$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d9c2f36-c65f-3399-9d4f-557fa5764558.roa File: 1d9c2f36-c65f-3399-9d4f-557fa5764558.roa (raw, json) Hash identifier: DifxekjrSjDL+1jOhpG40kNEeFq7veHMx7TEv+R4u3k= Subject key identifier: 10:A5:ED:14:DC:4E:36:20:74:F4:F1:6E:F9:05:EF:AC:25:4C:A1:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553331BB4CC429E853F17DF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d9c2f36-c65f-3399-9d4f-557fa5764558.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 207.8.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:1b:b4:cc:42:9e:85:3f:17:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=d289925c-cc05-4f79-a09f-856d18f2d6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:40:a7:3a:1d:c4:3f:6c:44:c8:d9:57:cb: d9:8c:55:f5:bd:21:ba:7f:f1:98:c6:85:10:db:ca: a1:68:93:2a:c0:7d:fd:04:17:9a:26:e3:8d:ad:02: 3e:d1:97:08:e5:7d:7b:2d:02:e3:4f:4a:67:33:53: ec:dd:d7:12:df:91:53:f7:24:46:8c:7f:26:a2:ed: d6:86:ac:cb:6a:de:8d:44:d8:84:f0:fe:5f:4a:2d: 71:85:d3:a8:7c:03:d4:92:d1:2c:82:36:53:82:62: 4a:b2:c4:92:ed:12:20:44:61:2e:33:39:67:20:f7: 5b:f4:19:d2:5f:b4:07:be:85:77:e2:e9:8d:51:6f: cb:f9:d7:83:b9:45:5f:2f:be:9a:f8:98:5f:96:9e: bc:c4:b0:53:53:65:f8:30:47:71:ae:23:03:c8:2d: a8:5f:57:6f:e1:ce:98:64:9a:86:93:68:8c:7b:64: 1e:b1:4a:a4:46:6f:c3:e9:15:82:4c:72:9b:ef:c5: ee:a5:01:10:8e:cf:a0:31:f5:4d:ad:69:29:de:76: 54:13:0e:4f:53:90:23:89:fa:3e:18:38:29:da:5a: 6f:0f:c5:8e:b5:22:7f:f8:0b:86:48:8c:42:6c:b9: cc:0d:3d:16:a9:8f:c0:85:13:13:6d:73:46:10:76: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A5:ED:14:DC:4E:36:20:74:F4:F1:6E:F9:05:EF:AC:25:4C:A1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d9c2f36-c65f-3399-9d4f-557fa5764558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.8.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:76:44:a8:72:d1:8f:bf:07:09:45:7f:cb:35:63:09:9d:41: e0:79:50:7c:e1:11:e9:c9:88:03:b0:b9:ce:c7:55:26:98:86: e9:f9:f6:a6:93:b1:2f:31:64:7d:52:bc:de:b3:2d:30:e7:8d: c0:b2:fc:1f:58:ed:02:ca:c9:2c:b8:f2:26:8e:ab:1e:5c:52: 25:1d:bf:24:58:ce:92:f8:bb:41:50:12:bf:1a:cb:3f:03:97: e2:06:38:8d:1e:21:16:44:13:37:d3:91:54:ea:d8:47:be:2c: 4f:78:34:8d:b2:3c:df:da:81:45:02:d6:d3:f6:cc:25:c2:dd: 1e:b2:21:13:f2:53:4a:87:2d:63:e9:75:06:90:2a:e0:52:b0: 83:d8:77:2a:33:c1:91:66:1b:e1:a1:21:87:d7:8e:de:de:70: dc:4d:46:8a:9e:b3:5d:94:a5:c8:e2:b7:a1:23:b3:7c:ba:bd: 00:be:1f:a2:02:a6:af:40:31:35:19:1a:1c:2a:05:3e:e2:70: 36:05:f1:40:a0:c7:77:8c:9a:88:4e:08:e4:95:3c:87:9c:b6: 71:35:51:0c:d2:6f:df:b4:22:c2:12:97:d2:ca:be:5a:98:75: 71:06:ef:10:7c:47:a4:e8:9e:29:06:28:54:91:33:4f:2b:c8: fb:c6:8a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxu0zEKehT8X34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZDI4OTkyNWMtY2MwNS00Zjc5LWEwOWYtODU2ZDE4ZjJkNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZApzodxD9sRMjZV8vZjFX1vSG6f/GYxoUQ 28qhaJMqwH39BBeaJuONrQI+0ZcI5X17LQLjT0pnM1Ps3dcS35FT9yRGjH8mou3W hqzLat6NRNiE8P5fSi1xhdOofAPUktEsgjZTgmJKssSS7RIgRGEuMzlnIPdb9BnS X7QHvoV34umNUW/L+deDuUVfL76a+Jhflp68xLBTU2X4MEdxriMDyC2oX1dv4c6Y ZJqGk2iMe2QesUqkRm/D6RWCTHKb78XupQEQjs+gMfVNrWkp3nZUEw5PU5Ajifo+ GDgp2lpvD8WOtSJ/+AuGSIxCbLnMDT0WqY/AhRMTbXNGEHY5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCl7RTcTjYgdPTxbvkF76wlTKHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWQ5YzJmMzYtYzY1Zi0z Mzk5LTlkNGYtNTU3ZmE1NzY0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzwjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB2RKhy0Y+/BwlFf8s1YwmdQeB5UHzhEenJiAOwuc7HVSaYhun59qaT sS8xZH1SvN6zLTDnjcCy/B9Y7QLKySy48iaOqx5cUiUdvyRYzpL4u0FQEr8ayz8D l+IGOI0eIRZEEzfTkVTq2Ee+LE94NI2yPN/agUUC1tP2zCXC3R6yIRPyU0qHLWPp dQaQKuBSsIPYdyozwZFmG+GhIYfXjt7ecNxNRoqes12Upcjit6Ejs3y6vQC+H6IC pq9AMTUZGhwqBT7icDYF8UCgx3eMmohOCOSVPIectnE1UQzSb9+0IsISl9LKvlqY dXEG7xB8R6TonikGKFSRM08ryPvGijE= -----END CERTIFICATE-----Generated at Sat May 18 01:54:28 2024 by rpki-client on console-ams.rpki-client.org