$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a02d920-8769-3422-9ac9-f04a1d1ba717.roa File: 4a02d920-8769-3422-9ac9-f04a1d1ba717.roa (raw, json) Hash identifier: wAep20CR3s6jRU9T0umhzh7snYbepqJzYS6G+6yY+sA= Subject key identifier: 60:56:32:8A:F5:B6:6D:8A:36:F3:F7:FA:F9:FA:B4:73:56:1E:F7:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E499B272AB7120FA5DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a02d920-8769-3422-9ac9-f04a1d1ba717.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 66.184.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e4:99:b2:72:ab:71:20:fa:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=5d70b5e0-fcc4-4a37-b058-1bf7daa0bc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a3:2f:46:ff:42:d0:01:8c:54:7c:d0:07:19: ec:ad:ab:a4:7d:68:84:03:26:3a:ac:19:ba:eb:0b: 74:b5:1c:13:ab:41:80:03:37:65:80:3f:06:4c:89: ce:ed:28:2b:a6:9a:16:3b:69:0a:d6:a2:e2:4c:01: 38:9d:e2:49:61:8a:4a:29:8c:e1:64:2e:6a:8a:10: d4:8c:37:12:3c:e4:58:15:20:03:24:63:40:57:33: 9e:d5:70:b6:b0:f3:04:cc:79:85:32:3f:f8:51:b2: b0:83:6c:fb:5d:f4:6e:94:34:d1:4c:ba:f4:e2:6d: c2:8a:9d:61:94:8f:c3:64:cd:44:89:d3:ee:e8:09: a3:a7:6c:c9:f9:c5:ca:e0:70:69:f3:f9:00:a7:47: 04:c9:2e:af:cd:62:00:8e:8a:a6:00:ef:4e:9f:a9: 6b:e9:ee:78:9a:1a:aa:fa:83:7b:80:a5:0e:58:4a: a8:ec:f6:61:cb:bb:b6:12:85:81:b6:4d:fa:a5:e6: 65:00:6b:63:b4:96:05:ad:de:d8:5a:dd:af:e1:01: 8a:9e:da:8a:48:9e:00:f6:80:0d:77:78:f3:da:39: 8d:e3:62:e1:41:41:cf:db:50:54:6f:d0:31:d5:84: 59:da:be:5b:c0:80:e1:a5:c9:5e:b8:d1:6e:63:01: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:56:32:8A:F5:B6:6D:8A:36:F3:F7:FA:F9:FA:B4:73:56:1E:F7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a02d920-8769-3422-9ac9-f04a1d1ba717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.184.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d9:d1:f3:ed:2a:01:f6:5c:03:67:97:6a:78:e5:b7:b4:c6: cb:b8:03:44:12:f4:a4:86:62:ae:b5:71:17:e0:ad:3c:87:66: 6c:3e:87:ad:60:52:e7:5e:27:26:fd:d1:bc:52:91:a2:eb:f1: 04:94:4c:29:64:58:8f:84:da:32:cd:b5:0e:4a:f1:18:0c:67: c3:2e:e9:90:6b:2d:b9:1f:79:d8:6e:0a:eb:d5:41:dc:d1:8f: 05:34:68:a8:1d:5b:70:85:b8:06:6c:db:9e:62:d8:3a:a3:99: 25:56:f3:6b:c0:76:68:8d:13:a4:45:32:f0:0d:21:1f:94:ca: cd:7c:38:d2:78:8e:d7:bb:c6:bc:4f:89:ba:a0:3e:ad:15:0a: f5:dc:57:c3:ab:8b:fb:ca:5d:2b:00:9e:67:45:20:8b:34:43: c9:40:f2:b4:56:85:68:e6:83:0e:7f:cf:33:c0:fe:86:68:59: c4:9a:a6:8e:c6:47:f2:f4:b7:f0:54:6d:d5:83:b1:33:01:69: 16:3f:fc:4e:f0:2d:54:18:fd:8b:9b:e7:d8:29:bf:55:f8:74: 69:76:3e:fb:07:44:97:5d:50:32:10:e1:3d:6c:fb:17:84:cd: 2f:c6:73:7c:97:75:f7:31:b7:1d:93:2a:fd:e4:5c:01:8a:81: 56:da:82:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuSZsnKrcSD6XcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NWQ3MGI1ZTAtZmNjNC00YTM3LWIwNTgtMWJmN2RhYTBiYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6MvRv9C0AGMVHzQBxnsraukfWiEAyY6rBm6 6wt0tRwTq0GAAzdlgD8GTInO7SgrppoWO2kK1qLiTAE4neJJYYpKKYzhZC5qihDU jDcSPORYFSADJGNAVzOe1XC2sPMEzHmFMj/4UbKwg2z7XfRulDTRTLr04m3Cip1h lI/DZM1EidPu6Amjp2zJ+cXK4HBp8/kAp0cEyS6vzWIAjoqmAO9On6lr6e54mhqq +oN7gKUOWEqo7PZhy7u2EoWBtk36peZlAGtjtJYFrd7YWt2v4QGKntqKSJ4A9oAN d3jz2jmN42LhQUHP21BUb9Ax1YRZ2r5bwIDhpcleuNFuYwHZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBWMor1tm2KNvP3+vn6tHNWHveyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEwMmQ5MjAtODc2OS0z NDIyLTlhYzktZjA0YTFkMWJhNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQrgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLZ0fPtKgH2XANnl2p45be0xsu4A0QS9KSGYq61cRfgrTyHZmw+h61g UudeJyb90bxSkaLr8QSUTClkWI+E2jLNtQ5K8RgMZ8Mu6ZBrLbkfedhuCuvVQdzR jwU0aKgdW3CFuAZs255i2DqjmSVW82vAdmiNE6RFMvANIR+Uys18ONJ4jte7xrxP ibqgPq0VCvXcV8Ori/vKXSsAnmdFIIs0Q8lA8rRWhWjmgw5/zzPA/oZoWcSapo7G R/L0t/BUbdWDsTMBaRY//E7wLVQY/Yub59gpv1X4dGl2PvsHRJddUDIQ4T1s+xeE zS/Gc3yXdfcxtx2TKv3kXAGKgVbaglY= -----END CERTIFICATE-----Generated at Fri May 24 02:52:19 2024 by rpki-client on console-ams.rpki-client.org