$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa File: 4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa (raw, json) Hash identifier: rxlvEd4eu7EzHIGu/PK/CA86KqYgV8i9vbeTuwexvAo= Subject key identifier: A0:A0:20:1E:F4:C3:07:33:33:ED:FB:CD:82:7D:7E:E7:32:3C:4C:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533342AF382DE7395AD75D2C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 40852 IP address blocks: 75.77.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:42:af:38:2d:e7:39:5a:d7:5d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=ec2c706f-080d-430e-8a40-67a8d0cde072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:5e:cb:5b:fe:df:b3:54:56:5e:8f:e7:6f: 51:75:3b:b7:54:4d:d8:27:b7:cc:69:bf:b8:7d:bb: a3:70:cc:e8:d8:7c:78:97:3e:5f:96:e1:f7:1c:0f: 44:67:ee:2c:8e:97:cd:37:16:cd:cd:dc:cf:20:41: e5:06:19:a1:29:49:ca:99:42:4d:c1:e5:4e:1f:98: 6f:fb:fb:8b:28:51:bc:80:f0:03:2c:d5:ed:b2:32: 66:63:99:2c:65:36:9e:7b:e5:6d:de:14:5f:f8:4a: f2:a4:e6:58:ce:a4:11:7c:45:a5:e8:1d:94:d8:cf: 02:bf:9d:ef:16:2f:65:00:e5:a3:05:0d:e3:1e:06: c3:49:e6:6a:20:6c:a4:08:e2:52:67:93:1d:e7:68: dc:e7:8f:c6:26:6e:fd:77:cf:12:f0:ad:a7:78:bf: 34:1c:e9:cb:cf:78:e3:4c:07:85:07:a4:7a:5e:f5: 6b:80:99:59:76:96:16:b9:cd:9d:57:be:95:53:ef: 7e:2e:62:9b:70:72:3d:14:93:f5:3a:57:ef:d5:a0: 29:cb:cb:40:17:1e:83:d9:c3:5e:79:8c:41:82:86: 16:ed:1e:3d:00:cf:9d:a4:8b:ca:92:61:ab:b9:f6: 44:eb:64:d9:ac:81:46:9b:39:62:2b:e1:b3:07:fc: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A0:20:1E:F4:C3:07:33:33:ED:FB:CD:82:7D:7E:E7:32:3C:4C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.77.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0e:12:93:a7:6c:1d:7c:14:07:51:e1:e3:62:1d:3e:e3:3b: c6:ff:06:cf:84:3c:1f:07:1a:8f:eb:ed:47:61:32:fe:61:32: 52:85:ea:5f:59:a5:c2:fe:30:3d:33:70:65:6f:2f:44:96:b4: 42:80:64:e9:c8:68:54:7d:45:6c:74:3f:7a:75:1f:58:5e:66: 8d:fc:6e:cc:6f:73:cc:a9:0e:51:f3:d1:8c:e1:66:6d:c1:21: 1f:7c:15:88:f1:d3:6c:5e:71:32:49:e7:ef:98:34:08:89:40: c8:5d:ba:48:31:94:07:1d:32:71:44:91:a7:2b:2f:99:ea:82: 51:f4:64:fc:36:49:64:79:27:5d:3b:1e:60:e7:43:cc:03:f0: f8:03:5d:8c:2c:f4:33:78:59:49:e2:b5:3a:1f:61:55:07:91: 60:2d:e4:02:b2:dd:89:cb:14:3c:d2:c1:ce:d9:a5:f3:d7:fd: a5:11:64:8f:5a:53:96:61:65:07:ec:b0:24:2c:53:58:5e:45: 8e:ee:10:61:f3:da:b5:ad:66:52:5a:03:27:22:38:43:ad:e9: 2b:aa:b1:a3:91:26:6f:9b:a6:e6:32:aa:ce:59:a2:d6:e3:0d: 84:16:1c:46:99:cd:fe:2a:f6:41:f4:b4:db:ab:00:f5:20:63: 76:39:5a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTM0KvOC3nOVrXXSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZWMyYzcwNmYtMDgwZC00MzBlLThhNDAtNjdhOGQwY2RlMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm51ey1v+37NUVl6P529RdTu3VE3YJ7fMab+4 fbujcMzo2Hx4lz5fluH3HA9EZ+4sjpfNNxbNzdzPIEHlBhmhKUnKmUJNweVOH5hv +/uLKFG8gPADLNXtsjJmY5ksZTaee+Vt3hRf+ErypOZYzqQRfEWl6B2U2M8Cv53v Fi9lAOWjBQ3jHgbDSeZqIGykCOJSZ5Md52jc54/GJm79d88S8K2neL80HOnLz3jj TAeFB6R6XvVrgJlZdpYWuc2dV76VU+9+LmKbcHI9FJP1Olfv1aApy8tAFx6D2cNe eYxBgoYW7R49AM+dpIvKkmGrufZE62TZrIFGmzliK+GzB/z+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCgIB70wwczM+37zYJ9fucyPEw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGE5YjliNWQtZjM1OS0z NTQ3LTg1ZDktM2VlOTA0Y2Y1OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS039MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMOEpOnbB18FAdR4eNiHT7jO8b/Bs+EPB8HGo/r7UdhMv5hMlKF6l9Z pcL+MD0zcGVvL0SWtEKAZOnIaFR9RWx0P3p1H1heZo38bsxvc8ypDlHz0YzhZm3B IR98FYjx02xecTJJ5++YNAiJQMhdukgxlAcdMnFEkacrL5nqglH0ZPw2SWR5J107 HmDnQ8wD8PgDXYws9DN4WUnitTofYVUHkWAt5AKy3YnLFDzSwc7ZpfPX/aURZI9a U5ZhZQfssCQsU1heRY7uEGHz2rWtZlJaAyciOEOt6SuqsaORJm+bpuYyqs5Zotbj DYQWHEaZzf4q9kH0tNurAPUgY3Y5Wtc= -----END CERTIFICATE-----Generated at Thu May 23 19:42:26 2024 by rpki-client on console-fra.rpki-client.org