$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faba4de7-3b63-33ea-aa5f-ab70beae0174.roa File: faba4de7-3b63-33ea-aa5f-ab70beae0174.roa (raw, json) Hash identifier: bmBeEGFjIcB4ZRLN6+ZJBVzhN+/so+rAoMzfBjsXmoY= Subject key identifier: 98:61:BE:98:9A:D6:18:60:F6:7A:36:DB:8A:68:D9:3D:66:97:4E:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332F5A258679DED169BE380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faba4de7-3b63-33ea-aa5f-ab70beae0174.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 72.172.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:f5:a2:58:67:9d:ed:16:9b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=be25bb6b-c57f-4534-a548-3ab1c9282857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:c9:f8:86:35:6f:71:bf:9f:6b:2d:2f:9e: d1:14:b2:ef:ce:80:92:bc:bd:14:fe:90:6b:4d:a8: d3:66:2f:c2:6e:bf:ad:17:fa:22:a6:07:c8:91:df: 9c:08:65:91:2b:e8:f2:01:6e:7e:db:b4:1d:1a:ab: 57:71:c9:d5:4c:d9:46:ad:6a:84:43:30:f6:7f:62: 3d:49:69:bd:dc:67:71:6d:dc:9d:1d:98:b0:69:ec: 72:e5:82:43:b5:6c:2b:61:e3:2c:b4:06:e1:0f:27: 26:98:5f:97:e7:55:3c:47:8f:e9:6c:41:72:82:8c: 02:00:fe:90:0f:84:20:19:cc:4a:84:84:e2:91:1e: b2:91:ad:a4:71:54:d3:93:92:a2:1f:12:39:f8:9e: df:98:9f:c6:3f:8e:43:a4:a8:98:cf:11:74:6b:9b: 7d:ff:06:ef:4a:56:35:24:45:c7:ee:fb:37:01:4c: 68:f7:3a:3f:98:ed:85:a7:57:32:c7:f0:fe:82:62: ac:3e:c7:4b:9d:18:b7:18:a5:44:8a:21:39:bb:4e: e8:34:e4:0d:2b:0a:1a:ef:a8:40:d0:fe:f4:dc:62: c7:2c:bf:e0:82:fd:82:af:3f:e0:ca:b9:2c:3c:3c: c4:8c:6d:3c:79:d4:5a:5e:5e:03:85:f2:e9:8a:d5: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:61:BE:98:9A:D6:18:60:F6:7A:36:DB:8A:68:D9:3D:66:97:4E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faba4de7-3b63-33ea-aa5f-ab70beae0174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:94:c4:1e:21:a5:53:bc:63:1f:47:2e:4c:4a:60:94:37:bd: 26:fa:a0:de:f0:98:d2:30:ac:b0:c2:9c:7a:5c:d1:50:00:b0: 90:d6:6c:16:c5:fa:f6:cc:36:12:7d:99:3c:0e:95:50:20:b4: 9f:25:b1:9b:09:be:e8:de:d7:58:e7:4b:38:dd:6c:76:c0:60: 45:e3:c0:0d:3e:16:e6:ad:48:52:ac:19:ba:59:b4:50:a4:d8: fe:fe:4a:d7:e0:e2:b6:0d:08:5e:3e:f0:95:e0:e2:2c:a8:1d: 44:c5:ff:f6:3d:7d:7d:7b:b2:2d:76:a0:11:7a:84:e1:e8:61: 48:76:d9:68:85:5a:92:65:14:e7:0a:ab:18:85:f5:2d:88:eb: 1b:54:20:41:f8:3e:a1:e9:5e:88:e5:c2:64:e4:cd:a9:73:fd: c5:71:d8:49:be:48:4b:fc:22:f8:8a:1e:b3:2c:cc:5e:30:b7: 82:4f:91:88:a4:ad:da:ae:b5:7b:c6:02:0e:c9:6d:ed:57:b3: b6:4c:75:85:b9:1e:37:0c:a1:0e:e3:f9:f6:54:36:6a:77:f3: cf:5f:fa:f9:c9:62:3d:16:ca:1c:95:28:cc:37:81:93:0f:2e: c0:56:06:35:ab:7f:1e:53:15:41:a2:09:f1:7c:9e:c2:6f:fd: c1:91:a8:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvWiWGed7Rab44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YmUyNWJiNmItYzU3Zi00NTM0LWE1NDgtM2FiMWM5MjgyODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS/J+IY1b3G/n2stL57RFLLvzoCSvL0U/pBr TajTZi/Cbr+tF/oipgfIkd+cCGWRK+jyAW5+27QdGqtXccnVTNlGrWqEQzD2f2I9 SWm93GdxbdydHZiwaexy5YJDtWwrYeMstAbhDycmmF+X51U8R4/pbEFygowCAP6Q D4QgGcxKhITikR6yka2kcVTTk5KiHxI5+J7fmJ/GP45DpKiYzxF0a5t9/wbvSlY1 JEXH7vs3AUxo9zo/mO2Fp1cyx/D+gmKsPsdLnRi3GKVEiiE5u07oNOQNKwoa76hA 0P703GLHLL/ggv2Crz/gyrksPDzEjG08edRaXl4DhfLpitWK9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhhvpia1hhg9no224po2T1ml07wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFiYTRkZTctM2I2My0z M2VhLWFhNWYtYWI3MGJlYWUwMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSKwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqUxB4hpVO8Yx9HLkxKYJQ3vSb6oN7wmNIwrLDCnHpc0VAAsJDWbBbF +vbMNhJ9mTwOlVAgtJ8lsZsJvuje11jnSzjdbHbAYEXjwA0+FuatSFKsGbpZtFCk 2P7+Stfg4rYNCF4+8JXg4iyoHUTF//Y9fX17si12oBF6hOHoYUh22WiFWpJlFOcK qxiF9S2I6xtUIEH4PqHpXojlwmTkzalz/cVx2Em+SEv8IviKHrMszF4wt4JPkYik rdqutXvGAg7Jbe1Xs7ZMdYW5HjcMoQ7j+fZUNmp3889f+vnJYj0WyhyVKMw3gZMP LsBWBjWrfx5TFUGiCfF8nsJv/cGRqAo= -----END CERTIFICATE-----Generated at Sat May 18 01:40:43 2024 by rpki-client on console-fra.rpki-client.org