$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d4eec4c-cd32-3b00-83f0-8ebb4f37a60a.roa File: 0d4eec4c-cd32-3b00-83f0-8ebb4f37a60a.roa (raw, json) Hash identifier: jqZKwHVoFKEzlP46WBuCI/XQ8orHuhtvY+cpHAfzbjk= Subject key identifier: AB:D7:28:88:A2:9D:2C:C0:FF:B1:39:F4:13:FC:ED:29:55:D4:9A:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332EF35153C2E8AAB208780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d4eec4c-cd32-3b00-83f0-8ebb4f37a60a.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.29.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ef:35:15:3c:2e:8a:ab:20:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=6a769908-e5e0-4594-acb1-97e2daf6952d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:ca:35:c0:be:dd:38:f6:39:be:dc:27:25: 7e:9f:f2:21:87:c2:c9:00:a1:d0:63:6c:b0:cf:1c: 1b:b1:5c:ff:2b:d8:9f:43:7a:e1:5c:e8:f0:28:c6: 71:56:1f:d6:e4:e8:f3:27:bf:67:a5:32:ed:6e:9d: ba:f1:41:2e:1e:63:26:b1:a6:1a:51:18:07:c7:56: 1c:b1:87:89:9b:06:9d:65:8f:db:f8:61:e1:e0:09: c5:25:26:33:b1:2a:7f:35:00:bd:87:d3:d3:5c:15: 7e:87:a0:f6:97:dd:87:dd:ca:33:71:28:2f:4a:bd: 60:c2:e9:46:87:ff:5d:ca:c7:53:dd:bf:7a:ab:7c: 82:60:d6:15:e8:95:85:bd:1b:9d:23:59:7d:cb:48: 6e:e3:b8:cb:a0:c2:e7:16:f7:86:e6:09:fd:41:3e: f2:8c:7a:d0:15:64:0f:7c:ab:c6:dd:cd:40:ec:e7: ea:ab:5d:cc:3d:79:20:ca:7d:7a:d8:ef:5a:6e:77: 33:af:2d:87:41:2d:85:6a:1c:5a:ac:9b:40:8c:ee: df:e5:2b:a5:a1:18:0e:16:f1:9c:a0:df:bd:d4:91: 71:63:01:a5:89:52:5b:6f:0f:21:4e:76:f8:0f:e6: 24:c7:41:df:e4:4b:59:96:c5:6c:68:d3:9d:2a:52: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D7:28:88:A2:9D:2C:C0:FF:B1:39:F4:13:FC:ED:29:55:D4:9A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d4eec4c-cd32-3b00-83f0-8ebb4f37a60a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c6:7f:d6:64:90:dd:6e:2f:c2:f9:fa:9a:d7:54:6d:7c:aa: 46:07:60:1c:b6:76:5b:38:55:3c:3a:cd:d1:a3:ea:fd:43:db: 7d:b6:c6:fc:8c:ca:b6:55:36:a2:c6:0c:70:a6:7d:1f:88:a1: d6:50:bd:51:59:7e:62:b3:98:09:62:c6:a6:0e:57:b7:9f:fa: 43:31:5a:e0:43:9b:b6:03:e6:02:40:3a:dd:d0:5d:25:cc:c6: 54:2b:60:10:1e:a8:b3:6c:18:67:3b:e1:69:10:eb:5e:6d:7c: ff:11:86:c4:1d:83:98:df:5a:61:e1:fb:08:15:02:d7:63:7c: 76:71:15:2f:63:95:2f:fb:c5:b3:eb:65:40:9c:a2:5d:b7:9d: 04:2b:85:40:06:58:23:df:cd:16:fc:f9:b9:29:79:4d:b2:3f: b6:68:4f:27:53:63:d2:a6:94:fd:22:e7:ec:58:dd:68:bf:d7: f1:0c:25:cf:49:6c:ab:ee:7e:c3:a3:4d:33:2c:ae:05:af:a5: 28:1b:ac:48:14:9f:33:2d:58:93:a3:f8:a4:5d:19:c3:3c:ca: be:b5:ac:12:e9:4c:99:51:25:f8:72:35:bf:b4:d3:cb:00:39: d1:24:ea:66:be:b1:3f:6a:57:96:a4:14:16:a6:13:93:cc:39: 71:b7:45:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMu81FTwuiqsgh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NmE3Njk5MDgtZTVlMC00NTk0LWFjYjEtOTdlMmRhZjY5NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS3KNcC+3Tj2Ob7cJyV+n/Ihh8LJAKHQY2yw zxwbsVz/K9ifQ3rhXOjwKMZxVh/W5OjzJ79npTLtbp268UEuHmMmsaYaURgHx1Yc sYeJmwadZY/b+GHh4AnFJSYzsSp/NQC9h9PTXBV+h6D2l92H3cozcSgvSr1gwulG h/9dysdT3b96q3yCYNYV6JWFvRudI1l9y0hu47jLoMLnFveG5gn9QT7yjHrQFWQP fKvG3c1A7Ofqq13MPXkgyn162O9abnczry2HQS2FahxarJtAjO7f5SuloRgOFvGc oN+91JFxYwGliVJbbw8hTnb4D+Ykx0Hf5EtZlsVsaNOdKlIjIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvXKIiinSzA/7E59BP87SlV1JqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ0ZWVjNGMtY2QzMi0z YjAwLTgzZjAtOGViYjRmMzdhNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXGf9ZkkN1uL8L5+prXVG18qkYHYBy2dls4VTw6zdGj6v1D2322xvyM yrZVNqLGDHCmfR+IodZQvVFZfmKzmAlixqYOV7ef+kMxWuBDm7YD5gJAOt3QXSXM xlQrYBAeqLNsGGc74WkQ615tfP8RhsQdg5jfWmHh+wgVAtdjfHZxFS9jlS/7xbPr ZUCcol23nQQrhUAGWCPfzRb8+bkpeU2yP7ZoTydTY9KmlP0i5+xY3Wi/1/EMJc9J bKvufsOjTTMsrgWvpSgbrEgUnzMtWJOj+KRdGcM8yr61rBLpTJlRJfhyNb+008sA OdEk6ma+sT9qV5akFBamE5PMOXG3ReM= -----END CERTIFICATE-----Generated at Thu May 23 20:11:32 2024 by rpki-client on console-ams.rpki-client.org