$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa File: aa28106e-e7e6-354b-9d61-537cbb86adc4.roa (raw, json) Hash identifier: 2iheomm1H9tZxZPoT9P7PNuXJoxfbrLG/j0Erw6VsoU= Subject key identifier: A0:1C:14:50:C4:4E:41:36:D3:D3:82:A6:97:65:73:B2:13:66:44:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858463289F604238EF16164DF1F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa Signing time: Thu 13 Jun 2024 13:00:34 +0000 ROA not before: Thu 13 Jun 2024 13:00:34 +0000 ROA not after: Wed 11 Sep 2024 13:00:34 +0000 asID: 55107 IP address blocks: 66.173.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Jun 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:32:89:f6:04:23:8e:f1:61:64:df:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 13 13:00:34 2024 GMT Not After : Sep 11 13:00:34 2024 GMT Subject: CN=b8984c76-9959-42f0-8dca-3561c97c8310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:37:bd:bd:95:3b:d4:28:50:12:3e:d0:c7:ca: f3:37:a7:09:08:1f:39:32:a5:b4:db:3f:5e:ec:87: d6:42:99:52:8a:c9:34:5c:7e:e6:6c:ab:4d:8e:ee: 99:41:d4:b7:c2:1f:a8:18:92:7f:fa:b6:5e:ea:ce: 2c:da:43:d5:38:de:1f:6f:8a:88:88:19:c1:7b:dd: 96:cb:71:e1:36:3b:a3:8c:bc:73:e5:f5:f8:21:dd: 7f:49:3a:f0:64:7c:28:87:d0:27:e2:2b:26:ce:c7: 54:9e:9c:c8:e8:f0:58:cb:79:1e:68:8d:09:30:dd: 7f:d3:48:e1:9d:af:51:fd:ca:0f:4e:06:74:10:b3: 94:cb:43:e3:a5:07:41:e2:fa:3e:02:01:87:14:4e: f4:09:48:95:04:1f:64:45:f5:11:54:68:49:b2:eb: 6d:d2:e9:47:c0:4b:6d:13:15:6a:e2:c1:82:50:af: c4:b9:8d:1d:7c:52:76:65:6b:28:20:44:7c:64:0a: 22:9b:5e:e1:06:5e:a6:a5:b8:e8:ad:4f:da:75:2a: 2a:e4:ce:e4:1d:af:29:9f:2b:9e:d0:ef:c5:17:80: d1:e4:08:cb:ac:1d:a8:c7:49:db:ad:54:28:78:5c: 2a:cd:e3:5f:d4:4e:df:9f:1d:56:50:5c:58:40:b2: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1C:14:50:C4:4E:41:36:D3:D3:82:A6:97:65:73:B2:13:66:44:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa28106e-e7e6-354b-9d61-537cbb86adc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cf:17:8f:f7:8b:59:c8:04:ba:cf:09:9d:ea:2f:1a:67:5f: 33:22:61:28:b6:d3:54:ce:83:ff:81:d4:57:28:c6:51:b6:4b: a3:c2:2e:99:c2:59:57:62:59:8f:1d:58:b7:38:fe:59:e6:0f: 6f:7c:ea:e8:78:82:d5:c6:38:81:55:7c:33:4b:e5:d2:70:05: 2b:27:64:a5:a9:59:bd:6b:f2:26:9a:20:86:89:e1:3c:3e:3a: 4d:1a:74:bb:54:6d:ad:7e:95:fb:e7:d0:b3:30:04:9e:3f:6f: eb:ec:4e:3b:d7:2c:2f:26:a5:17:8d:93:42:d4:c5:cd:7f:6d: c2:2d:aa:f8:ad:44:b6:c4:5f:b5:83:ee:98:5c:1f:4b:4a:af: a6:63:bd:83:d6:c2:ac:bd:d2:fd:67:44:45:df:02:45:10:f4: f3:dc:8b:8f:11:69:f6:5f:cd:02:a2:e2:be:18:2d:13:93:29: b1:ac:3c:07:4c:ce:a8:6a:21:3a:e1:d5:1b:03:05:57:53:22: 83:60:15:72:43:cb:67:e3:12:1d:70:ab:19:1b:f6:ca:c1:9b: 30:4b:ec:71:78:02:bb:a9:87:54:47:e3:ae:ad:7d:57:75:ae: 46:50:bf:48:79:e3:2e:79:3b:aa:aa:45:06:68:7c:43:d2:4d: 58:60:d1:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyifYEI47xYWTfH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk Yjg5ODRjNzYtOTk1OS00MmYwLThkY2EtMzU2MWM5N2M4MzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTe9vZU71ChQEj7Qx8rzN6cJCB85MqW02z9e 7IfWQplSisk0XH7mbKtNju6ZQdS3wh+oGJJ/+rZe6s4s2kPVON4fb4qIiBnBe92W y3HhNjujjLxz5fX4Id1/STrwZHwoh9An4ismzsdUnpzI6PBYy3keaI0JMN1/00jh na9R/coPTgZ0ELOUy0PjpQdB4vo+AgGHFE70CUiVBB9kRfURVGhJsutt0ulHwEtt ExVq4sGCUK/EuY0dfFJ2ZWsoIER8ZAoim17hBl6mpbjorU/adSoq5M7kHa8pnyue 0O/FF4DR5AjLrB2ox0nbrVQoeFwqzeNf1E7fnx1WUFxYQLLMywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAcFFDETkE209OCppdlc7ITZkRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyODEwNmUtZTdlNi0z NTRiLTlkNjEtNTM3Y2JiODZhZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/PF4/3i1nIBLrPCZ3qLxpnXzMiYSi201TOg/+B1FcoxlG2S6PCLpnC WVdiWY8dWLc4/lnmD2986uh4gtXGOIFVfDNL5dJwBSsnZKWpWb1r8iaaIIaJ4Tw+ Ok0adLtUba1+lfvn0LMwBJ4/b+vsTjvXLC8mpReNk0LUxc1/bcItqvitRLbEX7WD 7phcH0tKr6ZjvYPWwqy90v1nREXfAkUQ9PPci48RafZfzQKi4r4YLROTKbGsPAdM zqhqITrh1RsDBVdTIoNgFXJDy2fjEh1wqxkb9srBmzBL7HF4Aruph1RH466tfVd1 rkZQv0h54y55O6qqRQZofEPSTVhg0f0= -----END CERTIFICATE-----Generated at Mon Jun 24 01:43:03 2024 by rpki-client on console-ams.rpki-client.org