$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d4b4a3e-9a5d-3490-9002-d1e7ca617b58.roa File: 7d4b4a3e-9a5d-3490-9002-d1e7ca617b58.roa (raw, json) Hash identifier: X4XLZV45rPauc9kVtyT2G2UtFrweB8rH19zFPXcSeB4= Subject key identifier: 8C:9D:F7:52:8E:C2:81:F7:8B:81:B8:2B:25:97:EF:36:20:4C:46:4B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533312B3C2F728977BDDDC60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d4b4a3e-9a5d-3490-9002-d1e7ca617b58.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 173.191.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:12:b3:c2:f7:28:97:7b:dd:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=787f6839-86c3-4548-90b2-3951e96bf9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e8:77:e8:0f:e7:24:d8:e7:a2:81:43:e9:10: 18:29:50:d2:35:75:61:7c:10:63:a2:b6:f3:4d:c5: 19:84:f3:d1:2c:a1:cc:43:46:d2:d1:02:0f:3a:23: fb:a1:90:a8:f2:70:94:31:0a:9a:01:35:15:9f:24: 71:47:16:a1:2f:98:c1:51:02:3b:fb:11:c5:44:29: 94:95:34:d1:a3:21:53:39:c9:ea:92:47:eb:a8:d6: 35:b5:99:b5:94:8e:a7:ed:ed:51:8e:2d:ba:cd:39: 2b:37:5a:e8:3f:b0:6d:ea:31:fd:86:32:ee:36:cb: 38:9c:49:35:fb:49:1e:54:32:7e:e2:24:d3:00:5c: a5:c6:ec:2e:64:fa:16:56:22:46:3d:2c:bd:eb:23: 2b:10:88:05:58:df:ee:8c:bc:87:d1:0b:9b:1e:c3: 86:04:21:39:85:78:c6:dd:76:db:76:85:95:cb:19: 48:be:3e:77:d4:e3:c0:1a:ff:0c:7d:37:6b:85:21: 29:17:26:db:19:db:89:69:59:ac:53:5d:77:08:4c: c2:ad:18:f0:d5:c9:79:f6:15:e4:56:a4:68:9c:3a: e3:dc:1a:0a:c7:2d:6a:f3:a8:f2:27:0f:1d:3d:bd: db:00:35:30:90:bd:34:7e:17:db:62:dc:fd:cb:fc: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9D:F7:52:8E:C2:81:F7:8B:81:B8:2B:25:97:EF:36:20:4C:46:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d4b4a3e-9a5d-3490-9002-d1e7ca617b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b9:53:87:c9:4f:45:31:50:b4:a8:0e:0a:40:7b:43:70:23: 84:cf:3a:ed:63:ae:b5:48:df:12:c3:f2:49:6f:a8:fd:23:05: 27:15:9c:f2:bd:0b:04:8d:45:55:d4:2a:f0:d3:31:69:bd:37: c8:e5:ac:c0:f9:6a:74:b1:0d:50:21:1f:e2:f8:e8:34:30:a9: a3:48:d3:26:3b:4a:6a:bc:95:5f:8f:2a:5d:cb:49:c2:e8:17: 44:cc:e3:03:b1:9f:f1:3f:2a:b2:b5:9d:77:b6:2f:15:7e:3a: 1a:bc:36:81:42:eb:8c:d3:8e:14:8e:77:ed:f7:f0:50:23:b0: 64:8a:8a:9b:01:97:4a:f1:94:45:0b:5b:00:d7:be:f4:dc:35: 6d:c7:01:de:ef:8f:97:9b:58:ae:e8:99:a5:35:ab:dd:29:d0: 39:4d:9d:24:2c:3a:61:d6:43:96:26:2d:ba:56:03:4d:56:60: 8f:07:79:91:55:8b:20:f6:b3:34:32:f3:ae:b3:df:c9:c6:aa: e6:79:3a:18:d9:43:74:95:d9:a4:a1:5f:bc:c3:f5:4f:89:4c: d5:83:f3:a3:2b:cd:89:7a:9a:6c:c8:c2:1d:c3:b1:10:54:73: 77:3e:10:3e:1d:66:b8:e4:7f:bd:26:63:2a:af:2b:35:5c:86: 65:3c:3b:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxKzwvcol3vd3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk Nzg3ZjY4MzktODZjMy00NTQ4LTkwYjItMzk1MWU5NmJmOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+h36A/nJNjnooFD6RAYKVDSNXVhfBBjorbz TcUZhPPRLKHMQ0bS0QIPOiP7oZCo8nCUMQqaATUVnyRxRxahL5jBUQI7+xHFRCmU lTTRoyFTOcnqkkfrqNY1tZm1lI6n7e1Rji26zTkrN1roP7Bt6jH9hjLuNss4nEk1 +0keVDJ+4iTTAFylxuwuZPoWViJGPSy96yMrEIgFWN/ujLyH0QubHsOGBCE5hXjG 3XbbdoWVyxlIvj531OPAGv8MfTdrhSEpFybbGduJaVmsU113CEzCrRjw1cl59hXk VqRonDrj3BoKxy1q86jyJw8dPb3bADUwkL00fhfbYtz9y/w0BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyd91KOwoH3i4G4KyWX7zYgTEZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2Q0YjRhM2UtOWE1ZC0z NDkwLTkwMDItZDFlN2NhNjE3YjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC25U4fJT0UxULSoDgpAe0NwI4TPOu1jrrVI3xLD8klvqP0jBScVnPK9 CwSNRVXUKvDTMWm9N8jlrMD5anSxDVAhH+L46DQwqaNI0yY7Smq8lV+PKl3LScLo F0TM4wOxn/E/KrK1nXe2LxV+Ohq8NoFC64zTjhSOd+338FAjsGSKipsBl0rxlEUL WwDXvvTcNW3HAd7vj5ebWK7omaU1q90p0DlNnSQsOmHWQ5YmLbpWA01WYI8HeZFV iyD2szQy866z38nGquZ5OhjZQ3SV2aShX7zD9U+JTNWD86MrzYl6mmzIwh3DsRBU c3c+ED4dZrjkf70mYyqvKzVchmU8OxA= -----END CERTIFICATE-----Generated at Thu May 23 19:42:29 2024 by rpki-client on console-fra.rpki-client.org