$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa File: d8204647-1d71-34d9-8c5a-17c50fa10403.roa (raw, json) Hash identifier: xVkcJCyMj36jsnaKxjoJEiRzBnE4HX43xUUlTISUpzQ= Subject key identifier: 2C:11:2E:77:63:C4:66:C0:1E:D6:81:03:8A:B1:AA:C4:AE:99:08:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858463289C703A8916EBF8333E280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa Signing time: Thu 13 Jun 2024 13:00:34 +0000 ROA not before: Thu 13 Jun 2024 13:00:34 +0000 ROA not after: Wed 11 Sep 2024 13:00:34 +0000 asID: 36471 IP address blocks: 209.255.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:32:89:c7:03:a8:91:6e:bf:83:33:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 13 13:00:34 2024 GMT Not After : Sep 11 13:00:34 2024 GMT Subject: CN=992df9f9-17d0-41b3-93f1-748a70893f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:c4:d2:3d:fa:69:67:bb:c9:8d:ee:1a:e5: ec:df:20:20:14:30:56:26:e2:8d:ab:fe:28:66:da: dd:86:8b:ab:04:57:08:4f:14:aa:a6:8a:f5:f3:8e: 27:40:02:32:00:a9:96:5c:c5:cc:f1:da:00:9a:e0: 85:0a:a7:49:73:35:71:a5:c6:49:0e:0c:06:20:02: 92:cc:07:46:04:5a:82:5d:b3:cb:c0:42:f2:bb:b1: 18:d9:44:af:f9:b9:75:7b:44:9c:36:17:c1:15:8a: a0:e3:f3:78:f9:a1:df:03:50:ec:15:35:42:e0:18: 08:a8:ad:29:31:71:7c:2b:f2:70:3b:7c:13:e8:e4: 6f:de:2b:b1:2b:40:31:ca:64:9e:02:72:b3:14:7b: 61:37:58:96:d3:79:ba:e5:9a:f2:ed:bc:24:11:39: 00:b5:e7:6a:c6:c3:bd:88:77:4d:e2:48:ec:29:a3: 94:44:63:5b:66:e9:5a:59:2e:b1:86:31:b0:26:01: 20:d8:0a:1c:eb:6f:69:08:cb:56:0b:6f:11:f8:95: 18:5c:a5:bf:23:51:8f:42:8d:c5:f4:8a:9d:5a:cf: c9:80:b3:6d:6b:56:9b:a7:4a:f0:f9:84:c7:02:7b: 43:ff:39:40:4b:6e:d3:df:d7:5e:f6:cb:94:a7:71: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:11:2E:77:63:C4:66:C0:1E:D6:81:03:8A:B1:AA:C4:AE:99:08:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8204647-1d71-34d9-8c5a-17c50fa10403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:38:5a:bc:26:dd:f1:67:81:e6:c2:13:ef:87:fc:4a:db:b5: 90:a5:0b:7d:13:03:a7:e7:9d:5b:f6:e9:27:fa:77:e1:eb:71: 95:a4:52:30:b7:81:ee:61:1e:97:67:a0:93:0d:68:4a:c4:d8: 39:44:ae:1f:e6:e5:06:bb:c0:e7:7d:5b:8f:ae:52:0a:fc:14: 8f:8f:ed:f2:5a:3f:e4:d8:bf:12:c4:58:00:de:ca:53:96:78: ab:24:3e:85:15:de:d9:ad:a6:ec:31:b9:c8:b8:aa:b3:41:29: 61:4f:73:7b:86:b4:1a:e6:e1:85:58:fb:80:92:20:60:6d:c3: be:21:b1:a8:ba:29:11:6f:40:18:e9:73:92:60:e7:cc:88:b7: e9:ad:4b:7c:48:1f:b6:f0:5d:e3:c0:2c:c6:7b:a8:0d:c4:a3: 0a:04:7f:69:03:55:f3:d5:40:41:b3:74:0c:44:9b:4f:66:13: d6:29:44:67:e8:5a:66:e2:4d:fe:f8:04:ca:2f:fb:de:c3:ca: a7:63:2f:ef:bd:2a:8e:08:98:51:fd:bb:00:69:82:ad:35:01: 94:f0:93:04:24:f6:95:c9:11:63:3d:b8:df:12:1d:36:f6:f6: 8e:95:bf:5e:36:42:62:a7:78:88:f0:b7:56:cf:6e:54:9d:59: 83:b9:b5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyiccDqJFuv4Mz4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk OTkyZGY5ZjktMTdkMC00MWIzLTkzZjEtNzQ4YTcwODkzZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHLE0j36aWe7yY3uGuXs3yAgFDBWJuKNq/4o ZtrdhourBFcITxSqpor1844nQAIyAKmWXMXM8doAmuCFCqdJczVxpcZJDgwGIAKS zAdGBFqCXbPLwELyu7EY2USv+bl1e0ScNhfBFYqg4/N4+aHfA1DsFTVC4BgIqK0p MXF8K/JwO3wT6ORv3iuxK0AxymSeAnKzFHthN1iW03m65Zry7bwkETkAtedqxsO9 iHdN4kjsKaOURGNbZulaWS6xhjGwJgEg2Aoc629pCMtWC28R+JUYXKW/I1GPQo3F 9IqdWs/JgLNta1abp0rw+YTHAntD/zlAS27T39de9suUp3EXuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwRLndjxGbAHtaBA4qxqsSumQhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDgyMDQ2NDctMWQ3MS0z NGQ5LThjNWEtMTdjNTBmYTEwNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ4Wrwm3fFngebCE++H/ErbtZClC30TA6fnnVv26Sf6d+HrcZWkUjC3 ge5hHpdnoJMNaErE2DlErh/m5Qa7wOd9W4+uUgr8FI+P7fJaP+TYvxLEWADeylOW eKskPoUV3tmtpuwxuci4qrNBKWFPc3uGtBrm4YVY+4CSIGBtw74hsai6KRFvQBjp c5Jg58yIt+mtS3xIH7bwXePALMZ7qA3EowoEf2kDVfPVQEGzdAxEm09mE9YpRGfo WmbiTf74BMov+97DyqdjL++9Ko4ImFH9uwBpgq01AZTwkwQk9pXJEWM9uN8SHTb2 9o6Vv142QmKneIjwt1bPblSdWYO5tRE= -----END CERTIFICATE-----Generated at Tue Jun 25 04:27:03 2024 by rpki-client on console-ams.rpki-client.org