$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa File: 030d9054-3788-368e-bdb2-e988acaf43e2.roa (raw, json) Hash identifier: 0n5ZPwBiKQlKoQ1Xa8oRrDVYNzYkHiak5WS/LgD7m38= Subject key identifier: C3:64:7A:41:D7:8B:AA:9B:1C:B2:21:61:81:08:C3:FC:89:33:33:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D72D51F3306A03193880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.139.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d7:2d:51:f3:30:6a:03:19:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=6e867a8e-8010-424e-9352-9adb15ee0a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:48:b5:52:61:9f:0e:14:ac:09:4e:00:f6: 19:0e:1c:c8:91:2e:cc:c3:38:a6:28:cb:aa:21:3e: 90:aa:e3:57:13:fc:b6:5c:de:4e:ca:8d:df:fb:cc: 5d:61:cb:1f:d8:b5:f1:c1:00:1d:78:d1:e4:11:ee: b9:04:3e:94:94:16:fa:b5:2b:69:e4:3d:d1:20:a9: d3:57:94:5b:10:dc:83:3a:f7:17:e5:67:46:97:f5: ed:d2:52:c1:e2:ff:d0:ec:a4:eb:1b:f8:4f:98:bc: 71:28:6f:cd:fa:f2:9c:36:c7:88:a5:7e:28:32:59: 71:40:a7:65:a4:0a:a9:93:74:7c:cb:5f:4d:da:e1: ef:5f:40:f1:97:c5:23:e9:7d:83:c8:a4:15:81:eb: 74:ae:77:95:10:f2:b1:4c:af:f9:76:f8:62:3a:61: 38:96:2c:3d:25:ee:dd:1a:1d:ea:4c:39:e5:21:c6: f4:7c:f8:63:76:5b:49:e4:19:98:35:60:f5:21:ab: c2:ee:21:83:80:27:8a:e0:ea:70:42:a3:84:66:8f: 20:81:87:5a:d0:00:ab:91:19:97:42:f5:09:1f:61: c9:78:72:56:73:78:cd:f1:fa:c0:52:5d:cc:78:04: 1e:8a:83:17:55:e4:28:79:50:a5:ae:72:cf:f5:81: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:7A:41:D7:8B:AA:9B:1C:B2:21:61:81:08:C3:FC:89:33:33:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.139.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:23:20:14:41:8f:8b:a0:0f:4d:11:4b:94:d3:03:42:f4:48: 10:00:c8:b8:f2:2f:0e:68:73:4b:6e:1f:c1:e3:13:aa:ef:1c: da:1f:a5:8a:d0:c5:7d:d1:63:7f:3d:48:76:81:48:fb:42:b6: 19:4e:1b:55:02:d5:42:fb:f6:0e:5f:69:c7:b4:5b:29:05:dc: 2f:6c:39:22:54:6a:ab:98:f8:3a:d5:91:b9:fd:29:32:3c:b8: ec:26:32:74:5e:ce:37:51:33:f7:ec:08:fa:01:75:4c:a2:c2: c5:e7:a2:c4:02:5b:08:a7:f2:12:c9:4a:e7:3c:6e:b2:f2:8e: 4a:86:08:cb:56:14:f3:c4:5e:9b:a3:ec:c6:d6:2a:69:dc:03: 0d:20:ca:6f:b3:01:d9:ff:b9:36:46:d6:1a:dc:e3:c2:b8:c1: 4c:ec:81:b4:ef:8f:3f:17:a9:72:52:38:08:2b:30:80:b2:fd: 43:83:6f:a2:74:95:de:03:57:74:62:b7:26:52:be:de:4e:30: 21:16:45:6b:f0:fa:c0:01:14:eb:a4:e6:e6:e3:f9:79:5a:d2: 53:25:8e:1e:80:ae:dc:4b:58:e0:0f:b7:84:e0:9f:7b:2b:bf: c3:0a:5c:c8:e6:c3:ca:ec:7b:04:cc:68:e9:0e:50:ea:a4:72: e2:8f:24:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMtctUfMwagMZOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NmU4NjdhOGUtODAxMC00MjRlLTkzNTItOWFkYjE1ZWUwYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKFItVJhnw4UrAlOAPYZDhzIkS7MwzimKMuq IT6QquNXE/y2XN5Oyo3f+8xdYcsf2LXxwQAdeNHkEe65BD6UlBb6tStp5D3RIKnT V5RbENyDOvcX5WdGl/Xt0lLB4v/Q7KTrG/hPmLxxKG/N+vKcNseIpX4oMllxQKdl pAqpk3R8y19N2uHvX0Dxl8Uj6X2DyKQVget0rneVEPKxTK/5dvhiOmE4liw9Je7d Gh3qTDnlIcb0fPhjdltJ5BmYNWD1IavC7iGDgCeK4OpwQqOEZo8ggYda0ACrkRmX QvUJH2HJeHJWc3jN8frAUl3MeAQeioMXVeQoeVClrnLP9YH8TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNkekHXi6qbHLIhYYEIw/yJMzOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDMwZDkwNTQtMzc4OC0z NjhlLWJkYjItZTk4OGFjYWY0M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIjIBRBj4ugD00RS5TTA0L0SBAAyLjyLw5oc0tuH8HjE6rvHNofpYrQ xX3RY389SHaBSPtCthlOG1UC1UL79g5face0WykF3C9sOSJUaquY+DrVkbn9KTI8 uOwmMnRezjdRM/fsCPoBdUyiwsXnosQCWwin8hLJSuc8brLyjkqGCMtWFPPEXpuj 7MbWKmncAw0gym+zAdn/uTZG1hrc48K4wUzsgbTvjz8XqXJSOAgrMICy/UODb6J0 ld4DV3RityZSvt5OMCEWRWvw+sABFOuk5ubj+Xla0lMljh6ArtxLWOAPt4Tgn3sr v8MKXMjmw8rsewTMaOkOUOqkcuKPJEA= -----END CERTIFICATE-----Generated at Sat May 18 01:54:26 2024 by rpki-client on console-ams.rpki-client.org