$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21b6cfe7-02a4-3a4b-934b-70af7e574806.roa File: 21b6cfe7-02a4-3a4b-934b-70af7e574806.roa (raw, json) Hash identifier: uZU7ZFUn5WSH1FhR/ZAqdQkE/2l/pZNptZreROcvBrM= Subject key identifier: FD:D5:41:D0:F8:F5:66:4F:7A:90:79:30:CC:FF:C7:4F:2F:37:C4:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328583DB440CDDECD1ECF75E4499580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21b6cfe7-02a4-3a4b-934b-70af7e574806.roa Signing time: Mon 25 Apr 2022 12:00:00 +0000 ROA not before: Mon 25 Apr 2022 12:00:00 +0000 ROA not after: Tue 18 Apr 2028 04:00:00 +0000 asID: 7029 IP address blocks: 151.213.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:b4:40:cd:de:cd:1e:cf:75:e4:49:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 25 12:00:00 2022 GMT Not After : Apr 18 04:00:00 2028 GMT Subject: CN=be2230c0-51c3-40ea-b671-43a2efc9961d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:a2:02:cd:4d:b6:19:2b:22:b0:48:31:07: ba:37:eb:35:d6:0d:a1:03:e9:a6:16:13:0b:9e:c5: 09:1c:98:1d:eb:ef:fc:d0:8d:4d:2d:75:7a:d3:c2: ef:87:cc:b9:19:f9:53:b6:3b:c3:b1:27:a2:8c:bd: 9b:af:cf:17:00:35:f0:f5:13:b6:42:70:c9:a6:95: 81:8a:c7:6c:c9:f2:29:04:ec:3a:a4:44:1a:bd:6b: ff:3a:8d:6f:c9:13:f0:1c:b0:12:a4:2c:9b:10:40: da:d0:97:b3:37:0f:e8:e8:88:db:60:d8:8e:50:2c: 1c:30:a3:75:a8:dd:8c:3a:0d:66:0d:90:3c:5c:6b: d8:8e:a6:b3:07:66:d6:cd:32:61:5f:c8:b8:61:5e: 5c:65:17:18:e4:15:8a:cb:f1:4b:40:8f:5d:63:86: 9c:3a:65:ea:6a:46:bc:a6:bf:90:ec:b8:bd:5a:df: 7a:5a:54:b8:1d:85:82:24:a0:40:87:c8:e6:3e:61: ed:5e:a8:af:24:cc:84:5c:8f:b3:e9:23:68:22:a9: 40:21:ce:bf:c2:2f:46:38:98:5d:b8:19:7d:de:9f: 50:13:34:ab:8b:db:40:30:38:d9:4b:72:a3:64:3f: 8d:61:50:48:fc:63:22:9a:29:07:03:2a:5f:7e:8d: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:41:D0:F8:F5:66:4F:7A:90:79:30:CC:FF:C7:4F:2F:37:C4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21b6cfe7-02a4-3a4b-934b-70af7e574806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:76:57:2d:22:8c:e6:25:ba:a4:47:d7:e1:c0:45:3b:07:99: db:a1:fd:00:b7:34:15:c0:cb:b3:38:a0:2b:9a:9c:37:6c:52: 19:01:94:4a:50:eb:68:5e:47:64:0e:b0:86:37:65:8d:07:84: 0a:4a:92:34:29:e4:56:08:c9:85:03:e8:34:c2:9a:a2:53:61: 4b:2a:00:4b:54:94:60:aa:37:98:d1:9c:28:99:1b:2c:8d:b8: f5:fb:3d:c8:ad:37:6b:17:5a:01:5c:91:09:fb:34:d0:cf:5f: 79:0a:34:1c:bb:44:ec:dd:be:59:cb:e4:b1:37:4e:00:6a:c2: a4:1f:1c:30:46:1e:e3:36:e6:82:7b:fa:6a:0a:ed:c0:75:9a: cb:4d:f7:13:92:9f:f5:26:b8:1e:8c:ff:62:b6:de:a6:0e:0b: ce:a7:10:2d:f9:19:1c:99:11:5b:9c:3c:93:3e:f4:08:cb:c2: a9:ab:45:59:1d:d0:51:0b:f2:95:79:bf:09:99:62:9f:15:06: 4a:ca:de:46:b9:14:40:f5:cb:5e:01:f2:35:b3:8a:b8:0e:66: d0:87:7e:66:bb:2e:6a:3c:a2:25:af:75:6d:80:85:de:d0:78: b9:d7:5e:be:ba:23:aa:b7:cf:d2:80:9d:f8:66:75:35:5d:51: ff:60:18:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD20QM3ezR7PdeRJlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTIyMDQyNTEyMDAwMFoXDTI4MDQxODA0MDAwMFowLzEtMCsGA1UEAxMk YmUyMjMwYzAtNTFjMy00MGVhLWI2NzEtNDNhMmVmYzk5NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3eiAs1NthkrIrBIMQe6N+s11g2hA+mmFhML nsUJHJgd6+/80I1NLXV608Lvh8y5GflTtjvDsSeijL2br88XADXw9RO2QnDJppWB isdsyfIpBOw6pEQavWv/Oo1vyRPwHLASpCybEEDa0JezNw/o6IjbYNiOUCwcMKN1 qN2MOg1mDZA8XGvYjqazB2bWzTJhX8i4YV5cZRcY5BWKy/FLQI9dY4acOmXqaka8 pr+Q7Li9Wt96WlS4HYWCJKBAh8jmPmHtXqivJMyEXI+z6SNoIqlAIc6/wi9GOJhd uBl93p9QEzSri9tAMDjZS3KjZD+NYVBI/GMimikHAypffo1ABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3VQdD49WZPepB5MMz/x08vN8SMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFiNmNmZTctMDJhNC0z YTRiLTkzNGItNzBhZjdlNTc0ODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV2Vy0ijOYluqRH1+HARTsHmduh/QC3NBXAy7M4oCuanDdsUhkBlEpQ 62heR2QOsIY3ZY0HhApKkjQp5FYIyYUD6DTCmqJTYUsqAEtUlGCqN5jRnCiZGyyN uPX7PcitN2sXWgFckQn7NNDPX3kKNBy7ROzdvlnL5LE3TgBqwqQfHDBGHuM25oJ7 +moK7cB1mstN9xOSn/UmuB6M/2K23qYOC86nEC35GRyZEVucPJM+9AjLwqmrRVkd 0FEL8pV5vwmZYp8VBkrK3ka5FED1y14B8jWzirgOZtCHfma7Lmo8oiWvdW2Ahd7Q eLnXXr66I6q3z9KAnfhmdTVdUf9gGJE= -----END CERTIFICATE-----Generated at Fri May 24 01:53:46 2024 by rpki-client on console-fra.rpki-client.org