$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/541ce537-2a0b-39de-969d-d091bbb9bf76.roa File: 541ce537-2a0b-39de-969d-d091bbb9bf76.roa (raw, json) Hash identifier: IfYwi+aimXB8J+YkFRWBknKJGQriSB1q4FkZ6CE8h6g= Subject key identifier: E0:0C:2A:ED:33:21:D1:D2:A6:EA:07:22:FB:62:A8:39:42:08:16:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533344065FB63443DAB67BE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/541ce537-2a0b-39de-969d-d091bbb9bf76.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 54278 IP address blocks: 216.172.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:44:06:5f:b6:34:43:da:b6:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=a60e92ec-8576-4c4e-b295-c251aed8af42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:56:a3:3d:61:13:cd:ab:e5:2b:2b:af:94: 91:81:e3:b0:21:07:12:32:b7:20:a6:76:a9:3e:b4: 30:df:29:c5:01:30:70:8d:23:e5:0d:5d:2b:c9:e5: 20:6b:e9:bf:ef:fe:d4:2a:7d:7f:f5:1d:47:82:64: f0:04:82:78:a8:1f:39:e0:31:a3:0c:b0:52:82:69: 56:81:cc:c7:d3:78:6a:64:7f:5d:dc:98:af:dc:fc: a1:0b:87:c9:c2:99:20:30:ea:a8:22:a4:06:2d:c0: 5e:d0:88:22:60:30:c1:a3:6d:a0:bc:f1:82:2d:32: 28:c9:ae:b7:6c:f0:fe:25:d3:83:96:9b:6c:b3:a9: 03:62:37:06:96:e7:76:e9:da:05:05:96:bb:ba:71: ad:69:86:0d:bd:b9:fa:f9:c5:c0:59:4b:32:e8:6d: 0d:3e:4a:78:ad:e4:ef:d1:f3:37:98:95:2f:58:7b: b3:e4:c0:c8:ec:8e:6b:21:18:13:46:73:60:80:68: 07:74:08:50:c7:a0:5a:f5:c0:f3:e8:11:81:b3:5e: 32:ab:a3:e3:82:99:af:8c:24:26:ef:d2:45:58:70: 64:51:52:eb:e2:39:63:64:82:0a:64:38:76:61:d3: b4:b5:d4:65:a7:b0:ad:7d:51:b7:0f:a1:9a:75:36: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0C:2A:ED:33:21:D1:D2:A6:EA:07:22:FB:62:A8:39:42:08:16:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/541ce537-2a0b-39de-969d-d091bbb9bf76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:28:d9:bc:37:f9:f6:b3:c1:a1:17:50:74:e3:41:46:f3:b4: e2:6d:ca:f4:40:c9:66:a4:5c:71:30:4e:e1:b2:c6:e6:4c:87: 63:94:25:38:a5:f5:80:a6:fc:67:5a:32:f1:88:62:d4:f1:45: ed:8d:ce:16:0c:2c:27:0a:4c:23:19:da:99:3a:7f:f2:0e:c0: 47:6a:bc:31:5a:26:12:e7:fd:29:f7:ba:52:bd:c5:87:de:eb: eb:1d:7e:33:2a:e6:32:1c:5d:03:3a:55:01:2a:36:1a:ab:99: d8:59:12:e3:1c:bc:36:65:44:bf:85:29:ba:99:ba:9a:5b:a8: ac:b7:cb:7c:fe:f2:69:ad:1a:fa:07:1a:0b:fc:0b:d4:7b:96: d3:c2:70:ba:bf:54:bd:2d:32:d3:d7:2b:89:f2:d1:07:93:8a: 16:4f:ef:9a:ca:42:4d:64:79:0a:16:fc:4c:a9:ba:42:0f:c2: a3:82:b6:af:23:a8:82:58:07:15:e4:ed:28:f4:c4:3b:1c:b6: 19:55:91:02:87:e4:49:f5:c0:69:70:7b:40:73:1e:86:03:fd: fe:e4:9e:2a:af:bf:b5:69:f2:bc:9b:2e:ed:49:39:0f:80:af: bd:8d:7b:af:0f:bf:2f:94:5c:91:b4:1c:97:c2:bc:65:55:d1: 73:e8:61:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTM0QGX7Y0Q9q2e+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YTYwZTkyZWMtODU3Ni00YzRlLWIyOTUtYzI1MWFlZDhhZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqZWoz1hE82r5Ssrr5SRgeOwIQcSMrcgpnap PrQw3ynFATBwjSPlDV0ryeUga+m/7/7UKn1/9R1HgmTwBIJ4qB854DGjDLBSgmlW gczH03hqZH9d3Jiv3PyhC4fJwpkgMOqoIqQGLcBe0IgiYDDBo22gvPGCLTIoya63 bPD+JdODlptss6kDYjcGlud26doFBZa7unGtaYYNvbn6+cXAWUsy6G0NPkp4reTv 0fM3mJUvWHuz5MDI7I5rIRgTRnNggGgHdAhQx6Ba9cDz6BGBs14yq6PjgpmvjCQm 79JFWHBkUVLr4jljZIIKZDh2YdO0tdRlp7CtfVG3D6GadTYFZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAMKu0zIdHSpuoHIvtiqDlCCBaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQxY2U1MzctMmEwYi0z OWRlLTk2OWQtZDA5MWJiYjliZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEo2bw3+fazwaEXUHTjQUbztOJtyvRAyWakXHEwTuGyxuZMh2OUJTil 9YCm/GdaMvGIYtTxRe2NzhYMLCcKTCMZ2pk6f/IOwEdqvDFaJhLn/Sn3ulK9xYfe 6+sdfjMq5jIcXQM6VQEqNhqrmdhZEuMcvDZlRL+FKbqZuppbqKy3y3z+8mmtGvoH Ggv8C9R7ltPCcLq/VL0tMtPXK4ny0QeTihZP75rKQk1keQoW/EypukIPwqOCtq8j qIJYBxXk7Sj0xDscthlVkQKH5En1wGlwe0BzHoYD/f7kniqvv7Vp8rybLu1JOQ+A r72Ne68Pvy+UXJG0HJfCvGVV0XPoYaU= -----END CERTIFICATE-----Generated at Sat May 18 01:40:32 2024 by rpki-client on console-fra.rpki-client.org