$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa File: e69787f3-2ec1-3f53-901b-4da1c04da846.roa (raw, json) Hash identifier: WDNXvPCuYkdb7x3dPgbldEINapDwj2ynTDNQBDwn2q0= Subject key identifier: 5F:49:79:D5:D2:29:5F:20:BA:FE:73:4B:B3:06:CD:1F:F2:CE:FF:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D7838088455E748BA780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.141.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d7:83:80:88:45:5e:74:8b:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=511de288-3c5d-4fb6-91b9-3b5f18f5e06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cd:9e:ba:36:2c:69:f9:cf:69:f1:b0:fb:64: 45:ca:8f:1d:c8:7c:1f:5b:49:0b:9f:6f:b9:28:7e: 03:b2:a7:fb:81:a5:b8:80:b4:68:81:b1:b5:b3:08: 9f:a5:74:6e:f2:d5:b2:f2:65:67:e6:cb:00:4e:f6: f3:2c:98:02:2f:13:1a:82:63:50:02:f4:d4:73:9c: 78:d7:13:85:b6:1e:4c:63:7d:11:cd:76:5a:c2:dd: 08:e0:31:af:85:56:22:d7:8c:62:f1:78:b3:15:dd: 8d:38:60:3a:04:9b:73:46:a2:59:75:91:b7:b6:9d: ec:00:00:97:07:2e:e5:00:f8:74:5e:9d:99:7a:f9: f5:53:bf:04:46:a2:1f:f7:5a:f2:cc:15:0d:61:f0: 54:89:50:cc:87:a3:80:70:c8:9c:89:1d:fa:33:53: 37:66:da:41:2c:88:2b:8c:08:d6:2c:7e:ce:d6:9e: 36:63:50:64:df:5f:af:b1:ea:d7:84:6b:31:f4:0f: 84:c2:74:95:f3:e5:97:aa:69:1f:1a:1f:df:ff:3a: 81:62:62:e8:e0:12:28:fb:71:33:60:ae:63:d2:71: 67:48:74:af:eb:49:cb:05:8f:69:41:79:96:e9:6b: e1:ea:63:3d:53:54:78:5a:f6:cc:b3:c9:42:3d:69: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:49:79:D5:D2:29:5F:20:BA:FE:73:4B:B3:06:CD:1F:F2:CE:FF:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.141.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:15:8a:15:bc:f2:8c:7e:8b:0a:f6:16:a6:78:cf:42:93:55: dc:a4:f0:b8:f7:6a:02:a3:2e:ec:17:1d:c5:67:54:9e:23:20: c9:ae:0b:b7:96:c6:ed:a8:ad:d8:82:49:c8:4c:04:69:5c:94: 3e:21:72:90:fc:91:68:8a:34:a3:56:71:9d:71:1d:e0:ee:72: b9:46:46:66:47:9d:3d:36:04:62:9f:1e:ed:22:25:88:45:a1: 27:ae:6c:f6:00:04:0d:9d:a4:9b:0d:bc:af:67:d1:3b:eb:60: d3:07:d0:3e:74:01:16:c6:4f:97:e4:aa:b9:0c:24:eb:10:0a: 66:0e:69:cd:e2:c6:0a:36:c6:a1:8a:7a:ce:80:de:0c:9d:81: 64:d0:0f:d9:31:19:0f:e6:73:e0:bc:c5:cc:bd:34:01:e3:6d: 52:d3:99:a3:13:f7:98:e9:69:65:a5:94:79:d3:3b:83:9c:57: 35:ba:43:09:2c:84:11:88:d4:92:8f:29:a5:cc:29:fb:6d:c4: c3:43:81:e8:d4:c4:0f:79:c1:7e:5d:fe:98:52:3b:0c:77:a1: dc:8e:9f:ba:fe:cf:44:23:db:33:74:97:31:e5:d0:05:ec:ea: 51:50:d3:ea:57:e3:f3:28:4e:b3:9f:b2:26:9a:9f:9d:cf:5c: 1c:c7:36:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMteDgIhFXnSLp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NTExZGUyODgtM2M1ZC00ZmI2LTkxYjktM2I1ZjE4ZjVlMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc2eujYsafnPafGw+2RFyo8dyHwfW0kLn2+5 KH4Dsqf7gaW4gLRogbG1swifpXRu8tWy8mVn5ssATvbzLJgCLxMagmNQAvTUc5x4 1xOFth5MY30RzXZawt0I4DGvhVYi14xi8XizFd2NOGA6BJtzRqJZdZG3tp3sAACX By7lAPh0Xp2Zevn1U78ERqIf91ryzBUNYfBUiVDMh6OAcMiciR36M1M3ZtpBLIgr jAjWLH7O1p42Y1Bk31+vserXhGsx9A+EwnSV8+WXqmkfGh/f/zqBYmLo4BIo+3Ez YK5j0nFnSHSv60nLBY9pQXmW6Wvh6mM9U1R4WvbMs8lCPWkuAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9JedXSKV8guv5zS7MGzR/yzv/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY5Nzg3ZjMtMmVjMS0z ZjUzLTkwMWItNGRhMWMwNGRhODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYVihW88ox+iwr2FqZ4z0KTVdyk8Lj3agKjLuwXHcVnVJ4jIMmuC7eW xu2ordiCSchMBGlclD4hcpD8kWiKNKNWcZ1xHeDucrlGRmZHnT02BGKfHu0iJYhF oSeubPYABA2dpJsNvK9n0TvrYNMH0D50ARbGT5fkqrkMJOsQCmYOac3ixgo2xqGK es6A3gydgWTQD9kxGQ/mc+C8xcy9NAHjbVLTmaMT95jpaWWllHnTO4OcVzW6Qwks hBGI1JKPKaXMKfttxMNDgejUxA95wX5d/phSOwx3odyOn7r+z0Qj2zN0lzHl0AXs 6lFQ0+pX4/MoTrOfsiaan53PXBzHNi8= -----END CERTIFICATE-----Generated at Sat May 18 01:54:43 2024 by rpki-client on console-ams.rpki-client.org