$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493fa329-6d83-37c5-b215-c7f7e31fd60d.roa File: 493fa329-6d83-37c5-b215-c7f7e31fd60d.roa (raw, json) Hash identifier: n74NXVhbqhXXDEcFVOA700hu+ZDJnZONn/sxCuJ4xNE= Subject key identifier: EF:4D:27:F2:3B:CC:A1:E6:CF:77:17:21:FC:E7:8B:74:5C:FA:30:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533325DA89C7B11A1C0BC3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493fa329-6d83-37c5-b215-c7f7e31fd60d.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 209.137.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:25:da:89:c7:b1:1a:1c:0b:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=aeefff7a-301a-40ca-8457-106820d187ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:ab:d6:86:a7:33:8a:b7:59:f7:31:41:5f: e3:ff:13:4f:5b:3e:50:c0:4e:e7:67:98:e7:68:16: 67:46:8a:0e:b3:8b:1c:9e:1d:74:1b:ee:d2:4d:11: 32:89:ec:0f:12:6b:fa:14:43:51:5c:62:cc:b8:70: 19:1a:73:35:23:00:e6:c9:53:ee:d8:97:c2:c9:b4: 85:33:b3:97:88:57:c1:ef:e4:08:05:8a:d3:84:1b: 54:e3:12:99:16:af:5e:70:21:cd:e8:1d:39:a1:ec: 9e:e1:09:35:22:3d:b5:45:58:dc:3f:b4:f4:c3:79: 0e:4b:0c:cd:ea:d0:1c:9d:c0:28:d6:af:77:0d:15: 15:83:31:51:86:70:8c:50:3c:6d:53:ff:dd:bd:e1: ff:b9:01:e5:f8:8a:df:d9:10:cc:2e:49:4b:54:b1: 47:dd:60:db:d4:c3:99:88:17:ac:39:27:73:f8:f6: 25:a0:ac:f7:c3:df:ce:d3:4b:fa:82:79:a1:79:ce: 8c:73:f3:a7:59:5d:2f:d3:b3:d7:e6:d7:39:d7:c4: f0:1b:66:f1:00:91:e0:a4:ec:35:36:5a:7a:c9:d4: 04:79:35:ee:28:e5:9c:8e:d3:51:b1:70:f9:19:fe: c5:8c:3b:6c:fa:22:3d:bb:e0:30:63:fa:c7:03:cf: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:27:F2:3B:CC:A1:E6:CF:77:17:21:FC:E7:8B:74:5C:FA:30:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493fa329-6d83-37c5-b215-c7f7e31fd60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e6:b5:bb:4b:14:d9:88:90:d7:e5:36:ff:07:f3:5c:78:60: a6:21:05:92:8f:ad:0d:ea:16:b6:0e:81:32:17:0b:37:69:d7: fc:65:71:60:68:40:e1:6f:7b:2a:fd:cb:97:95:af:fa:f0:f2: 76:ca:46:c9:80:e6:10:1d:db:dc:ca:fc:d7:88:07:6d:07:70: ab:1e:6d:b3:78:8d:a4:63:36:ff:0a:7e:43:00:52:d0:4f:b8: 3b:60:d4:c6:b5:c7:c8:0c:8e:1f:6e:b3:d7:e7:64:98:90:0e: 29:68:45:87:88:a5:48:57:65:ae:b4:81:cd:b3:c0:01:30:c8: 1e:55:dc:52:5a:93:25:88:46:c7:43:b9:cd:da:c1:fb:f6:d0: a4:77:04:ff:13:37:87:02:66:dc:bb:ef:4c:4c:c5:5f:09:a7: 91:7d:73:3f:ba:35:b0:00:b0:c4:2f:df:c4:b2:4c:8f:3a:f7: d2:06:3b:bc:a0:48:f7:d4:ad:88:30:84:64:1e:22:1d:79:5e: b8:75:54:47:00:7c:64:73:61:9b:4f:ef:67:ad:34:1c:6f:92: fb:8c:fe:b7:94:a8:fe:3a:d9:d4:b9:2b:ce:1e:35:61:de:d8: 2b:ee:1f:5f:31:cb:00:75:fc:e6:65:3c:e5:eb:bd:19:17:e6: 5f:28:69:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMyXaicexGhwLw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YWVlZmZmN2EtMzAxYS00MGNhLTg0NTctMTA2ODIwZDE4N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRCr1oanM4q3WfcxQV/j/xNPWz5QwE7nZ5jn aBZnRooOs4scnh10G+7STREyiewPEmv6FENRXGLMuHAZGnM1IwDmyVPu2JfCybSF M7OXiFfB7+QIBYrThBtU4xKZFq9ecCHN6B05oeye4Qk1Ij21RVjcP7T0w3kOSwzN 6tAcncAo1q93DRUVgzFRhnCMUDxtU//dveH/uQHl+Irf2RDMLklLVLFH3WDb1MOZ iBesOSdz+PYloKz3w9/O00v6gnmhec6Mc/OnWV0v07PX5tc518TwG2bxAJHgpOw1 Nlp6ydQEeTXuKOWcjtNRsXD5Gf7FjDts+iI9u+AwY/rHA88t8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9NJ/I7zKHmz3cXIfzni3Rc+jBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkzZmEzMjktNmQ4My0z N2M1LWIyMTUtYzdmN2UzMWZkNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfmtbtLFNmIkNflNv8H81x4YKYhBZKPrQ3qFrYOgTIXCzdp1/xlcWBo QOFveyr9y5eVr/rw8nbKRsmA5hAd29zK/NeIB20HcKsebbN4jaRjNv8KfkMAUtBP uDtg1Ma1x8gMjh9us9fnZJiQDiloRYeIpUhXZa60gc2zwAEwyB5V3FJakyWIRsdD uc3awfv20KR3BP8TN4cCZty770xMxV8Jp5F9cz+6NbAAsMQv38SyTI8699IGO7yg SPfUrYgwhGQeIh15Xrh1VEcAfGRzYZtP72etNBxvkvuM/reUqP462dS5K84eNWHe 2CvuH18xywB1/OZlPOXrvRkX5l8oaRE= -----END CERTIFICATE-----Generated at Thu May 23 19:42:26 2024 by rpki-client on console-fra.rpki-client.org