$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa File: 03553546-6243-34d9-8a02-d58e1b7c7b0e.roa (raw, json) Hash identifier: R0Xbm0YSx3onEttyN/H25837ULvSBJya9DR/ueTYonM= Subject key identifier: AC:70:F1:B2:FF:7B:FC:5D:4D:56:4E:26:F5:2D:B7:5E:21:99:7B:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332ED9E7C3293B8BF48E700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.28.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ed:9e:7c:32:93:b8:bf:48:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=d480ab28-9ea4-416f-a98b-1e953d382dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:34:4a:18:a1:ea:5a:11:12:95:0b:ea:b0: b4:19:d8:b3:ce:57:f9:f0:8f:65:02:c9:6e:85:45: 2e:a8:46:53:ba:57:4a:7c:f4:5c:63:29:43:58:69: 9b:ad:a3:54:df:aa:6c:65:80:2e:bd:cc:6c:b3:7e: f9:60:30:40:50:c2:aa:8c:e6:01:c2:50:f0:ed:43: f8:b1:39:64:94:75:e9:6b:e9:e4:4e:3c:a8:43:2c: 0f:78:c3:5f:90:3f:91:94:99:c9:9a:71:8b:af:bd: 51:71:a0:93:6d:c0:44:a3:f7:8c:32:1d:94:d3:92: c7:d6:8b:ad:14:7a:00:60:7d:e8:c2:64:49:5f:24: 17:52:92:dc:34:d6:b1:24:8d:4b:76:af:4d:55:1a: 5e:68:15:02:f1:0b:08:29:a2:c0:0a:44:72:11:b8: 66:ef:07:3e:4e:06:43:68:bb:4a:69:01:29:1f:e0: fc:e8:55:46:8d:7d:db:74:27:48:89:72:d0:da:a2: 00:14:bb:fb:c1:eb:86:2f:a4:e4:08:c7:93:60:99: 31:5a:8b:fc:59:a5:01:7f:d9:81:64:c8:9e:aa:37: 10:9a:a9:56:9c:c1:82:9d:bb:1f:e1:dd:a4:75:bc: 34:64:d2:f0:16:f5:9c:7b:77:5e:54:2e:16:f4:82: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:70:F1:B2:FF:7B:FC:5D:4D:56:4E:26:F5:2D:B7:5E:21:99:7B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:71:ca:5d:ff:d9:3a:ae:d9:c4:db:a2:d8:26:0c:64:fc:27: e2:0e:c6:df:2b:d7:c2:47:e1:d6:07:77:26:c7:53:c3:49:db: 15:90:9d:d5:1d:73:c9:55:e0:35:53:6f:6b:48:be:71:13:63: 25:26:bd:12:71:69:02:2d:3d:59:0d:51:c8:44:90:15:32:87: cf:73:31:1d:61:75:3b:30:a3:eb:77:91:65:a0:a5:b1:b8:6f: 42:80:01:97:d6:36:54:fd:c7:1c:44:e5:80:c2:b3:c4:a7:4d: 3a:16:d4:e7:e6:36:08:ba:f0:af:a7:d6:fe:0e:bf:b3:aa:27: 0f:9d:74:08:00:39:c4:3f:a0:a1:25:db:63:90:fc:b8:cd:11: cc:46:a7:07:ae:4c:fe:3c:be:a0:f7:af:57:12:ea:d7:ba:a7: 71:13:06:00:b9:0c:bc:d3:28:51:41:74:08:f0:55:a4:65:03: fe:10:08:c5:8d:19:7a:34:a7:68:ba:1e:93:2c:8d:d1:30:e6: 21:98:61:de:bb:ec:45:78:fe:fd:7c:87:00:33:45:2c:ae:3d: fb:bd:24:a2:92:57:76:f9:27:11:45:f1:fc:a1:d9:8d:d0:6e: 90:56:52:de:87:19:b0:8f:16:3e:36:81:7b:5e:e5:67:f4:cc: b2:2b:84:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMu2efDKTuL9I5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZDQ4MGFiMjgtOWVhNC00MTZmLWE5OGItMWU5NTNkMzgyZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRY0Shih6loREpUL6rC0Gdizzlf58I9lAslu hUUuqEZTuldKfPRcYylDWGmbraNU36psZYAuvcxss375YDBAUMKqjOYBwlDw7UP4 sTlklHXpa+nkTjyoQywPeMNfkD+RlJnJmnGLr71RcaCTbcBEo/eMMh2U05LH1out FHoAYH3owmRJXyQXUpLcNNaxJI1Ldq9NVRpeaBUC8QsIKaLACkRyEbhm7wc+TgZD aLtKaQEpH+D86FVGjX3bdCdIiXLQ2qIAFLv7weuGL6TkCMeTYJkxWov8WaUBf9mB ZMieqjcQmqlWnMGCnbsf4d2kdbw0ZNLwFvWce3deVC4W9IJCvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxw8bL/e/xdTVZOJvUtt14hmXv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDM1NTM1NDYtNjI0My0z NGQ5LThhMDItZDU4ZTFiN2M3YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1xyl3/2Tqu2cTbotgmDGT8J+IOxt8r18JH4dYHdybHU8NJ2xWQndUd c8lV4DVTb2tIvnETYyUmvRJxaQItPVkNUchEkBUyh89zMR1hdTswo+t3kWWgpbG4 b0KAAZfWNlT9xxxE5YDCs8SnTToW1OfmNgi68K+n1v4Ov7OqJw+ddAgAOcQ/oKEl 22OQ/LjNEcxGpweuTP48vqD3r1cS6te6p3ETBgC5DLzTKFFBdAjwVaRlA/4QCMWN GXo0p2i6HpMsjdEw5iGYYd677EV4/v18hwAzRSyuPfu9JKKSV3b5JxFF8fyh2Y3Q bpBWUt6HGbCPFj42gXte5Wf0zLIrhOo= -----END CERTIFICATE-----Generated at Sat May 18 01:54:26 2024 by rpki-client on console-ams.rpki-client.org