$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/065722d4-d56b-3792-8fe3-41281c69c8ff.roa File: 065722d4-d56b-3792-8fe3-41281c69c8ff.roa (raw, json) Hash identifier: zmymJDNDSLDbHPG431gPPx4nRBaX6WsEs+SwIdKrEKc= Subject key identifier: 2D:D6:56:76:8D:48:10:0C:AD:D0:56:7D:BA:CD:14:63:F3:0E:2D:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332EF10371465E421DD8E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/065722d4-d56b-3792-8fe3-41281c69c8ff.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.28.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ef:10:37:14:65:e4:21:dd:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=7931fafc-e731-4a7b-a1cc-32b1af6a3df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:7d:06:4d:a9:cd:5d:1d:53:63:dc:f7:49: ad:64:73:1a:00:ec:b6:f9:d5:24:ad:04:f9:83:73: ab:fc:e9:06:85:87:ce:fd:a3:0a:24:cd:7a:93:29: a7:98:70:ff:0a:18:c5:4c:88:8f:e5:53:cb:92:54: b5:f2:fa:e9:ec:b2:d4:0d:6a:24:d6:0e:c3:63:19: 05:65:cb:fc:e5:a9:59:20:86:2c:88:b6:bb:b5:6e: 19:ce:fb:fc:48:9a:8b:01:3c:af:84:8c:ab:27:b7: cf:7d:8f:3c:da:df:26:c8:dc:a1:9c:c6:99:d8:7d: 14:8c:fa:c8:bf:de:e1:c6:52:dd:84:e0:1f:f0:d9: 4b:1c:4a:42:6c:6e:e6:a5:7e:49:7c:9c:7d:57:f7: 53:bf:65:6e:ca:bb:14:cd:96:13:21:d0:21:ab:38: 72:a2:0f:13:d7:f5:f8:d1:03:8f:43:ae:c5:7b:d2: bf:f4:6f:32:bb:d6:1e:59:14:43:cb:7d:bc:84:94: 22:27:d6:3f:46:1c:0e:f0:06:1f:51:4c:7f:31:2f: 11:2f:7f:68:4d:21:19:f0:2f:70:e2:b9:61:da:8a: 65:ba:98:42:eb:29:88:4a:81:4e:5b:92:e0:65:56: 23:12:83:bd:07:07:aa:92:d7:57:7c:62:fc:d3:71: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D6:56:76:8D:48:10:0C:AD:D0:56:7D:BA:CD:14:63:F3:0E:2D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/065722d4-d56b-3792-8fe3-41281c69c8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:da:47:bc:25:56:3a:dd:40:2d:e6:a2:38:92:f6:ef:7e:ff: db:e8:a1:19:98:4d:e5:a7:78:ab:3c:56:59:85:ae:65:b1:33: 2b:fb:33:b9:12:69:ab:5f:9e:32:07:78:69:8a:68:c4:52:1e: d8:24:25:08:5d:03:c1:f8:33:f0:f3:df:4e:bd:64:4f:4d:c8: 79:3d:e2:5f:b8:7a:9a:1f:60:64:a6:fe:63:8c:93:79:4e:e9: 4e:04:52:44:c8:48:15:a3:44:c9:c7:c3:a6:b9:fb:15:52:10: 7c:e9:11:80:7e:c5:c1:61:db:a4:16:af:d7:b4:98:1d:9c:b5: 2c:9f:07:b2:65:e2:02:bd:95:46:86:01:f5:fd:2e:18:94:80: 64:a3:b0:08:b8:f3:8b:9f:f3:a9:24:ef:17:54:7f:3a:60:7b: 74:b8:ff:c7:f7:17:ac:fb:49:06:40:92:71:e5:45:21:4b:cf: 21:4b:46:8a:06:39:b2:30:55:01:6f:c6:69:c1:c6:e5:24:89: 19:b6:6f:e6:5f:15:3e:a7:f7:c2:09:3f:f6:c9:59:59:9e:4a: 78:9f:7f:07:b0:7f:5f:d3:5b:19:26:78:27:4d:0f:18:bc:98: da:a0:4b:fd:64:4a:cf:45:a6:ca:de:b1:7f:45:91:34:37:00: 5e:2d:09:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMu8QNxRl5CHdjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NzkzMWZhZmMtZTczMS00YTdiLWExY2MtMzJiMWFmNmEzZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIl9Bk2pzV0dU2Pc90mtZHMaAOy2+dUkrQT5 g3Or/OkGhYfO/aMKJM16kymnmHD/ChjFTIiP5VPLklS18vrp7LLUDWok1g7DYxkF Zcv85alZIIYsiLa7tW4Zzvv8SJqLATyvhIyrJ7fPfY882t8myNyhnMaZ2H0UjPrI v97hxlLdhOAf8NlLHEpCbG7mpX5JfJx9V/dTv2VuyrsUzZYTIdAhqzhyog8T1/X4 0QOPQ67Fe9K/9G8yu9YeWRRDy328hJQiJ9Y/RhwO8AYfUUx/MS8RL39oTSEZ8C9w 4rlh2opluphC6ymISoFOW5LgZVYjEoO9BweqktdXfGL803ERtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3WVnaNSBAMrdBWfbrNFGPzDi1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDY1NzIyZDQtZDU2Yi0z NzkyLThmZTMtNDEyODFjNjljOGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/aR7wlVjrdQC3mojiS9u9+/9vooRmYTeWneKs8VlmFrmWxMyv7M7kS aatfnjIHeGmKaMRSHtgkJQhdA8H4M/Dz3069ZE9NyHk94l+4epofYGSm/mOMk3lO 6U4EUkTISBWjRMnHw6a5+xVSEHzpEYB+xcFh26QWr9e0mB2ctSyfB7Jl4gK9lUaG AfX9LhiUgGSjsAi484uf86kk7xdUfzpge3S4/8f3F6z7SQZAknHlRSFLzyFLRooG ObIwVQFvxmnBxuUkiRm2b+ZfFT6n98IJP/bJWVmeSniffwewf1/TWxkmeCdNDxi8 mNqgS/1kSs9FpsresX9FkTQ3AF4tCUI= -----END CERTIFICATE-----Generated at Thu May 23 02:53:52 2024 by rpki-client on console-ams.rpki-client.org