$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5afd816e-d204-3fa9-befa-b56c93f869b8.roa File: 5afd816e-d204-3fa9-befa-b56c93f869b8.roa (raw, json) Hash identifier: SrNP/OLDpldamCaBEgBmCZiKmd5EjaDjwq31DHmCqGk= Subject key identifier: F8:43:E3:05:D6:6D:E4:77:BD:B1:BC:DF:9D:39:41:08:13:0F:0F:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533320531AE57A3B649EC240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5afd816e-d204-3fa9-befa-b56c93f869b8.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 208.101.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:20:53:1a:e5:7a:3b:64:9e:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=eb507fa5-52b3-43bc-8aad-4cdafdfd4264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:37:f4:40:5c:3b:52:ff:13:98:df:0e:4d: 5d:87:cf:79:f8:42:43:c3:71:5a:f5:64:0e:53:5a: 54:0f:c1:40:76:58:35:7e:f2:7d:31:fd:51:e3:19: 27:df:33:16:59:d4:37:39:7d:d9:69:52:e1:8d:91: 2a:cd:92:18:98:13:df:e5:ac:9c:fa:d1:b5:49:1b: f3:08:92:09:73:7b:fd:43:d5:08:36:49:21:4a:62: cc:5a:32:b2:e2:fd:32:77:78:fa:12:00:9a:ca:02: a0:4a:1a:82:ee:32:97:9b:ca:8d:67:0f:f0:87:e1: 5c:3e:7d:7a:ef:91:88:38:09:dd:70:89:84:f6:90: ca:d1:d5:bc:9a:03:36:bc:ce:1e:37:ca:a7:85:4f: 18:67:8a:b5:75:56:72:91:b9:82:58:8d:a6:3a:0f: 16:1d:e5:53:0b:99:36:fd:26:c2:04:d2:12:85:8a: ae:c1:1b:a3:af:eb:75:d5:40:66:57:c3:a4:1c:e3: ac:85:be:94:61:08:e8:0a:88:8d:ae:ab:64:dc:15: 05:21:cb:02:1a:6b:b1:a7:98:a5:c7:ac:6a:ce:7c: 7b:cd:9a:c9:bc:51:cb:9f:a9:1d:b7:b9:e6:57:b3: d8:3d:08:7b:f5:fa:fa:39:34:8e:08:bd:24:d1:b5: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:43:E3:05:D6:6D:E4:77:BD:B1:BC:DF:9D:39:41:08:13:0F:0F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5afd816e-d204-3fa9-befa-b56c93f869b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a1:b9:b6:0a:ab:a7:ca:18:65:79:59:73:45:14:1a:64:1f: 2a:b4:1e:76:d6:df:b6:92:de:bf:82:7d:5f:bb:9a:66:a7:9e: 60:ee:26:66:60:76:28:93:b3:b7:74:0f:16:5b:6e:c6:87:db: eb:56:bd:42:37:55:79:52:e3:2c:4a:25:8a:55:85:f8:db:1a: 0d:8b:c5:8d:fe:3f:23:15:d9:32:68:63:b0:67:de:9d:bc:62: 95:5a:9b:a7:9e:ec:35:ac:ec:5c:3f:42:5e:ad:46:75:0e:f5: 83:3d:20:0b:31:b2:08:cb:c5:9c:68:fd:de:7e:d6:90:73:86: 19:ad:d1:82:9a:fd:9d:42:0b:1c:30:93:2a:a2:59:91:d6:ce: fe:7f:8b:8f:73:e3:70:3b:22:02:84:b8:54:78:59:e3:c9:e1: 3a:08:06:7f:28:57:d1:aa:02:1f:81:83:a7:2c:b7:ec:a6:07: 36:0f:9f:31:4e:4a:93:40:a6:d1:f4:c4:f9:c3:07:dc:84:d3: 02:0c:61:68:10:b1:89:f2:5a:0b:e0:a8:7c:5c:09:ab:7e:8f: ea:09:ca:60:54:ad:77:d9:25:66:93:e2:e0:aa:df:10:e9:ac: 28:0d:59:bb:92:68:1f:be:2f:fc:bc:9b:a0:c9:22:71:05:c8: af:5f:7f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMyBTGuV6O2SewkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZWI1MDdmYTUtNTJiMy00M2JjLThhYWQtNGNkYWZkZmQ0MjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz839EBcO1L/E5jfDk1dh895+EJDw3Fa9WQO U1pUD8FAdlg1fvJ9Mf1R4xkn3zMWWdQ3OX3ZaVLhjZEqzZIYmBPf5ayc+tG1SRvz CJIJc3v9Q9UINkkhSmLMWjKy4v0yd3j6EgCaygKgShqC7jKXm8qNZw/wh+FcPn16 75GIOAndcImE9pDK0dW8mgM2vM4eN8qnhU8YZ4q1dVZykbmCWI2mOg8WHeVTC5k2 /SbCBNIShYquwRujr+t11UBmV8OkHOOshb6UYQjoCoiNrqtk3BUFIcsCGmuxp5il x6xqznx7zZrJvFHLn6kdt7nmV7PYPQh79fr6OTSOCL0k0bXeNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhD4wXWbeR3vbG83505QQgTDw8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFmZDgxNmUtZDIwNC0z ZmE5LWJlZmEtYjU2YzkzZjg2OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+hubYKq6fKGGV5WXNFFBpkHyq0HnbW37aS3r+CfV+7mmannmDuJmZg diiTs7d0DxZbbsaH2+tWvUI3VXlS4yxKJYpVhfjbGg2LxY3+PyMV2TJoY7Bn3p28 YpVam6ee7DWs7Fw/Ql6tRnUO9YM9IAsxsgjLxZxo/d5+1pBzhhmt0YKa/Z1CCxww kyqiWZHWzv5/i49z43A7IgKEuFR4WePJ4ToIBn8oV9GqAh+Bg6cst+ymBzYPnzFO SpNAptH0xPnDB9yE0wIMYWgQsYnyWgvgqHxcCat+j+oJymBUrXfZJWaT4uCq3xDp rCgNWbuSaB++L/y8m6DJInEFyK9ff0k= -----END CERTIFICATE-----Generated at Sat May 18 01:54:32 2024 by rpki-client on console-ams.rpki-client.org