$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa File: 8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa (raw, json) Hash identifier: 1t+4YRy5/E7qu+RBj8Iw3Pxfj2/LLSL2aTh/BV/yzYw= Subject key identifier: 3C:D7:8E:CA:1E:34:F1:41:09:7A:A0:FD:3D:FE:67:B5:0B:EB:D5:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332B5608F28E87604A3AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 216.205.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2b:56:08:f2:8e:87:60:4a:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=5a71bb33-7431-4e3d-a2f5-962cf93a5910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:04:04:bc:4b:7e:e5:3b:02:a0:1d:f9:e9: d6:ba:c9:fa:90:74:76:b1:ae:b4:4d:d2:ef:37:ca: 71:6f:8a:b5:87:d5:7e:01:1d:88:91:8d:80:ff:de: 8b:97:36:60:ee:5b:95:8e:c0:f8:d3:74:85:fc:e2: 35:3d:33:58:0e:81:9f:10:71:ee:e1:6d:dd:9d:c7: c0:22:ad:83:df:c4:2f:b3:1f:27:aa:37:2c:b4:bb: 07:c5:5c:6d:b7:d8:9b:88:6f:dd:49:ab:17:32:26: 3d:52:c7:77:1e:1d:a4:8d:95:f7:13:5f:96:0a:e8: a3:da:59:bc:f9:72:19:db:fd:6e:3a:2e:28:79:af: 6e:05:d0:ce:14:fc:7f:b6:6f:4a:b5:cf:e7:be:3f: 58:7d:22:03:38:36:b5:7b:88:f6:39:57:87:03:87: 97:79:e4:f6:ef:f9:74:c5:26:a2:1b:e7:28:69:9d: f6:bc:b7:4d:80:e7:df:92:7d:0c:ab:b6:68:ea:b7: 52:ca:9a:48:13:7a:d3:8c:43:29:fc:c9:6d:c6:f9: a6:2b:2e:da:62:6b:d6:f1:58:5d:d0:d6:cb:68:70: 11:84:b6:fb:c0:31:88:16:d4:aa:2b:5e:58:75:14: ab:94:dd:75:0e:e8:fc:0a:35:84:ca:16:58:17:95: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:8E:CA:1E:34:F1:41:09:7A:A0:FD:3D:FE:67:B5:0B:EB:D5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.205.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1e:0c:c9:9f:61:8c:9d:96:52:9b:29:cf:55:b1:ee:a5:d3: 5c:23:6a:99:34:f3:84:0e:75:02:66:9e:36:b0:c0:29:d3:28: 63:01:87:ff:89:d3:e9:79:ed:25:63:34:50:e3:fc:67:96:57: ac:ef:f3:15:1d:e4:53:e0:b0:50:be:e7:0f:d2:0c:b3:e4:0c: 4d:3c:37:97:34:7c:00:91:dd:00:25:f3:5d:4c:96:e9:0b:c4: 53:11:3c:d0:0d:88:8c:7e:d4:af:41:20:4a:18:59:2f:c6:f3: 43:48:f1:5a:56:00:65:42:83:c2:7f:c8:34:b7:5b:3f:54:cd: 1c:2d:e3:1f:eb:1c:82:e6:f1:d7:ea:ce:b1:01:93:76:20:9b: a0:07:00:7c:8a:b0:6c:9e:fd:1d:bf:19:8a:06:89:6c:a0:78: 5d:b0:45:f4:56:d9:6a:b5:10:62:a3:06:12:b0:36:83:21:36: e0:2f:bc:d9:f4:25:c3:32:b1:2b:f0:ba:ec:00:67:25:96:6a: a7:43:4c:14:0d:f3:2d:91:d9:d6:72:47:51:7d:02:dc:08:86: a4:e2:3d:fa:90:20:a0:c1:a7:cd:fc:bf:2f:67:60:d5:d9:71: 7c:8e:82:09:32:3c:b1:81:3b:5b:f4:19:f2:25:f4:53:b8:c6: 8c:32:12:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMytWCPKOh2BKOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NWE3MWJiMzMtNzQzMS00ZTNkLWEyZjUtOTYyY2Y5M2E1OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR8EBLxLfuU7AqAd+enWusn6kHR2sa60TdLv N8pxb4q1h9V+AR2IkY2A/96LlzZg7luVjsD403SF/OI1PTNYDoGfEHHu4W3dncfA Iq2D38Qvsx8nqjcstLsHxVxtt9ibiG/dSasXMiY9Usd3Hh2kjZX3E1+WCuij2lm8 +XIZ2/1uOi4oea9uBdDOFPx/tm9Ktc/nvj9YfSIDODa1e4j2OVeHA4eXeeT27/l0 xSaiG+coaZ32vLdNgOffkn0Mq7Zo6rdSyppIE3rTjEMp/MltxvmmKy7aYmvW8Vhd 0NbLaHARhLb7wDGIFtSqK15YdRSrlN11Duj8CjWEyhZYF5U2UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzXjsoeNPFBCXqg/T3+Z7UL69XTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGViZGNjY2ItYmMzNi0z YjEyLTlmYjktZGMwMmEyMTM0NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2M3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEeDMmfYYydllKbKc9Vse6l01wjapk084QOdQJmnjawwCnTKGMBh/+J 0+l57SVjNFDj/GeWV6zv8xUd5FPgsFC+5w/SDLPkDE08N5c0fACR3QAl811MlukL xFMRPNANiIx+1K9BIEoYWS/G80NI8VpWAGVCg8J/yDS3Wz9UzRwt4x/rHILm8dfq zrEBk3Ygm6AHAHyKsGye/R2/GYoGiWygeF2wRfRW2Wq1EGKjBhKwNoMhNuAvvNn0 JcMysSvwuuwAZyWWaqdDTBQN8y2R2dZyR1F9AtwIhqTiPfqQIKDBp838vy9nYNXZ cXyOggkyPLGBO1v0GfIl9FO4xowyEsM= -----END CERTIFICATE-----Generated at Thu May 23 19:42:30 2024 by rpki-client on console-fra.rpki-client.org