2:cf:e1:1c:c3:c0:75:16:43:10:91:ee:71:fc:a7:b8: 88:91:72:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMtS9YdWV118SsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YjM5YjMyMjQtOTI0MC00YWU5LWFkNTItN2M1NWE2NjE3NGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tDFzlSep0y72IW8VBlQ744HgCwWSU91WbWO avPfJEbIRv2UNuoDR+KEhs6PdrVdaHvEbN0/LjyyvshwjEjjNZaZ7l+uNHswTJAN jqSvmSyeTDgzhsAI94+GIyjLKdeZOub/IuX+i6AjaXOqA0AtW1xwaCyYiwnEyWpE 3qdTDF3zwenwYpjVP/hpX+Xsmi48huW2JG9TsrwQq+XC92SvwDtYffV33+Tzg5YL tjOSAtDwkcE29YZet0pq+41sNklfQQk8qy2Ym9ICLENRHcsXL3N+dwZ9XFRJkaHN nas+CGLlgVsqLcPVb7nQ3PwnDbUoaAqQRjHGDMsffbzQ5NsSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPraINUKGG9a44BSH86KLxPxedQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I2NzdlYjAtZDYzNy0z YWUxLWFkZDgtNjMyOTNiNWQwYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFngThyJUgDbljyreC0VDBcJ6Fw8Dehttj9v784iNAXXBqdrTI4nY7d jhUKZ+EvhnQR8vjTgzu/9Z67P69ADkYvktn/IgxWvLirMNcH71kMsb6kVNEzX6qE kTHDCD3ZJs6FBgLg5KVPb7VQ1WlDhtODYWV+FbxKfuVJtdeHDlzqsUTbIhZ4MCEV NXxz3J6AZex9T1pAWjsFBKk4QtsvsAaYlU9oEqCrT4lcuoMmenVV5R/q6PFre3R0 95Vwtsq0ecZUiPGlxHnj72lcW7CyD9qmp093FrLtTT00+vG0XMqWNi637+ILeZNa jx4Xws/hHMPAdRZDEJHucfynuIiRcn0= -----END CERTIFICATE-----Generated at Thu May 23 02:53:58 2024 by rpki-client on console-ams.rpki-client.org