$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f909abf-f31d-3342-b64b-3cb16c2a031b.roa File: 4f909abf-f31d-3342-b64b-3cb16c2a031b.roa (raw, json) Hash identifier: NaDLHlzpcHdwb2PAzY7UKAOpTnyQRaPokW3aT57zA2U= Subject key identifier: F2:20:39:D2:DC:0E:F9:DB:9F:41:FD:83:03:31:AB:AB:7B:9C:B6:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332EE9044E925DBFC734380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f909abf-f31d-3342-b64b-3cb16c2a031b.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.28.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ee:90:44:e9:25:db:fc:73:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=ff18dca0-d6c4-4ada-9715-5b9d96b46ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:19:8a:a0:dd:73:b1:d8:3e:43:17:50:63: 09:0d:9e:ca:d2:3b:97:a4:da:48:29:1b:e0:f8:39: bb:83:5b:89:47:6c:a7:c8:c7:7a:ad:14:40:b4:84: ae:84:36:f0:c7:8d:d8:06:4b:23:22:31:ee:7c:9a: ea:f4:3f:fe:6c:ff:ee:7f:6e:b3:dc:26:22:0f:46: c3:15:21:56:10:32:d1:d3:f0:2e:34:3d:ab:98:7f: 6c:91:fc:fc:59:47:4d:ad:9a:13:6e:ab:86:3b:46: 5e:05:f9:96:0c:a7:fd:95:20:3b:0f:93:25:9e:96: a1:50:09:88:07:22:b9:e7:55:bf:b4:d1:eb:bc:64: 87:5c:88:4b:1c:50:24:c0:48:94:07:fa:43:10:21: f4:6a:5a:38:cb:d9:b2:96:58:e2:c0:84:dd:da:ce: 87:eb:1c:6f:51:6a:a2:94:e0:bc:bc:68:96:34:a4: 56:c3:a8:e0:f3:93:b0:47:1a:53:cd:c0:ce:36:b0: 97:4a:2d:23:40:ef:d6:6d:38:3f:ed:01:37:00:cc: 5b:73:34:65:46:f0:bb:97:cb:30:ee:eb:f7:92:95: 8d:cf:2a:66:8a:49:0d:0e:81:39:93:74:3b:b7:84: 3e:95:53:60:1e:03:ee:d4:3e:5b:e6:49:f9:3b:c4: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:20:39:D2:DC:0E:F9:DB:9F:41:FD:83:03:31:AB:AB:7B:9C:B6:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f909abf-f31d-3342-b64b-3cb16c2a031b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:79:5e:d4:c5:62:19:f7:80:46:b2:7d:69:e4:3a:00:fc:36: 3a:44:90:75:57:fa:1c:a3:5b:87:72:96:ca:e2:ca:8f:55:82: 14:34:99:96:94:76:cb:58:c6:53:88:02:e9:54:b4:c9:c9:9c: 72:61:6e:3b:cb:05:75:72:58:7d:a8:cc:83:96:51:fc:f5:9a: 68:9a:b4:18:0e:73:04:0b:93:d3:23:0b:6c:06:d3:a3:83:0b: 9e:e3:ce:cc:41:6f:1a:c3:aa:2c:ff:19:b6:21:19:4b:da:6a: df:11:d4:c6:46:ed:ce:9e:e7:2e:3d:83:a9:9c:9c:5e:5b:9f: 5e:4f:ed:d6:01:0b:22:34:88:66:10:5c:25:0a:f7:8c:0b:5d: 1f:81:4f:86:bc:a3:d5:5b:e4:d6:7c:a8:f0:44:d2:aa:45:c5: cc:95:75:45:da:16:a7:07:f9:fc:ae:d6:71:1e:ef:c7:15:d5: b0:9f:e4:e8:7f:a3:b3:4e:80:4d:45:c1:68:95:6a:d1:4d:54: 60:bb:64:cf:9f:93:a6:e4:37:6c:85:33:5a:01:5a:36:9b:92: 62:b6:e0:9d:ed:38:f3:17:2a:db:73:61:66:9c:c6:96:f1:4c: c9:49:91:ca:b4:64:9c:8f:75:fc:05:20:ae:55:d6:54:b5:26: 78:04:5e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMu6QROkl2/xzQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZmYxOGRjYTAtZDZjNC00YWRhLTk3MTUtNWI5ZDk2YjQ2ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKsZiqDdc7HYPkMXUGMJDZ7K0juXpNpIKRvg +Dm7g1uJR2ynyMd6rRRAtISuhDbwx43YBksjIjHufJrq9D/+bP/uf26z3CYiD0bD FSFWEDLR0/AuND2rmH9skfz8WUdNrZoTbquGO0ZeBfmWDKf9lSA7D5MlnpahUAmI ByK551W/tNHrvGSHXIhLHFAkwEiUB/pDECH0alo4y9mylljiwITd2s6H6xxvUWqi lOC8vGiWNKRWw6jg85OwRxpTzcDONrCXSi0jQO/WbTg/7QE3AMxbczRlRvC7l8sw 7uv3kpWNzypmikkNDoE5k3Q7t4Q+lVNgHgPu1D5b5kn5O8SJKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIgOdLcDvnbn0H9gwMxq6t7nLbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY5MDlhYmYtZjMxZC0z MzQyLWI2NGItM2NiMTZjMmEwMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl5XtTFYhn3gEayfWnkOgD8NjpEkHVX+hyjW4dylsriyo9VghQ0mZaU dstYxlOIAulUtMnJnHJhbjvLBXVyWH2ozIOWUfz1mmiatBgOcwQLk9MjC2wG06OD C57jzsxBbxrDqiz/GbYhGUvaat8R1MZG7c6e5y49g6mcnF5bn15P7dYBCyI0iGYQ XCUK94wLXR+BT4a8o9Vb5NZ8qPBE0qpFxcyVdUXaFqcH+fyu1nEe78cV1bCf5Oh/ o7NOgE1FwWiVatFNVGC7ZM+fk6bkN2yFM1oBWjabkmK24J3tOPMXKttzYWacxpbx TMlJkcq0ZJyPdfwFIK5V1lS1JngEXok= -----END CERTIFICATE-----Generated at Sat May 18 01:54:31 2024 by rpki-client on console-ams.rpki-client.org