$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/525ce1ac-d2be-3711-82a6-51dec7b5b81e.roa File: 525ce1ac-d2be-3711-82a6-51dec7b5b81e.roa (raw, json) Hash identifier: m5S01CpCJQ0HTq2HR56alPvFCMOw9xhc/07xrXeEkX0= Subject key identifier: F6:8D:C0:73:60:07:E0:26:DB:30:F0:67:83:B8:2D:1D:F4:FB:1A:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553333B1C205B4419D5636B18 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/525ce1ac-d2be-3711-82a6-51dec7b5b81e.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 26914 IP address blocks: 208.83.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:3b:1c:20:5b:44:19:d5:63:6b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=29e4619a-5832-4bd5-947c-238ed93f01b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:0e:4b:a5:c6:fd:d8:ec:72:a8:26:2d:71: 56:12:0b:33:69:cd:56:41:b0:bd:e0:74:d9:23:3b: 5b:25:a8:91:3f:28:57:81:0b:11:e0:e7:1a:b6:84: e5:48:b9:68:84:df:a4:5b:2c:62:da:58:58:74:e5: ae:90:43:45:7b:ec:b7:7f:b1:ac:a0:5e:7d:6e:60: 58:4e:7a:71:3c:e1:dd:e7:55:94:50:08:a5:84:02: 4b:5d:97:14:73:39:52:e9:47:0f:16:dd:db:bf:f3: e8:4e:b1:5d:69:05:bd:83:28:8e:53:23:99:d5:e6: 5e:8b:7b:fd:af:7d:d9:b0:ce:d5:9c:0b:36:b0:82: 14:c8:dc:81:7c:27:23:6c:1e:e9:54:1d:6a:2b:1f: bc:bb:46:cb:15:74:ce:9c:05:49:4f:6a:8c:0a:5b: 81:05:c7:e2:e7:f6:d3:87:7a:7b:45:bc:8a:1f:1a: 24:d0:6c:1e:8b:c4:c5:14:4c:7d:8b:f9:3b:e8:ec: 0f:c6:69:ee:52:18:57:a5:6a:b0:5f:51:3c:a6:e9: 98:02:37:30:9f:e4:05:df:7d:da:37:fe:88:49:34: 61:3c:3c:7c:78:53:21:48:dd:63:75:12:9e:3e:35: 3d:22:68:31:b4:8d:e4:dc:f5:25:47:56:a1:0e:57: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8D:C0:73:60:07:E0:26:DB:30:F0:67:83:B8:2D:1D:F4:FB:1A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/525ce1ac-d2be-3711-82a6-51dec7b5b81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.83.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:88:ef:34:ba:80:fb:bf:d8:16:15:f5:9a:aa:66:df:d7:d8: 53:36:e3:a7:db:fc:58:f3:2e:84:0a:5f:3b:1e:0f:37:7a:9a: da:b9:a2:d3:6f:fb:c5:21:b8:e7:b7:e4:f1:4d:b7:5c:32:84: d8:4e:6a:de:ce:6f:33:36:47:2b:61:e8:e0:2d:50:79:50:95: f9:02:fa:3d:6a:ac:63:b5:83:fa:96:b4:b2:09:da:f5:b8:ef: 38:2a:1f:84:65:0a:53:f8:70:68:05:d8:88:ad:9c:da:a9:cd: 71:bb:f1:4c:e6:6b:d8:09:d5:14:57:ee:fe:2c:fa:78:d2:70: 6a:5a:81:c4:65:64:9d:36:0f:79:cb:6b:eb:16:b5:40:e1:d4: 0a:72:0e:b0:03:fa:46:63:61:a5:e7:bd:e4:da:c7:4b:6a:1e: 4d:4a:bc:bc:99:07:58:77:00:62:e8:ab:47:47:66:6c:09:e7: 92:48:e4:d1:aa:af:f4:c7:b3:16:a7:1a:78:dc:01:1a:0d:a3: df:a3:4a:22:a3:18:9a:5e:7d:a1:e6:54:d3:5b:ff:5d:3a:f5: f8:ae:fb:4f:e4:15:22:26:1c:a9:65:d5:0f:fd:a8:04:4c:20: 76:c0:a4:a3:bb:4d:cf:0a:be:4d:9a:b9:7f:d9:a6:43:41:1e: 51:cd:97:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMzscIFtEGdVjaxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MjllNDYxOWEtNTgzMi00YmQ1LTk0N2MtMjM4ZWQ5M2YwMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXMOS6XG/djscqgmLXFWEgszac1WQbC94HTZ IztbJaiRPyhXgQsR4OcatoTlSLlohN+kWyxi2lhYdOWukENFe+y3f7GsoF59bmBY TnpxPOHd51WUUAilhAJLXZcUczlS6UcPFt3bv/PoTrFdaQW9gyiOUyOZ1eZei3v9 r33ZsM7VnAs2sIIUyNyBfCcjbB7pVB1qKx+8u0bLFXTOnAVJT2qMCluBBcfi5/bT h3p7RbyKHxok0Gwei8TFFEx9i/k76OwPxmnuUhhXpWqwX1E8pumYAjcwn+QF333a N/6ISTRhPDx8eFMhSN1jdRKePjU9ImgxtI3k3PUlR1ahDlfetwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaNwHNgB+Am2zDwZ4O4LR30+xrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI1Y2UxYWMtZDJiZS0z NzExLTgyYTYtNTFkZWM3YjViODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6I7zS6gPu/2BYV9ZqqZt/X2FM246fb/FjzLoQKXzseDzd6mtq5otNv +8UhuOe35PFNt1wyhNhOat7ObzM2Ryth6OAtUHlQlfkC+j1qrGO1g/qWtLIJ2vW4 7zgqH4RlClP4cGgF2IitnNqpzXG78Uzma9gJ1RRX7v4s+njScGpagcRlZJ02D3nL a+sWtUDh1ApyDrAD+kZjYaXnveTax0tqHk1KvLyZB1h3AGLoq0dHZmwJ55JI5NGq r/THsxanGnjcARoNo9+jSiKjGJpefaHmVNNb/1069fiu+0/kFSImHKll1Q/9qARM IHbApKO7Tc8Kvk2auX/ZpkNBHlHNl5w= -----END CERTIFICATE-----Generated at Thu May 23 02:54:02 2024 by rpki-client on console-ams.rpki-client.org