$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa File: bd7b5f78-3e59-3b46-bd42-e9580534e712.roa (raw, json) Hash identifier: q+jIpPo7WAjRWiV0h+CaxM8p4DjHf5DTHLQPX81H1AY= Subject key identifier: 05:FD:A4:40:6F:35:E9:A4:BB:21:C0:11:5E:D4:ED:3D:CC:EF:44:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333439ED918680D03531900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 53610 IP address blocks: 63.252.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:43:9e:d9:18:68:0d:03:53:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=3b6b190e-8638-4ded-a02d-d98443541918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:08:c8:e6:05:28:95:1b:aa:c3:b6:a0:84: 1d:48:c4:91:f4:93:3f:63:51:48:23:ad:67:80:62: ab:51:1d:31:9d:05:36:98:91:c1:bb:32:ca:17:ab: 8f:3e:e3:43:1f:c1:af:ad:12:26:93:45:0a:14:c8: fb:83:e5:85:cc:3b:22:3d:eb:95:b8:2d:5a:f8:e2: aa:09:9a:c2:d1:0e:b4:81:86:ac:1b:51:aa:8f:b3: cc:94:a4:b6:2e:80:ce:32:53:8d:bc:c5:6b:4e:31: 26:a3:49:33:9d:e3:83:bc:fc:a4:84:f2:52:3d:51: 71:76:ce:89:0d:56:c8:5b:f7:64:11:ec:6e:d4:c1: ff:a4:4d:4b:ed:3b:c6:2f:a1:6a:77:ee:fc:65:7b: 5f:8c:2b:a6:ca:17:74:d9:95:bd:36:6d:68:f1:cc: b6:c2:49:80:1e:d5:f9:91:85:8e:cc:dd:a4:32:23: 82:41:29:a4:80:e8:45:93:01:a1:23:63:cf:ec:c4: a0:e9:01:68:63:40:65:3c:e2:3d:24:fe:db:7d:e4: b3:cc:dc:40:5e:fa:d6:61:6d:da:a4:a4:06:a8:ee: dd:a7:30:b0:71:9d:6a:b0:07:fd:6b:3e:0c:9c:b0: 61:f9:b8:46:d1:64:a7:ca:23:f7:7b:b0:a8:13:dd: ae:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FD:A4:40:6F:35:E9:A4:BB:21:C0:11:5E:D4:ED:3D:CC:EF:44:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.252.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0d:d8:f4:50:6f:f7:5f:13:8d:f4:d0:ab:9c:9c:91:4b:51: 7c:59:c3:13:c2:5d:86:c9:fa:2a:89:6c:fa:82:1b:28:ba:9a: f3:69:df:12:6a:5f:92:1e:8a:c9:b2:21:85:e7:21:27:a1:07: 82:d7:3d:62:a1:c3:53:f3:7e:17:2a:65:bc:bd:f1:c7:5b:88: e7:a2:ab:f3:7d:4b:af:77:a9:ec:51:aa:a9:5d:3d:cb:eb:2e: 1e:97:08:ea:ae:b7:69:a4:01:7c:0e:4a:a0:5b:30:2d:14:e0: 79:98:f5:bc:9c:8b:07:37:49:92:c0:08:0f:84:40:fd:17:0b: b8:f4:6b:4b:1e:9d:2c:ae:15:7a:04:fb:71:88:9c:85:fa:9e: 58:66:69:44:f3:c9:46:d6:b4:53:f4:e3:36:3a:39:69:4e:9d: b1:06:d0:8b:03:a2:3f:1d:4a:b5:02:9a:cc:e4:f3:b7:92:91: e2:0b:0c:3e:fa:7f:d1:d5:1f:76:92:30:0a:0d:d0:41:cf:c2: 0b:6d:bd:86:c2:9d:bd:1f:6b:f9:97:dc:0f:7f:b6:ca:f0:db: c5:64:c2:25:e5:2d:ba:91:e4:15:db:48:ae:c4:5e:89:cf:ea: 15:f6:64:82:b5:9b:b0:f6:c2:a0:89:17:b8:25:ce:45:20:4d: 9b:24:66:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTM0Oe2RhoDQNTGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk M2I2YjE5MGUtODYzOC00ZGVkLWEwMmQtZDk4NDQzNTQxOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTAIyOYFKJUbqsO2oIQdSMSR9JM/Y1FII61n gGKrUR0xnQU2mJHBuzLKF6uPPuNDH8GvrRImk0UKFMj7g+WFzDsiPeuVuC1a+OKq CZrC0Q60gYasG1Gqj7PMlKS2LoDOMlONvMVrTjEmo0kzneODvPykhPJSPVFxds6J DVbIW/dkEexu1MH/pE1L7TvGL6Fqd+78ZXtfjCumyhd02ZW9Nm1o8cy2wkmAHtX5 kYWOzN2kMiOCQSmkgOhFkwGhI2PP7MSg6QFoY0BlPOI9JP7bfeSzzNxAXvrWYW3a pKQGqO7dpzCwcZ1qsAf9az4MnLBh+bhG0WSnyiP3e7CoE92u+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX9pEBvNemkuyHAEV7U7T3M70STMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ3YjVmNzgtM2U1OS0z YjQ2LWJkNDItZTk1ODA1MzRlNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMN2PRQb/dfE4300KucnJFLUXxZwxPCXYbJ+iqJbPqCGyi6mvNp3xJq X5IeismyIYXnISehB4LXPWKhw1PzfhcqZby98cdbiOeiq/N9S693qexRqqldPcvr Lh6XCOqut2mkAXwOSqBbMC0U4HmY9byciwc3SZLACA+EQP0XC7j0a0senSyuFXoE +3GInIX6nlhmaUTzyUbWtFP04zY6OWlOnbEG0IsDoj8dSrUCmszk87eSkeILDD76 f9HVH3aSMAoN0EHPwgttvYbCnb0fa/mX3A9/tsrw28VkwiXlLbqR5BXbSK7EXonP 6hX2ZIK1m7D2wqCJF7glzkUgTZskZnc= -----END CERTIFICATE-----Generated at Thu May 23 17:57:41 2024 by rpki-client on console-fra.rpki-client.org