$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/417962f1-7484-3d7a-88d1-d50cd501e1b7.roa File: 417962f1-7484-3d7a-88d1-d50cd501e1b7.roa (raw, json) Hash identifier: KTQmc6S+zPh3CwcS8scaaojygXs+STykTgNCty0SDHA= Subject key identifier: A1:F1:FA:96:FF:83:C5:4C:92:66:C1:7A:AD:62:26:62:9E:C2:DD:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D65023650163631080C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/417962f1-7484-3d7a-88d1-d50cd501e1b7.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.136.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d6:50:23:65:01:63:63:10:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=72a2622f-0a83-40ec-86c8-4f135dbd9697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:49:66:29:56:ce:4d:a0:b3:dd:2b:66:9b: b0:0d:e4:8c:57:13:53:f5:42:9d:16:cd:d5:f1:53: 1b:eb:60:07:15:6b:8a:0b:72:98:45:46:e9:7a:0e: 8e:9e:4c:88:a4:e7:75:f0:28:57:30:6c:7b:39:f2: 4b:e7:0d:f6:69:94:25:91:b0:fc:a4:d1:a6:d9:5b: c6:48:71:6d:48:a9:29:8f:6e:5f:3c:6b:8f:8d:1f: 60:90:c8:38:3f:c2:4a:5b:d9:df:62:b6:83:37:92: f9:0b:d6:38:18:5c:90:89:1d:76:cf:e3:de:62:cf: 51:1a:19:a2:98:3c:61:8f:42:32:66:cb:08:d2:6e: 86:13:4e:b9:25:af:e4:18:20:1a:d9:e1:11:7f:2e: 37:11:b1:af:21:d8:4c:be:14:ef:41:2d:01:99:6a: ce:cb:24:65:a6:e8:88:1d:5c:94:3b:8d:cb:d5:59: d9:a3:4b:e7:49:be:0e:7c:b0:74:9a:50:e9:61:a9: 10:8b:b7:1c:38:60:5d:82:00:8a:ba:95:b1:0f:f8: 47:08:48:74:12:56:48:0b:ac:32:a5:86:f0:4e:7e: 8e:af:94:75:e1:da:99:4e:64:42:a7:c5:d6:1a:0c: b1:e0:07:db:8d:bc:d3:d3:99:d2:89:17:c4:fe:72: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:FA:96:FF:83:C5:4C:92:66:C1:7A:AD:62:26:62:9E:C2:DD:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/417962f1-7484-3d7a-88d1-d50cd501e1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:28:00:04:96:68:5a:a2:11:ff:fa:64:d3:1f:a4:ac:54:1e: 26:81:da:8d:98:e7:49:4f:7d:75:4b:20:62:bf:1a:b4:aa:b2: 83:70:fc:4b:52:9a:52:bd:87:97:84:75:63:8e:39:2c:b4:0e: eb:9e:90:7c:9f:6f:ee:29:ea:73:c9:6a:e7:3b:99:ba:cc:36: 68:c7:13:2e:e0:cb:d3:77:01:dc:48:5a:63:08:41:f8:af:80: f0:3a:3b:fd:e8:64:f6:16:7f:e1:7d:6a:3f:e5:86:63:8f:82: e4:57:90:46:bd:a0:c9:85:c6:df:67:17:1a:fc:cd:42:50:08: c3:da:70:a6:ca:41:03:c1:5b:fe:e4:21:98:8b:4e:72:a2:5d: a4:84:ae:a8:e9:1e:72:32:43:94:10:c7:d0:1a:da:36:23:89: 15:af:84:8a:1f:9e:60:73:ea:0b:13:8f:ab:b2:50:30:04:b0: bc:cb:39:9b:4e:b1:b5:ae:b6:9e:58:d5:36:6f:1c:83:71:d0: 56:a7:d6:29:8a:07:b5:1d:20:9c:51:b2:4e:97:8d:96:d3:0a: 18:56:ca:2a:ef:db:f0:a0:1c:12:0d:ac:0e:c7:fe:a8:7e:e5: 75:b8:51:f5:6e:ff:9b:c9:f9:73:51:d7:b7:c0:c6:38:4e:62: 4a:62:a8:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMtZQI2UBY2MQgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NzJhMjYyMmYtMGE4My00MGVjLTg2YzgtNGYxMzVkYmQ5Njk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdJZilWzk2gs90rZpuwDeSMVxNT9UKdFs3V 8VMb62AHFWuKC3KYRUbpeg6OnkyIpOd18ChXMGx7OfJL5w32aZQlkbD8pNGm2VvG SHFtSKkpj25fPGuPjR9gkMg4P8JKW9nfYraDN5L5C9Y4GFyQiR12z+PeYs9RGhmi mDxhj0IyZssI0m6GE065Ja/kGCAa2eERfy43EbGvIdhMvhTvQS0BmWrOyyRlpuiI HVyUO43L1VnZo0vnSb4OfLB0mlDpYakQi7ccOGBdggCKupWxD/hHCEh0ElZIC6wy pYbwTn6Or5R14dqZTmRCp8XWGgyx4AfbjbzT05nSiRfE/nL7AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHx+pb/g8VMkmbBeq1iJmKewt1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDE3OTYyZjEtNzQ4NC0z ZDdhLTg4ZDEtZDUwY2Q1MDFlMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEoAASWaFqiEf/6ZNMfpKxUHiaB2o2Y50lPfXVLIGK/GrSqsoNw/EtS mlK9h5eEdWOOOSy0DuuekHyfb+4p6nPJauc7mbrMNmjHEy7gy9N3AdxIWmMIQfiv gPA6O/3oZPYWf+F9aj/lhmOPguRXkEa9oMmFxt9nFxr8zUJQCMPacKbKQQPBW/7k IZiLTnKiXaSErqjpHnIyQ5QQx9Aa2jYjiRWvhIofnmBz6gsTj6uyUDAEsLzLOZtO sbWutp5Y1TZvHINx0Fan1imKB7UdIJxRsk6XjZbTChhWyirv2/CgHBINrA7H/qh+ 5XW4UfVu/5vJ+XNR17fAxjhOYkpiqDo= -----END CERTIFICATE-----Generated at Sat May 18 01:40:30 2024 by rpki-client on console-fra.rpki-client.org