$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa File: db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa (raw, json) Hash identifier: fNgLGwTdIA27GuhT0SSkhNj8ov5m4ihGrvgD53qpwoA= Subject key identifier: EC:DE:A4:75:94:47:85:53:B9:14:14:9E:12:D1:10:5E:17:D1:09:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332EB4E87AD9911CDE87280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 69.40.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:eb:4e:87:ad:99:11:cd:e8:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=349f517f-04a1-402f-8e76-e8e1d87dec04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:62:d1:e8:8d:bb:f6:7d:a7:a9:08:d6:e9: 2a:0d:fb:0e:23:8f:e0:4c:ee:7d:b8:59:4d:12:01: 34:59:93:06:48:c4:5a:80:a5:d7:0e:4e:b7:e9:34: 3d:3b:7b:c3:a9:8f:c7:63:52:11:ab:9c:f0:ad:66: a7:d9:8e:e3:99:8a:bf:31:d8:64:9b:b3:c7:d4:e2: 37:99:b4:14:71:72:f2:db:89:87:c2:35:d1:63:9a: 83:cb:e5:24:d1:03:f9:ba:ad:28:ad:bc:51:ce:da: 90:ae:4f:b1:80:af:d7:9f:2e:5b:96:7b:c9:97:be: eb:0c:c1:eb:e2:2d:1c:e7:00:1e:49:9e:39:48:a2: cf:9b:a9:3e:b1:7e:fa:60:5c:db:c0:56:de:d1:44: c0:93:8a:8d:fc:cc:ef:f1:d7:55:4c:75:cd:ba:b9: bd:21:ab:ac:a8:94:9b:ad:73:2c:81:a2:ae:41:f1: 5f:28:cd:f8:4a:32:57:5b:af:c2:6c:fa:b2:92:62: 7e:e8:b3:5c:38:c1:61:f5:26:5a:58:7b:e3:2d:79: 66:ca:6d:80:bb:f9:d3:67:4f:49:41:30:62:98:4f: 57:ba:8f:90:76:9f:eb:34:84:46:6a:a7:a4:61:9a: e5:96:c5:fd:a9:02:f1:45:fe:00:cc:c3:31:76:97: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DE:A4:75:94:47:85:53:B9:14:14:9E:12:D1:10:5E:17:D1:09:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e3:e0:1e:2d:a3:70:33:93:c1:ff:d1:32:cc:11:ff:f7:85: 50:03:d8:a8:b0:3e:11:6b:be:80:25:4c:a9:15:94:5a:67:ae: eb:be:13:83:9a:8c:8b:2d:b3:20:22:a0:ea:d3:41:69:0b:b8: cb:0a:13:6d:6b:a7:11:fc:ff:0e:df:1f:87:44:84:78:54:20: 38:8e:45:6c:c9:14:20:2a:07:5c:45:c4:81:6f:b3:40:34:7e: 8c:ea:40:54:c0:b4:14:e4:52:8a:1d:03:5a:eb:34:5a:0c:e2: f7:67:bd:0a:e3:8a:cd:3f:ec:53:64:03:71:92:b4:42:77:dd: c2:a0:ec:47:f0:96:fe:6c:d2:9a:1a:f0:5b:c4:69:77:4b:93: 24:12:c7:f3:d4:97:b6:ed:6d:1c:ab:c1:5a:d8:b6:8a:3b:59: 20:76:93:74:0c:1e:51:ac:1f:22:93:6a:80:2d:91:8d:b8:fa: d7:5a:e3:c6:3d:01:c3:9e:1d:f7:5c:b8:57:cc:01:b7:0a:23: 68:2d:06:e8:92:3e:eb:0d:b1:b3:de:3e:2e:d4:6a:d4:56:fb: 01:f6:4d:f1:53:42:6c:61:78:d5:c4:6b:c4:cb:0f:76:ab:9b: 77:14:11:55:96:6b:b4:e3:05:2f:10:46:17:17:d9:6f:53:56: 6d:a1:97:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMutOh62ZEc3ocoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MzQ5ZjUxN2YtMDRhMS00MDJmLThlNzYtZThlMWQ4N2RlYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU5i0eiNu/Z9p6kI1ukqDfsOI4/gTO59uFlN EgE0WZMGSMRagKXXDk636TQ9O3vDqY/HY1IRq5zwrWan2Y7jmYq/Mdhkm7PH1OI3 mbQUcXLy24mHwjXRY5qDy+Uk0QP5uq0orbxRztqQrk+xgK/Xny5blnvJl77rDMHr 4i0c5wAeSZ45SKLPm6k+sX76YFzbwFbe0UTAk4qN/Mzv8ddVTHXNurm9IausqJSb rXMsgaKuQfFfKM34SjJXW6/CbPqykmJ+6LNcOMFh9SZaWHvjLXlmym2Au/nTZ09J QTBimE9Xuo+Qdp/rNIRGaqekYZrllsX9qQLxRf4AzMMxdpdSvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzepHWUR4VTuRQUnhLREF4X0Qm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI5ZGY4YWItMmUwZS0z ZWEyLTlhNzktMDg0ODhjYjAwMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHj4B4to3Azk8H/0TLMEf/3hVAD2KiwPhFrvoAlTKkVlFpnruu+E4Oa jIstsyAioOrTQWkLuMsKE21rpxH8/w7fH4dEhHhUIDiORWzJFCAqB1xFxIFvs0A0 fozqQFTAtBTkUoodA1rrNFoM4vdnvQrjis0/7FNkA3GStEJ33cKg7Efwlv5s0poa 8FvEaXdLkyQSx/PUl7btbRyrwVrYtoo7WSB2k3QMHlGsHyKTaoAtkY24+tda48Y9 AcOeHfdcuFfMAbcKI2gtBuiSPusNsbPePi7UatRW+wH2TfFTQmxheNXEa8TLD3ar m3cUEVWWa7TjBS8QRhcX2W9TVm2hl7c= -----END CERTIFICATE-----Generated at Thu May 23 19:42:36 2024 by rpki-client on console-fra.rpki-client.org