$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa File: 6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa (raw, json) Hash identifier: d1e9TrIurAPoJgSQ5Lw6KOoJT6BA4MNljtM3U8dTuCo= Subject key identifier: 74:3F:54:87:08:40:83:49:9E:51:B0:8B:D8:9D:BB:AA:37:0C:B9:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533338FA3FB20389E262F600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 25660 IP address blocks: 64.198.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:38:fa:3f:b2:03:89:e2:62:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=5477fb9c-aa67-431c-b0a0-33a6e0d34138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:72:b8:df:23:27:fa:a0:ed:63:f8:71:1b: c5:ae:22:35:f0:3e:92:28:a7:8c:e4:a8:dd:7d:1b: 9d:a3:96:d9:2f:57:3e:b3:95:56:64:1d:60:d5:98: e8:3a:ab:7b:24:4d:06:c2:ee:e3:9f:e6:10:e6:8e: 78:26:a3:ee:f6:b0:5a:7c:8f:34:8f:da:09:84:80: 52:5a:4d:25:a7:b8:a4:0c:a1:e6:75:d6:1b:20:56: 02:76:9f:05:fe:0c:dc:61:c6:67:db:f7:7e:aa:2b: 44:c7:a6:54:42:03:8b:2e:ba:57:63:cd:81:e6:83: 42:7d:97:64:bf:76:fe:bb:e0:42:08:dc:a6:93:5b: ba:7a:bc:a7:b0:76:0f:ba:8f:0a:19:c5:f6:48:4f: 74:79:f5:06:7c:f2:1e:7c:50:a3:7c:66:e4:69:1c: 20:03:57:d9:af:26:19:7b:9e:9e:76:a0:0c:e3:ce: 87:97:0c:75:93:58:25:ff:da:6b:91:eb:3f:61:e8: e4:93:83:26:50:32:41:6b:fb:ec:b5:35:a2:b8:d7: fc:0d:44:10:79:88:bb:35:41:be:b0:52:a6:98:8b: 77:7a:be:8b:cc:2d:1d:29:28:55:a6:82:f7:78:2a: f6:00:ab:30:1f:eb:4e:ac:5d:6b:58:b1:4e:04:d0: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3F:54:87:08:40:83:49:9E:51:B0:8B:D8:9D:BB:AA:37:0C:B9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ef6b5f0-4a95-3ac4-b3ee-f5a7f06abd56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.198.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:eb:3e:3c:37:4f:b0:30:f9:d3:f6:b8:33:02:38:03:0b:34: 14:a6:58:a7:7a:5e:fd:1c:47:f8:3c:0e:25:87:9e:76:48:38: 5a:ba:93:14:e6:17:1a:d6:2d:07:dd:7a:a4:16:7a:47:8a:1b: 52:2f:d0:2e:2a:81:97:f8:eb:a1:59:f9:ea:c4:dd:e2:ef:5f: 94:5a:31:cd:1e:85:d2:c3:6b:81:b6:a3:b2:b6:14:44:16:e3: 5d:81:b4:f9:a8:ec:17:5e:d6:c0:ac:1a:6d:eb:92:d6:d3:a4: 78:3f:6c:0e:d5:8c:c7:7f:49:5a:18:5b:75:e6:ec:f6:d2:09: f0:77:02:bf:10:d9:f4:9c:a7:92:f4:05:96:1c:3e:cd:c9:bb: 8c:5f:30:e0:b6:3f:e5:5b:b8:c1:9c:1e:c5:79:69:25:05:81: 5e:80:70:c1:4f:3f:60:17:63:a1:25:31:01:ec:93:5c:42:72: 26:4c:3b:3b:20:16:91:1d:a5:5c:45:29:fe:f5:89:31:0b:6b: ac:41:7d:f1:ee:c2:3c:e8:f7:c2:c7:f8:df:0f:1b:78:25:38: 41:15:93:0f:63:7f:db:db:85:3f:34:20:1c:66:20:93:e2:f3: d3:86:03:60:70:97:b1:6a:f9:f8:80:5c:f8:95:f6:be:f1:ec: c8:00:16:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMzj6P7IDieJi9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NTQ3N2ZiOWMtYWE2Ny00MzFjLWIwYTAtMzNhNmUwZDM0MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04lyuN8jJ/qg7WP4cRvFriI18D6SKKeM5Kjd fRudo5bZL1c+s5VWZB1g1ZjoOqt7JE0Gwu7jn+YQ5o54JqPu9rBafI80j9oJhIBS Wk0lp7ikDKHmddYbIFYCdp8F/gzcYcZn2/d+qitEx6ZUQgOLLrpXY82B5oNCfZdk v3b+u+BCCNymk1u6erynsHYPuo8KGcX2SE90efUGfPIefFCjfGbkaRwgA1fZryYZ e56edqAM486Hlwx1k1gl/9prkes/Yejkk4MmUDJBa/vstTWiuNf8DUQQeYi7NUG+ sFKmmIt3er6LzC0dKShVpoL3eCr2AKswH+tOrF1rWLFOBNDVjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ/VIcIQINJnlGwi9idu6o3DLnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmVmNmI1ZjAtNGE5NS0z YWM0LWIzZWUtZjVhN2YwNmFiZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3rPjw3T7Aw+dP2uDMCOAMLNBSmWKd6Xv0cR/g8DiWHnnZIOFq6kxTm FxrWLQfdeqQWekeKG1Iv0C4qgZf466FZ+erE3eLvX5RaMc0ehdLDa4G2o7K2FEQW 412BtPmo7Bde1sCsGm3rktbTpHg/bA7VjMd/SVoYW3Xm7PbSCfB3Ar8Q2fScp5L0 BZYcPs3Ju4xfMOC2P+VbuMGcHsV5aSUFgV6AcMFPP2AXY6ElMQHsk1xCciZMOzsg FpEdpVxFKf71iTELa6xBffHuwjzo98LH+N8PG3glOEEVkw9jf9vbhT80IBxmIJPi 89OGA2Bwl7Fq+fiAXPiV9r7x7MgAFqE= -----END CERTIFICATE-----Generated at Thu May 23 16:33:43 2024 by rpki-client on console-ams.rpki-client.org