$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa File: dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa (raw, json) Hash identifier: vW7ioi1qvwpUPrdeayjhfFDGUq3bbSFEqVUYDMVdwXk= Subject key identifier: F5:7D:BE:1F:82:C9:96:66:2C:D9:7C:7C:AC:08:0C:7A:B6:F6:23:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533314CAD0B7F59218F89AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 174.131.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:14:ca:d0:b7:f5:92:18:f8:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=de571881-0401-4dcf-a113-73dbcc5f0fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:f8:b3:5e:90:92:d5:ae:ca:4c:ca:2d:29: 08:56:30:0f:36:8e:29:99:7b:2a:f2:d2:2a:93:4e: 5c:09:63:f5:fe:85:e9:df:7c:4d:4a:c1:cf:0d:f2: 23:82:65:25:c7:2f:94:83:35:45:a4:41:54:3f:c5: f5:c3:24:2a:9c:88:de:a3:b5:e8:10:12:53:72:25: f5:13:6e:5c:91:56:52:61:69:ee:4e:1f:74:60:09: 7a:2c:13:b8:42:51:28:10:64:eb:91:48:41:2c:6c: 8d:89:36:4f:51:82:d2:fe:c8:3f:40:ca:9d:a2:9a: 4f:11:bc:b6:ad:a5:9f:07:74:6c:bb:c4:77:c5:b7: 20:d2:89:c8:26:4c:31:ba:99:4e:cd:6a:73:fe:06: 1a:9e:bf:b3:da:52:c4:bf:bc:44:ef:87:67:7b:f2: 10:2e:0a:b3:0e:cc:fb:e6:0e:bb:25:0d:e2:dc:a1: 95:eb:bf:db:0b:a3:bd:71:3c:e3:36:10:a1:fe:e6: a1:ff:73:4f:55:d8:fd:e4:57:ca:13:03:85:a9:a1: 38:5a:3f:bd:e9:3f:3c:a4:cd:61:5b:74:ab:10:9d: b9:98:a0:29:7f:fc:08:71:a6:82:77:7e:9f:8d:dd: 2f:22:b5:50:ed:2e:cd:97:d9:d7:70:e4:f4:17:d6: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7D:BE:1F:82:C9:96:66:2C:D9:7C:7C:AC:08:0C:7A:B6:F6:23:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc69a0e8-d87e-3fd3-b851-25d370c7d3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2c:97:f6:3e:c8:d9:22:4f:32:12:8a:ba:7d:ce:9b:e5:81: 49:7f:74:ae:c5:01:fb:3b:75:df:55:da:fd:a9:98:63:e8:bf: 9f:52:13:c1:f9:62:ad:4b:9f:de:48:80:42:7e:36:3f:ad:7e: f8:8e:01:63:2d:a8:a1:26:3a:b6:1c:74:54:09:ea:87:43:c0: 0c:70:0b:26:73:8f:94:89:5f:a3:c3:0e:fe:54:3e:6c:1f:eb: 74:6e:ad:a1:3a:95:bb:f1:b0:e0:e8:17:1e:a6:c0:6b:bd:22: 97:14:1e:29:93:50:d2:b7:3a:92:a7:6a:e4:30:ab:8d:d5:8a: 24:5c:e7:d0:4a:e0:ef:32:a8:b2:4d:38:44:41:43:6c:02:fa: 90:f9:88:0d:a1:bc:2b:81:45:7c:7f:97:9c:24:e7:b9:10:9f: 14:27:cd:69:6f:ec:f6:3b:2b:b6:cd:db:96:18:d0:fc:e2:e2: df:99:c0:20:a2:8c:fd:90:15:59:b3:29:18:8e:5d:74:26:46: 9d:5d:4d:98:a1:0d:75:4a:0a:82:14:95:d2:df:1e:e3:03:12: 59:96:e6:a8:b3:87:0e:64:df:7a:8d:8e:26:2e:8f:34:a2:ba: b2:08:60:d0:ec:f9:f3:02:e3:89:83:f0:f5:64:6a:d8:47:71: 19:48:96:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxTK0Lf1khj4msAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZGU1NzE4ODEtMDQwMS00ZGNmLWExMTMtNzNkYmNjNWYwZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzz4s16QktWuykzKLSkIVjAPNo4pmXsq8tIq k05cCWP1/oXp33xNSsHPDfIjgmUlxy+UgzVFpEFUP8X1wyQqnIjeo7XoEBJTciX1 E25ckVZSYWnuTh90YAl6LBO4QlEoEGTrkUhBLGyNiTZPUYLS/sg/QMqdoppPEby2 raWfB3Rsu8R3xbcg0onIJkwxuplOzWpz/gYanr+z2lLEv7xE74dne/IQLgqzDsz7 5g67JQ3i3KGV67/bC6O9cTzjNhCh/uah/3NPVdj95FfKEwOFqaE4Wj+96T88pM1h W3SrEJ25mKApf/wIcaaCd36fjd0vIrVQ7S7Nl9nXcOT0F9b7TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPV9vh+CyZZmLNl8fKwIDHq29iN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGM2OWEwZTgtZDg3ZS0z ZmQzLWI4NTEtMjVkMzcwYzdkM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAsl/Y+yNkiTzISirp9zpvlgUl/dK7FAfs7dd9V2v2pmGPov59SE8H5 Yq1Ln95IgEJ+Nj+tfviOAWMtqKEmOrYcdFQJ6odDwAxwCyZzj5SJX6PDDv5UPmwf 63RuraE6lbvxsODoFx6mwGu9IpcUHimTUNK3OpKnauQwq43ViiRc59BK4O8yqLJN OERBQ2wC+pD5iA2hvCuBRXx/l5wk57kQnxQnzWlv7PY7K7bN25YY0Pzi4t+ZwCCi jP2QFVmzKRiOXXQmRp1dTZihDXVKCoIUldLfHuMDElmW5qizhw5k33qNjiYujzSi urIIYNDs+fMC44mD8PVkathHcRlIliI= -----END CERTIFICATE-----Generated at Thu May 23 20:12:10 2024 by rpki-client on console-ams.rpki-client.org