$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae3b743-00ca-315c-ab21-146626273bed.roa File: aae3b743-00ca-315c-ab21-146626273bed.roa (raw, json) Hash identifier: AcrNZQOJfv5Sr5/fEYpfgIVgXP6qLuSwWI6jpudwbGM= Subject key identifier: C8:46:C1:4F:06:EE:B7:AF:50:82:56:7E:A5:70:37:E3:83:0D:52:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333109D442DEE57A6410040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae3b743-00ca-315c-ab21-146626273bed.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 173.189.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:10:9d:44:2d:ee:57:a6:41:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=549696a6-b0ea-44c1-8469-575ac20c0725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:87:8d:a1:88:22:9c:af:b6:38:4e:68:7c: 14:0b:ad:60:6f:4a:01:a8:9f:25:7b:ef:6b:54:4e: 4a:2c:a3:5c:e4:20:1f:41:09:22:ea:b8:89:32:6a: 03:80:a5:b1:16:9e:2e:6e:a8:ce:e0:f6:99:da:0c: 98:6b:6e:a1:6f:dd:bd:67:4b:2a:b5:78:10:81:cc: 88:50:c0:21:c3:e7:3d:4c:0e:9d:15:73:3d:f8:35: 2d:88:52:eb:80:78:e5:6b:dc:f2:38:e6:73:30:d5: 04:de:18:17:bb:4f:ef:ee:83:cd:57:3a:c8:dc:f3: bf:f6:60:35:3c:f3:bd:92:fa:aa:4a:b2:8e:fe:1d: a8:db:82:67:df:9e:91:2d:8f:0b:88:c7:11:42:f2: 61:6c:c2:9a:e9:f7:fa:5c:de:32:0d:2d:01:f2:04: 71:21:bc:6f:3c:19:42:3b:76:31:98:9a:d8:61:61: 04:a6:69:9f:13:56:d0:52:92:af:1e:19:a8:d6:13: 11:a0:90:5d:49:6c:19:c3:8d:c9:ae:69:8c:69:40: 54:38:b9:29:7c:5c:26:25:a7:e8:20:98:35:ab:bf: 63:14:1d:fb:d2:e2:a4:6e:64:90:47:ee:ae:d2:98: cc:12:d0:af:76:62:a0:69:11:5b:6c:a3:65:c0:81: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:46:C1:4F:06:EE:B7:AF:50:82:56:7E:A5:70:37:E3:83:0D:52:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae3b743-00ca-315c-ab21-146626273bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:45:04:13:54:25:0a:a7:83:59:7f:1b:00:ff:0e:03:9f:a7: 9a:fa:10:16:ac:d4:07:cb:e9:67:19:36:3f:b9:1e:dd:ec:85: c4:82:81:87:b0:a9:5f:6a:e4:3b:9b:98:26:a8:bf:50:14:b7: 74:a8:0b:65:03:91:dc:68:49:af:f9:fa:c3:ba:9c:00:c9:98: c3:0e:f4:e3:0f:75:1d:d5:98:14:e1:94:44:03:1d:1d:95:62: 55:b6:ef:ae:14:99:fd:37:44:4a:94:6b:cf:d2:c6:9e:79:21: 4e:45:04:22:ea:f4:f0:f8:82:1e:54:17:ed:21:86:53:44:48: c8:7b:53:64:b0:2c:15:fb:43:87:1f:38:f7:be:97:5d:95:13: 4e:4c:f3:6d:59:84:2d:5d:5b:a0:96:2a:a8:0b:82:ec:3d:b6: 83:fa:d7:66:0a:ce:b2:44:ba:a9:b9:4a:27:0a:2c:1e:ac:81: c7:9a:1f:e4:a4:6c:0f:51:68:a7:18:74:28:c1:cb:68:3b:f9: 18:63:dd:95:41:8c:e4:48:93:09:29:1c:04:da:cc:d1:cc:a2: 4e:79:7a:69:14:d0:cf:0e:3f:8c:0c:30:79:6f:ef:79:58:e0: 3e:0c:6f:de:2d:14:66:27:5c:fd:d6:cd:99:10:26:de:64:1b: c9:97:d5:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxCdRC3uV6ZBAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NTQ5Njk2YTYtYjBlYS00NGMxLTg0NjktNTc1YWMyMGMwNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn6HjaGIIpyvtjhOaHwUC61gb0oBqJ8le+9r VE5KLKNc5CAfQQki6riJMmoDgKWxFp4ubqjO4PaZ2gyYa26hb929Z0sqtXgQgcyI UMAhw+c9TA6dFXM9+DUtiFLrgHjla9zyOOZzMNUE3hgXu0/v7oPNVzrI3PO/9mA1 PPO9kvqqSrKO/h2o24Jn356RLY8LiMcRQvJhbMKa6ff6XN4yDS0B8gRxIbxvPBlC O3YxmJrYYWEEpmmfE1bQUpKvHhmo1hMRoJBdSWwZw43JrmmMaUBUOLkpfFwmJafo IJg1q79jFB370uKkbmSQR+6u0pjMEtCvdmKgaRFbbKNlwIFWVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhGwU8G7revUIJWfqVwN+ODDVJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWFlM2I3NDMtMDBjYS0z MTVjLWFiMjEtMTQ2NjI2MjczYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRFBBNUJQqng1l/GwD/DgOfp5r6EBas1AfL6WcZNj+5Ht3shcSCgYew qV9q5DubmCaov1AUt3SoC2UDkdxoSa/5+sO6nADJmMMO9OMPdR3VmBThlEQDHR2V YlW2764Umf03REqUa8/Sxp55IU5FBCLq9PD4gh5UF+0hhlNESMh7U2SwLBX7Q4cf OPe+l12VE05M821ZhC1dW6CWKqgLguw9toP612YKzrJEuqm5SicKLB6sgceaH+Sk bA9RaKcYdCjBy2g7+Rhj3ZVBjORIkwkpHATazNHMok55emkU0M8OP4wMMHlv73lY 4D4Mb94tFGYnXP3WzZkQJt5kG8mX1XY= -----END CERTIFICATE-----Generated at Thu May 23 02:54:22 2024 by rpki-client on console-ams.rpki-client.org