$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa File: cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa (raw, json) Hash identifier: hDPru87iTryXn5vic17p8twULiW20uag/zmhTOPwt2o= Subject key identifier: 72:FA:18:5E:DC:9A:3C:49:7B:56:E0:98:41:FB:24:35:EF:6F:39:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332EDE5816DC5548599BA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.28.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ed:e5:81:6d:c5:54:85:99:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=c19c2699-ea2f-464d-89a1-15c590196602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a5:e7:5a:80:ec:90:22:59:bd:ca:02:d7:90: 20:24:ed:28:58:49:04:02:94:53:77:da:6b:a6:41: ba:a9:37:47:81:29:7d:eb:85:ae:13:30:88:63:56: d8:86:5d:0a:2f:8c:bb:75:c8:d1:71:4c:b6:9b:4b: de:7d:dc:2f:07:ab:e6:f0:76:8d:4b:38:6e:c0:ae: 54:76:19:1a:99:31:88:02:2a:34:ad:de:7b:6e:9d: 59:cf:a6:62:7c:52:f2:ae:b6:d6:29:84:d5:59:ea: 34:5f:b0:03:85:a4:05:41:64:15:12:d7:59:67:e4: d0:25:44:61:8a:25:83:20:f2:36:f5:4f:39:cb:e4: 82:c0:86:c2:c1:d1:b8:89:0c:0c:18:08:63:89:43: 05:b4:f7:13:55:9a:7c:fe:57:99:db:1c:5f:a7:0a: 46:e7:70:61:7a:25:c9:d8:8b:26:b3:ff:92:7e:a0: 65:ca:5b:e6:35:50:11:d2:1a:5b:ef:28:9b:21:70: 5d:a2:77:5f:d8:4e:97:91:28:2d:8b:66:97:1a:99: 8a:ac:65:1c:40:0b:56:fc:30:e3:56:95:df:0c:24: b1:fe:00:ff:f3:73:5e:44:cc:31:cb:9f:51:d2:1b: 8f:a6:64:d6:8a:64:51:46:22:14:fe:66:b0:b4:c1: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:18:5E:DC:9A:3C:49:7B:56:E0:98:41:FB:24:35:EF:6F:39:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdce3f72-500f-3345-bac2-e46cb70ea9d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:08:bc:08:de:b1:c0:ae:a7:08:7c:e7:d1:20:6e:f5:5c:78: fe:17:8e:d5:39:5e:ad:23:4c:c0:f6:b8:b3:d2:d7:bd:d4:82: c7:bc:73:e0:30:ee:6c:f8:78:f0:bc:b0:a1:ee:af:56:8f:20: 4d:d1:78:9d:bc:54:d1:7c:4e:f3:84:bd:21:97:66:49:2d:a9: 04:ff:0a:db:c1:96:e3:42:de:53:d8:12:2d:31:1b:18:03:bc: 0e:08:0d:17:d1:8d:7c:fa:88:a9:d9:c8:81:12:73:2e:0c:53: 43:7e:8a:e0:67:fe:48:5d:38:9f:7b:d9:2c:fd:c0:09:23:ab: 6d:a6:82:41:1d:e6:97:c5:0d:f5:c1:2c:9a:18:0a:66:1b:31: 85:66:a9:46:c0:9f:e0:a5:9e:ea:21:ea:88:01:09:79:2a:fe: eb:ec:d5:18:66:1b:0e:87:4a:a7:5f:2b:7c:6e:50:5f:0a:38: 95:00:95:b8:9a:b5:72:d5:dc:3f:f3:2b:b2:11:57:09:e8:b9: 53:4c:5f:26:7e:74:bc:f9:fb:23:f1:fc:e7:89:37:35:39:db: 47:c1:0b:3c:f2:11:85:d0:36:a4:6a:ec:05:03:a4:14:1b:69: 01:61:4d:45:55:98:4b:6f:fc:3a:c9:a7:cd:ea:00:f5:a7:bd: 2d:fa:c5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMu3lgW3FVIWZuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YzE5YzI2OTktZWEyZi00NjRkLTg5YTEtMTVjNTkwMTk2NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKXnWoDskCJZvcoC15AgJO0oWEkEApRTd9pr pkG6qTdHgSl964WuEzCIY1bYhl0KL4y7dcjRcUy2m0vefdwvB6vm8HaNSzhuwK5U dhkamTGIAio0rd57bp1Zz6ZifFLyrrbWKYTVWeo0X7ADhaQFQWQVEtdZZ+TQJURh iiWDIPI29U85y+SCwIbCwdG4iQwMGAhjiUMFtPcTVZp8/leZ2xxfpwpG53BheiXJ 2Isms/+SfqBlylvmNVAR0hpb7yibIXBdondf2E6XkSgti2aXGpmKrGUcQAtW/DDj VpXfDCSx/gD/83NeRMwxy59R0huPpmTWimRRRiIU/mawtMEiEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL6GF7cmjxJe1bgmEH7JDXvbzn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2RjZTNmNzItNTAwZi0z MzQ1LWJhYzItZTQ2Y2I3MGVhOWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcIvAjescCupwh859EgbvVceP4XjtU5Xq0jTMD2uLPS173Ugse8c+Aw 7mz4ePC8sKHur1aPIE3ReJ28VNF8TvOEvSGXZkktqQT/CtvBluNC3lPYEi0xGxgD vA4IDRfRjXz6iKnZyIEScy4MU0N+iuBn/khdOJ972Sz9wAkjq22mgkEd5pfFDfXB LJoYCmYbMYVmqUbAn+Clnuoh6ogBCXkq/uvs1RhmGw6HSqdfK3xuUF8KOJUAlbia tXLV3D/zK7IRVwnouVNMXyZ+dLz5+yPx/OeJNzU520fBCzzyEYXQNqRq7AUDpBQb aQFhTUVVmEtv/DrJp83qAPWnvS36xaA= -----END CERTIFICATE-----Generated at Sat May 18 01:40:41 2024 by rpki-client on console-fra.rpki-client.org