$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa File: 607e03b3-c1cd-33a7-9a62-9057775306ab.roa (raw, json) Hash identifier: 1M0J40/CH5cKmjPfUyZSuNmk9adZ9idfmWTqE0G3Gog= Subject key identifier: BF:06:50:6E:2F:D4:5F:31:82:36:73:16:EC:CF:B1:13:B0:6E:0C:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E453C81607CE12FC4A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 66.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e4:53:c8:16:07:ce:12:fc:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=d07bea52-40e9-40cd-9245-d17b22e0e270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:6b:50:34:db:86:b1:f1:fe:22:00:d7:60: 68:e9:50:ea:b8:1a:13:51:46:f0:00:c6:ba:b0:e8: 46:4c:57:65:c0:a6:10:a8:07:a9:ce:21:70:4c:db: 4d:33:0b:bc:29:c3:87:f2:7a:38:70:72:29:d4:f9: fd:60:db:58:cf:b3:a0:93:fd:12:d4:c3:6e:c3:f5: 4f:6c:84:89:5b:89:16:ab:33:27:90:44:81:f8:8f: 21:14:ad:7c:99:9d:4d:ab:b3:88:a1:e2:0e:69:7a: f8:8e:65:e8:c7:79:80:44:d3:d9:c2:76:e6:a6:db: a0:77:8f:0b:f0:e4:37:3d:12:6f:e9:f6:aa:b5:14: a7:6f:b3:da:3a:b3:65:4e:6e:b4:80:19:bf:60:4b: 7c:42:70:4f:00:a6:8b:23:7e:5b:8a:00:28:17:08: d1:ed:f1:da:d7:f2:d2:dd:dd:81:03:17:e5:39:74: 7d:81:14:59:08:36:c4:09:9a:0f:f1:6b:cf:d0:70: 58:c3:cc:a3:97:8f:ee:5a:cb:8b:ce:98:7b:48:f7: 11:35:79:cf:51:6d:b2:ae:cb:98:a7:76:cd:4f:60: 6d:76:39:01:20:b5:82:39:d9:d2:05:1d:90:61:d7: ba:85:a2:9f:13:70:44:46:97:b4:40:52:00:7e:cf: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:06:50:6E:2F:D4:5F:31:82:36:73:16:EC:CF:B1:13:B0:6E:0C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:54:a8:cd:29:97:40:5e:27:16:20:44:e3:6d:82:be:60:94: 8b:3a:62:5f:e2:f6:1e:20:92:c4:3b:96:6b:9a:2c:f9:74:8d: 4e:05:c7:85:b1:8d:cc:48:33:59:f6:d7:1e:2b:e8:0c:c5:79: 69:5d:c9:c8:0c:d2:7b:00:62:44:95:15:b2:03:08:c1:23:2a: 86:56:79:41:e0:6f:1a:c6:11:17:5d:56:47:3b:c3:50:9d:50: f0:13:be:da:36:de:13:26:6a:e9:15:ab:13:41:87:ca:36:59: 3d:b8:6f:14:8b:11:06:a7:dc:8a:1c:91:15:90:7d:86:bc:ea: 46:e9:1b:5a:41:18:d9:76:6c:f5:a6:7c:54:9d:28:04:a8:4c: 7c:06:d2:0d:bf:e9:de:be:ed:33:e8:66:d2:d7:51:99:da:60: b3:9c:4c:10:4e:4c:10:f3:2b:b0:15:4a:5b:ad:1b:b3:d6:de: 83:b9:0e:5b:05:2c:5a:13:2b:6e:ab:ec:64:83:6b:ce:d1:da: 2c:bf:f5:d5:d4:4e:91:6b:f3:18:1d:9f:0b:b6:86:c8:85:af: 42:d1:70:25:b1:18:72:1e:a3:35:44:bf:b1:b3:b5:d4:da:99: db:24:92:26:55:54:94:41:c5:3f:d3:66:09:32:81:aa:6e:1f: 07:d7:0f:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuRTyBYHzhL8SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZDA3YmVhNTItNDBlOS00MGNkLTkyNDUtZDE3YjIyZTBlMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9prUDTbhrHx/iIA12Bo6VDquBoTUUbwAMa6 sOhGTFdlwKYQqAepziFwTNtNMwu8KcOH8no4cHIp1Pn9YNtYz7Ogk/0S1MNuw/VP bISJW4kWqzMnkESB+I8hFK18mZ1Nq7OIoeIOaXr4jmXox3mARNPZwnbmptugd48L 8OQ3PRJv6faqtRSnb7PaOrNlTm60gBm/YEt8QnBPAKaLI35bigAoFwjR7fHa1/LS 3d2BAxflOXR9gRRZCDbECZoP8WvP0HBYw8yjl4/uWsuLzph7SPcRNXnPUW2yrsuY p3bNT2BtdjkBILWCOdnSBR2QYde6haKfE3BERpe0QFIAfs9S9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8GUG4v1F8xgjZzFuzPsROwbgzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA3ZTAzYjMtYzFjZC0z M2E3LTlhNjItOTA1Nzc3NTMwNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpUqM0pl0BeJxYgRONtgr5glIs6Yl/i9h4gksQ7lmuaLPl0jU4Fx4Wx jcxIM1n21x4r6AzFeWldycgM0nsAYkSVFbIDCMEjKoZWeUHgbxrGERddVkc7w1Cd UPATvto23hMmaukVqxNBh8o2WT24bxSLEQan3IockRWQfYa86kbpG1pBGNl2bPWm fFSdKASoTHwG0g2/6d6+7TPoZtLXUZnaYLOcTBBOTBDzK7AVSlutG7PW3oO5DlsF LFoTK26r7GSDa87R2iy/9dXUTpFr8xgdnwu2hsiFr0LRcCWxGHIeozVEv7GztdTa mdskkiZVVJRBxT/TZgkygapuHwfXD2A= -----END CERTIFICATE-----Generated at Sat May 18 01:54:33 2024 by rpki-client on console-ams.rpki-client.org