$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa File: 6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa (raw, json) Hash identifier: 1iNrk25j1MrZa8xb/liNIz0u6zXZpuTNPN/v+G3LufA= Subject key identifier: D2:9E:EA:83:F2:2E:16:FA:82:57:73:F1:F6:B0:17:A2:5F:4F:B5:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D5B2ED6AC6994F9E32C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d5:b2:ed:6a:c6:99:4f:9e:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=e31779d9-dcb4-4e22-89a4-de5b40d19914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bc:65:ee:90:b0:3b:96:f5:41:7e:87:cf:75: b1:e6:dd:96:55:63:e5:dd:e9:c0:af:7d:41:d7:55: af:5d:5e:ae:d7:44:0a:7c:4e:54:54:f8:4c:69:77: 09:c0:67:33:f5:97:b7:3f:89:00:73:d2:5c:2e:60: f6:fd:82:c7:a8:ed:03:d1:90:59:02:06:c2:ba:76: e5:da:e5:e4:25:d7:f0:99:80:a5:ed:8a:b0:71:6c: 72:c6:bf:49:1e:12:c0:38:b4:ce:93:1d:a5:8d:38: 8b:d7:0f:ba:6b:66:6d:8b:7d:04:ea:66:d6:1d:72: d5:0f:e8:e0:32:79:e4:72:ed:a5:78:c5:06:85:a3: 43:b1:be:1a:4e:22:7e:47:e2:75:c3:e2:24:03:70: 33:c6:e4:eb:08:c3:47:89:b3:62:0a:d6:ec:6a:45: 79:13:fe:39:db:d7:9f:5e:d6:43:5d:47:45:6c:6c: 24:95:94:f0:7c:61:5e:86:e9:a4:8e:14:d1:f4:1f: 49:70:8c:5c:70:3d:ac:4e:db:46:37:aa:3e:95:cd: a5:43:55:bb:a8:d7:d0:f7:3c:9b:14:d0:a5:ec:8b: 7f:48:40:14:a2:83:ee:06:1b:eb:71:d5:e0:a5:3b: 53:db:f8:53:08:75:7f:80:b1:fa:54:e2:dc:d2:b1: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9E:EA:83:F2:2E:16:FA:82:57:73:F1:F6:B0:17:A2:5F:4F:B5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:90:7a:81:af:31:95:4a:99:cb:8a:99:ec:a3:d1:f7:eb:53: 80:93:ac:86:bd:c8:0c:5f:fb:8a:6a:2c:c6:44:26:36:52:f3: 29:70:3d:95:b5:52:8f:06:44:97:d0:c6:c8:38:15:1c:46:cf: 50:12:fe:bf:59:c2:c1:fa:b2:3d:80:c0:da:5f:69:77:06:75: ed:c3:6d:72:75:f7:59:12:47:9b:97:58:82:bf:dc:f8:a3:39: 7b:74:11:1d:35:e0:06:82:be:6a:89:5c:cb:22:ea:38:c0:73: 96:f9:ae:b2:dc:76:6a:44:45:36:3f:50:d0:3a:91:b3:fc:8b: c1:19:0c:31:04:7c:07:e5:7e:da:1e:89:08:d5:7a:77:40:e9: 6a:93:44:0c:d0:73:98:47:e6:88:93:82:45:1d:4d:d4:17:cb: 23:5a:70:c0:09:4e:64:f8:d9:aa:4b:20:d9:62:90:f4:6e:66: 42:87:af:6a:e9:c0:80:25:1f:8c:3f:c2:3a:2e:a7:52:45:c3: f2:49:2f:bc:25:c6:aa:a0:14:98:0c:65:8f:90:8d:2d:a7:e0: 2a:a7:3b:66:08:34:65:a9:11:b0:e9:7f:bf:4f:95:7d:6a:f1: 0c:2f:28:72:09:dc:2f:37:45:f1:48:24:0e:93:65:53:3b:0c: c4:58:86:49 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVTMtWy7WrGmU+eMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZTMxNzc5ZDktZGNiNC00ZTIyLTg5YTQtZGU1YjQwZDE5OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7xl7pCwO5b1QX6Hz3Wx5t2WVWPl3enAr31B 11WvXV6u10QKfE5UVPhMaXcJwGcz9Ze3P4kAc9JcLmD2/YLHqO0D0ZBZAgbCunbl 2uXkJdfwmYCl7YqwcWxyxr9JHhLAOLTOkx2ljTiL1w+6a2Zti30E6mbWHXLVD+jg Mnnkcu2leMUGhaNDsb4aTiJ+R+J1w+IkA3AzxuTrCMNHibNiCtbsakV5E/4529ef XtZDXUdFbGwklZTwfGFehumkjhTR9B9JcIxccD2sTttGN6o+lc2lQ1W7qNfQ9zyb FNCl7It/SEAUooPuBhvrcdXgpTtT2/hTCHV/gLH6VOLc0rGJuwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNKe6oPyLhb6gldz8fawF6JfT7VAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmIwOTI4OTgtMGFmMy0z N2JmLWE1N2EtOGIxMjhlMGU4YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKIQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQJB6ga8xlUqZy4qZ7KPR9+tTgJOshr3IDF/7imosxkQmNlLzKXA9lbVS jwZEl9DGyDgVHEbPUBL+v1nCwfqyPYDA2l9pdwZ17cNtcnX3WRJHm5dYgr/c+KM5 e3QRHTXgBoK+aolcyyLqOMBzlvmustx2akRFNj9Q0DqRs/yLwRkMMQR8B+V+2h6J CNV6d0DpapNEDNBzmEfmiJOCRR1N1BfLI1pwwAlOZPjZqksg2WKQ9G5mQoevaunA gCUfjD/COi6nUkXD8kkvvCXGqqAUmAxlj5CNLafgKqc7Zgg0ZakRsOl/v0+VfWrx DC8ocgncLzdF8UgkDpNlUzsMxFiGSQ== -----END CERTIFICATE-----Generated at Sat May 18 01:40:34 2024 by rpki-client on console-fra.rpki-client.org