$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b403b32-894b-3108-90ae-af2c0bd2b9be.roa File: 5b403b32-894b-3108-90ae-af2c0bd2b9be.roa (raw, json) Hash identifier: ObZJScf2ilcnHgwjiwX9n8eL9sUdFFoX4W+GKm4MR4Y= Subject key identifier: 2B:E9:E7:43:44:4C:D7:91:0F:09:AA:48:1A:0E:DA:78:D8:C8:01:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332F03A614B8D4D364E9980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b403b32-894b-3108-90ae-af2c0bd2b9be.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:f0:3a:61:4b:8d:4d:36:4e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=f0bbaf39-6c71-4a3d-9fb3-b6f6ed9b2ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:98:94:4e:8b:3d:4e:d8:99:26:82:8b:93: c6:b1:35:9c:1d:fb:c4:13:14:c0:b1:a5:7f:d3:3c: 0a:ca:b0:d0:56:c0:a0:06:a1:a7:5b:b7:5d:ee:18: e2:8d:da:7c:37:c2:9a:82:7f:59:06:36:af:dd:28: 8a:ce:be:a3:66:02:5b:33:d2:c1:79:d7:ca:e1:71: e8:91:74:3a:fc:90:dc:e4:98:27:cc:76:75:56:51: ec:ae:eb:0e:2a:39:33:c8:96:8d:e0:ab:3d:2a:e4: 44:5e:b3:f0:10:9d:a5:06:63:ab:5f:fb:f5:fd:6f: 67:5f:ac:04:b1:f7:33:97:df:06:4d:c9:01:d6:fc: 7f:03:87:d1:ef:41:9b:91:cc:b6:d0:c3:f6:02:86: f8:c2:b4:ef:36:89:4c:ee:b0:d1:79:69:95:7a:ba: f2:b2:f1:5d:09:36:82:9c:b3:fb:93:36:a8:6d:92: 65:4a:07:8a:7b:50:43:7d:59:a1:04:b2:69:96:d1: 39:42:6b:a3:df:2e:34:2b:a9:49:ba:75:a1:96:6c: 94:6f:c3:50:4f:59:7d:99:63:fc:85:26:1c:df:28: 8d:6e:2a:a8:5f:ad:91:46:56:b5:5d:f1:0d:b6:2f: 31:32:18:95:dc:9b:2c:14:b9:1e:5f:29:e4:60:1b: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:E7:43:44:4C:D7:91:0F:09:AA:48:1A:0E:DA:78:D8:C8:01:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b403b32-894b-3108-90ae-af2c0bd2b9be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:75:b1:61:ef:f7:57:4e:e3:ff:54:2a:3d:be:79:7a:00:9b: 63:dc:27:a9:1c:20:a7:2c:ce:1d:ec:a8:14:b3:30:e7:29:dc: 8e:2f:7f:d4:25:88:98:06:3e:b7:f1:58:bb:30:5e:bb:43:45: 3b:03:b8:97:d9:5c:cd:fe:bd:cc:29:e9:93:38:c6:12:24:aa: 02:e8:cb:1d:11:e7:d5:4c:2c:c4:2f:9c:cc:22:72:83:89:40: af:43:75:28:ba:6a:a7:51:f1:a4:bb:8d:26:28:35:05:09:1b: d6:0a:4b:30:a5:e0:1f:c0:34:06:a4:57:1d:fc:d8:86:ea:68: 01:86:f1:6f:24:88:3f:c6:6f:01:af:6a:6b:08:64:10:e8:45: 3c:ec:60:87:c2:b2:03:6d:ec:c1:84:4a:9b:82:82:ec:09:f5: 0e:4a:f3:e3:5b:db:98:9b:e1:ad:b7:1c:fc:7b:70:91:a3:fb: c8:35:cf:1a:dd:61:ad:2d:39:cc:53:03:90:d2:7d:10:23:be: 43:4e:bc:c4:8d:8f:c4:f4:37:65:b5:d3:a0:e3:00:92:d0:b8: 23:d0:0b:25:4d:07:9e:34:2c:0b:b5:96:c3:3b:8b:7c:fe:32: c7:7f:f4:43:c7:96:1b:f1:2a:c1:b9:05:56:60:96:fb:a3:a6: e0:45:cc:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvA6YUuNTTZOmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZjBiYmFmMzktNmM3MS00YTNkLTlmYjMtYjZmNmVkOWIyZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBqYlE6LPU7YmSaCi5PGsTWcHfvEExTAsaV/ 0zwKyrDQVsCgBqGnW7dd7hjijdp8N8Kagn9ZBjav3SiKzr6jZgJbM9LBedfK4XHo kXQ6/JDc5JgnzHZ1VlHsrusOKjkzyJaN4Ks9KuREXrPwEJ2lBmOrX/v1/W9nX6wE sfczl98GTckB1vx/A4fR70Gbkcy20MP2Aob4wrTvNolM7rDReWmVerrysvFdCTaC nLP7kzaobZJlSgeKe1BDfVmhBLJpltE5Qmuj3y40K6lJunWhlmyUb8NQT1l9mWP8 hSYc3yiNbiqoX62RRla1XfENti8xMhiV3JssFLkeXynkYBv4xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvp50NETNeRDwmqSBoO2njYyAG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWI0MDNiMzItODk0Yi0z MTA4LTkwYWUtYWYyYzBiZDJiOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB1sWHv91dO4/9UKj2+eXoAm2PcJ6kcIKcszh3sqBSzMOcp3I4vf9Ql iJgGPrfxWLswXrtDRTsDuJfZXM3+vcwp6ZM4xhIkqgLoyx0R59VMLMQvnMwicoOJ QK9DdSi6aqdR8aS7jSYoNQUJG9YKSzCl4B/ANAakVx382IbqaAGG8W8kiD/GbwGv amsIZBDoRTzsYIfCsgNt7MGESpuCguwJ9Q5K8+Nb25ib4a23HPx7cJGj+8g1zxrd Ya0tOcxTA5DSfRAjvkNOvMSNj8T0N2W106DjAJLQuCPQCyVNB540LAu1lsM7i3z+ Msd/9EPHlhvxKsG5BVZglvujpuBFzAo= -----END CERTIFICATE-----Generated at Thu May 23 01:44:14 2024 by rpki-client on console-fra.rpki-client.org