$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa File: fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa (raw, json) Hash identifier: BxRWstTujmv13CCB7BVhdbXuGWh7srnPxzj9B6eDeVg= Subject key identifier: FB:68:E1:F9:D3:7B:F0:F0:9D:3E:13:6C:1B:48:CC:49:4A:20:BB:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E4DD78CBD97EB6758200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 66.216.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e4:dd:78:cb:d9:7e:b6:75:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=7be76e1f-7063-48df-9fcf-70a2ec3944cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:06:c6:4e:be:c8:92:bd:3b:6a:e9:c4:58:94: 71:44:58:7e:1a:ec:18:55:7e:00:77:46:6a:6e:fb: 7d:81:86:77:d7:bb:58:10:93:1c:a1:2a:52:05:59: 14:6f:d6:cb:46:c9:06:e5:c7:8e:60:cb:64:e2:1e: 20:77:9d:01:9d:fe:65:a3:3d:87:ed:f2:94:47:14: 21:6d:6c:18:7d:b2:67:43:3f:fc:b9:e2:c7:00:a7: 98:80:e1:0e:b4:70:08:78:22:44:41:d8:c3:6f:cd: f2:83:ad:79:dc:e6:e8:5f:31:93:49:07:29:bd:35: 98:83:47:79:93:7a:18:ff:b0:d4:a5:23:6d:9f:e9: 2e:df:b9:8e:59:ad:a6:5b:d3:56:79:3b:a7:e5:07: 9c:74:73:34:11:29:6c:f5:87:bc:5d:1d:4f:09:77: 14:ee:44:a2:1a:de:9b:ca:d8:cb:26:a5:25:eb:17: d0:bc:9a:07:e9:a7:6c:3e:35:7e:1c:b6:6b:1e:08: 27:66:fa:e0:7a:30:3f:16:e9:d1:fb:e5:c3:19:12: 96:6c:de:b2:34:41:af:13:d3:9b:13:ac:99:1a:9d: 06:20:47:53:b3:ab:92:f9:c8:75:41:22:1e:97:c8: 6a:fa:93:d3:a4:36:e9:52:0b:1b:11:4c:16:52:89: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:68:E1:F9:D3:7B:F0:F0:9D:3E:13:6C:1B:48:CC:49:4A:20:BB:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbff71be-5d2f-3d3a-9173-7e2b6b756775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.216.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cc:2c:91:82:1f:c5:a0:28:a4:08:be:4a:ee:d0:9f:66:cd: d8:27:c9:96:b8:06:ee:3b:78:38:6b:16:8b:0d:6c:3c:79:69: 39:5b:bf:1f:46:bb:0d:6e:a7:58:f4:c8:99:4d:bb:28:1c:03: ea:53:01:b2:09:63:6c:98:96:86:cb:2c:4d:82:fe:8f:3d:69: bc:7e:04:46:e4:ac:8e:23:fa:b2:05:b1:68:e6:fb:cd:6a:39: 11:78:f5:c2:1d:ad:f7:4f:2d:3a:55:3c:89:4e:42:c5:45:99: 04:f8:8a:24:99:77:3e:b6:94:35:76:f0:bf:a1:de:d5:70:a6: e7:be:79:4e:68:8d:56:29:f2:93:03:7f:f0:47:ff:86:78:85: 2f:67:2a:8f:4d:ac:0c:63:6b:23:e8:ab:07:5e:0e:39:b8:75: 8f:0d:8c:79:f4:47:4e:a9:6a:8e:c2:4e:a7:1e:8e:57:15:e4: d7:ee:51:4c:fd:3f:58:70:28:0c:98:36:82:dd:68:c1:0e:2c: e9:38:76:ed:c4:d8:f0:16:02:b1:87:2b:a3:e5:5e:ed:be:3f: 58:5e:ef:46:6c:1e:8f:9f:77:7d:4c:eb:41:0d:97:1b:5f:e3: 4d:4b:9c:ff:79:2b:bb:c7:ab:54:76:87:b2:07:f3:d8:57:11: f8:d6:e6:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuTdeMvZfrZ1ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk N2JlNzZlMWYtNzA2My00OGRmLTlmY2YtNzBhMmVjMzk0NGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgbGTr7Ikr07aunEWJRxRFh+GuwYVX4Ad0Zq bvt9gYZ317tYEJMcoSpSBVkUb9bLRskG5ceOYMtk4h4gd50Bnf5loz2H7fKURxQh bWwYfbJnQz/8ueLHAKeYgOEOtHAIeCJEQdjDb83yg6153OboXzGTSQcpvTWYg0d5 k3oY/7DUpSNtn+ku37mOWa2mW9NWeTun5QecdHM0ESls9Ye8XR1PCXcU7kSiGt6b ytjLJqUl6xfQvJoH6adsPjV+HLZrHggnZvrgejA/FunR++XDGRKWbN6yNEGvE9Ob E6yZGp0GIEdTs6uS+ch1QSIel8hq+pPTpDbpUgsbEUwWUonsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPto4fnTe/DwnT4TbBtIzElKILvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmJmZjcxYmUtNWQyZi0z ZDNhLTkxNzMtN2UyYjZiNzU2Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQtiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbMLJGCH8WgKKQIvkru0J9mzdgnyZa4Bu47eDhrFosNbDx5aTlbvx9G uw1up1j0yJlNuygcA+pTAbIJY2yYlobLLE2C/o89abx+BEbkrI4j+rIFsWjm+81q ORF49cIdrfdPLTpVPIlOQsVFmQT4iiSZdz62lDV28L+h3tVwpue+eU5ojVYp8pMD f/BH/4Z4hS9nKo9NrAxjayPoqwdeDjm4dY8NjHn0R06pao7CTqcejlcV5NfuUUz9 P1hwKAyYNoLdaMEOLOk4du3E2PAWArGHK6PlXu2+P1he70ZsHo+fd31M60ENlxtf 401LnP95K7vHq1R2h7IH89hXEfjW5io= -----END CERTIFICATE-----Generated at Thu May 23 01:44:24 2024 by rpki-client on console-fra.rpki-client.org