$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2688f920-cf32-356b-97b8-55ec441e8fd0.roa File: 2688f920-cf32-356b-97b8-55ec441e8fd0.roa (raw, json) Hash identifier: tGgSyDI4z8FBiWjP3LhG+uDcIKC8WMsafIwGNWJTSKk= Subject key identifier: 82:D4:F1:DB:07:02:6A:2C:AA:45:5A:58:AC:04:7F:F4:A0:04:41:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533308F61B4DA18CC4DF1080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2688f920-cf32-356b-97b8-55ec441e8fd0.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 151.213.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:08:f6:1b:4d:a1:8c:c4:df:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=ec8f680f-e961-47b3-bff5-a3c394eb002d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:46:c9:76:58:b8:92:67:86:bd:50:81:bc: 09:b5:6e:1b:26:5b:25:09:7c:61:c2:ee:e8:e4:3d: 22:e1:25:86:77:d7:18:94:78:51:f6:14:25:c6:a2: 12:42:a4:1e:b1:0a:d9:f1:86:3d:fe:d8:ed:05:8f: 18:db:98:4f:f2:a4:bb:82:17:9a:ea:59:b8:13:81: 13:d8:27:29:b9:23:34:da:f5:92:20:1f:f7:9e:d8: fc:13:46:90:b9:2c:ea:21:66:02:a7:f5:95:3c:99: fc:13:25:57:be:30:21:cd:fa:ad:4e:df:f8:ba:ed: 87:7e:13:d3:17:6c:a1:b9:8f:c3:ae:09:ff:ad:49: 51:30:6a:4b:80:94:03:1e:ce:e2:0b:8f:14:c9:c5: 64:51:01:84:78:3f:2a:43:b3:8e:fb:3e:1b:4a:28: a3:b8:24:d6:7e:f5:eb:b8:8c:36:7f:2b:f1:f0:ad: 4a:59:8e:9d:06:01:04:25:93:cc:55:fd:7f:29:2a: 93:a4:09:00:62:a1:53:a1:09:f6:68:dc:08:c1:d5: fd:5e:cc:d5:8f:d2:6f:1d:f5:a6:9c:e2:03:ba:3c: 59:dd:60:c6:ed:2a:61:e2:9d:97:14:51:6a:2c:09: 33:d1:5d:6f:40:d0:18:94:b3:26:08:74:89:01:8b: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:F1:DB:07:02:6A:2C:AA:45:5A:58:AC:04:7F:F4:A0:04:41:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2688f920-cf32-356b-97b8-55ec441e8fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:98:ed:8f:d5:1d:2b:11:03:bf:64:ba:b3:a8:a5:d4:b4:8d: 07:d7:fa:5d:c4:b6:1e:05:f5:17:e7:b4:0e:3d:4c:f0:c7:59: 80:b1:6f:09:92:55:ef:80:ef:e0:ad:f2:d6:0c:57:51:51:3a: be:06:24:d9:47:d1:b5:c3:f8:54:77:f5:b0:fd:b3:ef:8a:31: 08:84:65:c1:cf:61:ea:11:64:58:55:9b:e4:f5:c9:fb:16:03: 0d:f0:1a:5a:d5:64:92:46:b7:c2:be:1b:0c:4f:0a:21:a9:85: 21:cd:a8:9b:12:9b:c3:40:85:18:d9:3e:3b:d8:21:45:a9:f0: 06:3d:a6:06:89:e8:14:37:60:cf:0e:c7:0c:8a:3d:c7:a4:83: e2:73:11:19:80:03:84:f8:c8:00:89:75:38:88:b7:a0:3a:26: b3:12:f0:b0:e4:e2:c0:c2:ff:86:4a:06:94:53:34:42:f7:ef: 4c:dd:60:df:ab:e4:c5:a5:d2:69:a7:41:94:e2:10:02:2d:03: cc:14:03:72:9f:63:a8:3e:d6:55:e4:ae:1c:49:b2:c5:7f:5f: a7:70:e1:22:cf:9f:fe:e2:e4:e3:17:11:0f:ac:7f:02:28:21: ee:cb:9e:e4:7c:20:e9:c2:5e:31:ed:d2:84:ee:78:e8:cc:85: 90:ed:43:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwj2G02hjMTfEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZWM4ZjY4MGYtZTk2MS00N2IzLWJmZjUtYTNjMzk0ZWIwMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wFGyXZYuJJnhr1QgbwJtW4bJlslCXxhwu7o 5D0i4SWGd9cYlHhR9hQlxqISQqQesQrZ8YY9/tjtBY8Y25hP8qS7ghea6lm4E4ET 2CcpuSM02vWSIB/3ntj8E0aQuSzqIWYCp/WVPJn8EyVXvjAhzfqtTt/4uu2HfhPT F2yhuY/Drgn/rUlRMGpLgJQDHs7iC48UycVkUQGEeD8qQ7OO+z4bSiijuCTWfvXr uIw2fyvx8K1KWY6dBgEEJZPMVf1/KSqTpAkAYqFToQn2aNwIwdX9XszVj9JvHfWm nOIDujxZ3WDG7Sph4p2XFFFqLAkz0V1vQNAYlLMmCHSJAYvpOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILU8dsHAmosqkVaWKwEf/SgBEFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjY4OGY5MjAtY2YzMi0z NTZiLTk3YjgtNTVlYzQ0MWU4ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9UwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeY7Y/VHSsRA79kurOopdS0jQfX+l3Eth4F9RfntA49TPDHWYCxbwmS Ve+A7+Ct8tYMV1FROr4GJNlH0bXD+FR39bD9s++KMQiEZcHPYeoRZFhVm+T1yfsW Aw3wGlrVZJJGt8K+GwxPCiGphSHNqJsSm8NAhRjZPjvYIUWp8AY9pgaJ6BQ3YM8O xwyKPcekg+JzERmAA4T4yACJdTiIt6A6JrMS8LDk4sDC/4ZKBpRTNEL370zdYN+r 5MWl0mmnQZTiEAItA8wUA3KfY6g+1lXkrhxJssV/X6dw4SLPn/7i5OMXEQ+sfwIo Ie7LnuR8IOnCXjHt0oTueOjMhZDtQ2k= -----END CERTIFICATE-----Generated at Thu May 23 16:33:31 2024 by rpki-client on console-ams.rpki-client.org