$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4231316a-375a-3f8e-84fa-fbd26b2f68d8.roa File: 4231316a-375a-3f8e-84fa-fbd26b2f68d8.roa (raw, json) Hash identifier: dkeBKUk/tj3+5MYObBddTzj9CoIDHgMnX3wX204mOVM= Subject key identifier: BF:A3:21:43:CF:1D:3C:44:AE:87:BE:48:8E:0F:F4:52:F5:8A:52:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533311A1727B2B627B5792AE Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4231316a-375a-3f8e-84fa-fbd26b2f68d8.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 173.190.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:11:a1:72:7b:2b:62:7b:57:92:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=654d01d7-aa75-4bb9-9dec-ca92b5550747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:7b:7e:9f:15:63:ed:e2:ea:be:85:8f:31: 41:6e:24:c2:b7:0c:6f:9e:3b:ba:a6:ce:81:6c:fb: 4e:e7:a6:30:ff:f0:6d:68:29:d6:40:f1:d9:9c:63: 34:58:a6:c9:26:7d:b1:25:7c:13:80:0d:d7:5e:6a: 46:64:05:cf:2d:65:46:d0:b6:1d:52:9b:3d:3d:fb: af:18:11:b0:33:a2:07:9a:86:43:a6:c8:33:d3:0a: dc:15:b3:42:18:dc:1a:1f:26:53:d1:0d:13:0e:e5: 0c:f1:99:2d:83:b9:d2:24:a7:5e:c6:13:f9:03:34: ed:6d:5d:e6:a0:cb:b7:dd:26:eb:c8:2c:b9:31:45: 21:49:da:89:20:2b:c4:02:04:d1:05:4e:ff:e5:2f: 73:52:6a:2d:70:25:7f:dd:8c:32:b6:0f:ce:0d:39: 8b:12:3e:e1:4c:89:a5:22:e0:bd:c7:57:99:2f:7c: 95:6d:b6:6c:fb:24:66:2a:08:bc:35:ad:1d:55:c6: f7:d2:0c:d9:0c:10:71:25:39:31:8e:08:85:7e:b6: 65:02:0e:85:46:87:21:25:73:56:1d:2c:8c:b8:d3: 33:5a:85:c0:b7:a7:13:07:6b:db:8e:53:4e:4e:dd: cd:98:26:5c:4c:f3:1e:53:9c:03:a0:ef:66:aa:7d: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A3:21:43:CF:1D:3C:44:AE:87:BE:48:8E:0F:F4:52:F5:8A:52:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4231316a-375a-3f8e-84fa-fbd26b2f68d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5a:f4:e2:56:61:cf:c6:07:37:e5:8c:25:ed:5d:a0:45:d6: c8:66:54:7f:45:b4:69:2e:ea:8f:09:02:39:30:81:5b:42:a8: cb:be:53:0a:58:33:c5:4a:2d:cd:c2:3e:b0:c4:ff:45:34:63: 58:a2:12:96:42:e0:ad:b2:d3:13:66:f0:0e:0f:39:dd:00:12: 4a:da:89:f5:57:c6:58:66:00:e2:22:65:0a:2f:6b:77:e7:82: 23:45:be:6e:63:6b:00:1f:04:32:1a:91:0b:cd:85:69:42:a5: 2a:d6:ba:39:1f:1b:2c:fe:0e:c0:d6:02:05:da:05:14:89:da: b3:ac:97:7b:5f:8e:f8:cc:48:d8:93:30:da:7a:82:09:ae:77: d9:b2:37:7e:5c:a2:8a:8e:67:a8:d0:9c:bb:8c:62:1e:3e:b9: eb:a5:4b:7f:75:49:c8:a9:c3:8e:36:3a:77:d3:bf:bb:06:02: d5:42:74:66:f4:e8:c8:91:8e:f6:10:e9:81:ba:c2:37:55:a0: e5:da:36:53:13:a6:30:36:3b:04:c0:1d:60:07:44:c5:a8:a1: 9f:51:dd:50:65:c0:02:ba:32:63:ec:b5:0d:81:b2:d1:25:13: 19:cb:26:58:d9:4a:e0:26:a9:15:34:f6:bf:37:28:eb:85:2e: a1:3e:4b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxGhcnsrYntXkq4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NjU0ZDAxZDctYWE3NS00YmI5LTlkZWMtY2E5MmI1NTUwNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycR7fp8VY+3i6r6FjzFBbiTCtwxvnju6ps6B bPtO56Yw//BtaCnWQPHZnGM0WKbJJn2xJXwTgA3XXmpGZAXPLWVG0LYdUps9Pfuv GBGwM6IHmoZDpsgz0wrcFbNCGNwaHyZT0Q0TDuUM8Zktg7nSJKdexhP5AzTtbV3m oMu33SbryCy5MUUhSdqJICvEAgTRBU7/5S9zUmotcCV/3Ywytg/ODTmLEj7hTIml IuC9x1eZL3yVbbZs+yRmKgi8Na0dVcb30gzZDBBxJTkxjgiFfrZlAg6FRochJXNW HSyMuNMzWoXAt6cTB2vbjlNOTt3NmCZcTPMeU5wDoO9mqn1OHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+jIUPPHTxEroe+SI4P9FL1ilK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDIzMTMxNmEtMzc1YS0z ZjhlLTg0ZmEtZmJkMjZiMmY2OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNa9OJWYc/GBzfljCXtXaBF1shmVH9FtGku6o8JAjkwgVtCqMu+UwpY M8VKLc3CPrDE/0U0Y1iiEpZC4K2y0xNm8A4POd0AEkraifVXxlhmAOIiZQova3fn giNFvm5jawAfBDIakQvNhWlCpSrWujkfGyz+DsDWAgXaBRSJ2rOsl3tfjvjMSNiT MNp6ggmud9myN35cooqOZ6jQnLuMYh4+ueulS391Scipw442OnfTv7sGAtVCdGb0 6MiRjvYQ6YG6wjdVoOXaNlMTpjA2OwTAHWAHRMWooZ9R3VBlwAK6MmPstQ2BstEl ExnLJljZSuAmqRU09r83KOuFLqE+S+w= -----END CERTIFICATE-----Generated at Thu May 23 20:11:42 2024 by rpki-client on console-ams.rpki-client.org