$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa File: 87e19014-95d4-3209-bca4-b836be54d913.roa (raw, json) Hash identifier: 0FHb+92OYhuwGhGC+xvOvcNEYiGmkS83U+41gdX5eNg= Subject key identifier: E5:83:B6:D5:DF:CB:9E:01:ED:C8:70:FC:86:D7:C2:55:C6:91:50:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553334362AC7DEEAD4B62B480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 53435 IP address blocks: 72.4.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:43:62:ac:7d:ee:ad:4b:62:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=a3887ad2-e8b8-4409-8385-9e797a0845b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:db:c9:5b:3c:cf:37:d0:a2:74:df:5a:80: fd:48:27:88:f5:33:a5:f7:fa:92:99:30:cc:52:b9: 73:b3:b7:aa:9a:46:c3:d0:e9:08:4c:43:4e:e4:ef: ba:a5:18:42:3b:68:fa:8e:1c:0c:5c:c8:f9:91:45: 89:98:7b:a2:62:aa:d1:a6:e4:3e:dc:84:f4:36:32: 77:80:07:9d:6a:1b:c0:b8:d8:03:56:8e:02:39:6d: 83:18:a6:d7:e1:cb:bf:ea:2f:e7:dc:be:2b:46:1c: b8:73:8f:65:41:06:b3:3a:1f:c3:fd:f5:f9:2d:cf: c8:94:1e:45:c3:b1:ff:c2:27:07:d2:11:ed:9f:3c: 25:87:2a:f8:5e:d2:80:ba:db:46:86:dc:5b:fa:5a: ff:c5:97:89:d0:87:31:e2:d0:e6:91:19:97:1a:2f: 2b:c2:be:a1:90:00:14:34:d4:dc:7e:c2:39:0e:06: ad:af:f3:a8:c3:27:c8:08:7c:9c:82:a0:3f:ff:d4: 78:36:89:7d:2a:c6:ca:86:5f:b5:2d:8b:96:4a:79: 0c:4d:16:17:68:79:e8:01:6a:be:27:24:f5:1c:2d: d6:14:0d:1e:6e:4e:30:00:c8:45:41:2c:b1:b3:03: 8e:f5:3c:ca:28:9e:48:e9:ab:ac:62:1b:5b:f0:af: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:B6:D5:DF:CB:9E:01:ED:C8:70:FC:86:D7:C2:55:C6:91:50:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:36:72:aa:f9:a1:df:57:72:39:8f:ce:5c:3e:1e:b2:18:35: d5:7d:c5:c2:70:ca:15:af:84:d8:3f:9a:06:1f:f5:ea:84:a4: b8:e4:7c:1c:0d:29:ef:70:b7:ee:49:00:b2:fa:29:63:26:86: 68:eb:89:4d:15:16:0d:b9:88:09:c3:31:55:99:c8:ef:be:15: 4e:ca:a9:05:1a:cc:6d:eb:3c:48:cb:eb:a1:f5:4d:a5:57:5a: 78:84:5b:10:db:7d:40:ce:22:65:9a:d7:18:75:60:64:40:ce: b8:49:3e:50:56:81:d9:08:fa:69:01:73:da:c4:3c:8d:d9:32: aa:1b:33:57:b2:2d:0d:00:cb:8d:ae:4c:1b:8d:d5:1f:1e:df: ea:09:4a:d2:2d:f8:60:5c:b6:aa:e8:6e:f7:cd:08:9c:7d:a2: 78:e6:bf:02:87:8d:e2:72:54:63:90:52:e1:1b:3c:d7:cf:f5: 68:5e:e8:31:6b:db:1f:ce:e4:02:a7:5f:83:4b:b9:b6:cf:83: 38:0c:16:36:fd:7c:d9:2d:4b:3b:1a:36:d7:f3:24:bd:19:a4: f0:68:ca:65:32:a7:c4:f1:55:d1:05:90:51:c8:a2:5a:e9:45: 2d:f2:f7:86:50:34:e5:3a:a4:da:31:61:56:e6:80:5b:81:f6: 37:bc:49:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTM0NirH3urUtitIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YTM4ODdhZDItZThiOC00NDA5LTgzODUtOWU3OTdhMDg0NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB7byVs8zzfQonTfWoD9SCeI9TOl9/qSmTDM Urlzs7eqmkbD0OkITENO5O+6pRhCO2j6jhwMXMj5kUWJmHuiYqrRpuQ+3IT0NjJ3 gAedahvAuNgDVo4COW2DGKbX4cu/6i/n3L4rRhy4c49lQQazOh/D/fX5Lc/IlB5F w7H/wicH0hHtnzwlhyr4XtKAuttGhtxb+lr/xZeJ0Icx4tDmkRmXGi8rwr6hkAAU NNTcfsI5Dgatr/OowyfICHycgqA//9R4Nol9KsbKhl+1LYuWSnkMTRYXaHnoAWq+ JyT1HC3WFA0ebk4wAMhFQSyxswOO9TzKKJ5I6ausYhtb8K9zywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWDttXfy54B7chw/IbXwlXGkVA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlMTkwMTQtOTVkNC0z MjA5LWJjYTQtYjgzNmJlNTRkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE2cqr5od9XcjmPzlw+HrIYNdV9xcJwyhWvhNg/mgYf9eqEpLjkfBwN Ke9wt+5JALL6KWMmhmjriU0VFg25iAnDMVWZyO++FU7KqQUazG3rPEjL66H1TaVX WniEWxDbfUDOImWa1xh1YGRAzrhJPlBWgdkI+mkBc9rEPI3ZMqobM1eyLQ0Ay42u TBuN1R8e3+oJStIt+GBctqrobvfNCJx9onjmvwKHjeJyVGOQUuEbPNfP9Whe6DFr 2x/O5AKnX4NLubbPgzgMFjb9fNktSzsaNtfzJL0ZpPBoymUyp8TxVdEFkFHIolrp RS3y94ZQNOU6pNoxYVbmgFuB9je8SZc= -----END CERTIFICATE-----Generated at Thu May 23 20:11:55 2024 by rpki-client on console-ams.rpki-client.org