$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa File: 3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa (raw, json) Hash identifier: zGVVhnCm+1D1L2PSuhIFUS2b6EBJOZoiSin9T403L3w= Subject key identifier: 59:37:D8:7F:3C:A5:53:8E:8A:1E:2B:92:48:B8:2B:AB:9D:37:1A:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332ED5AC379F9CF79013F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.28.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ed:5a:c3:79:f9:cf:79:01:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=7cbf3001-7b60-47f6-8be7-facfa769b904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:3b:c9:b9:9f:60:a5:30:bd:a5:ec:27:72: 1d:60:c2:12:b6:24:48:25:81:0c:2a:5a:5e:46:ca: b9:b4:ff:10:be:2d:24:79:f8:8b:61:fd:df:9e:59: 01:df:14:c7:9e:d5:b3:95:77:71:90:f7:3d:3c:fd: 2c:30:3f:55:5d:b9:06:43:4c:a5:45:8b:d3:c9:9f: e9:41:43:f0:ac:24:5c:9d:5c:e9:76:52:cd:30:6e: bc:6e:39:94:a9:30:b0:8d:e7:31:6b:da:7b:d7:36: 85:58:23:36:6a:be:df:b9:79:bf:45:93:00:65:b8: ef:63:76:52:82:0d:fb:a3:db:d8:c2:fb:f4:d2:70: 38:e0:a8:e7:92:26:da:5d:da:8b:de:7e:89:e8:c3: d1:de:7c:c7:06:ba:7c:76:79:c1:ef:0b:d0:fe:66: 44:88:47:43:68:46:30:d5:01:e2:4e:62:22:c8:19: a3:69:7b:ec:15:38:eb:35:0c:36:82:fe:80:a3:bf: 1a:ab:92:0a:e2:b6:81:bf:77:39:a5:49:44:b0:39: a5:ee:ec:98:07:3c:79:2f:b8:57:c1:bb:5c:da:b8: 55:41:89:82:ac:c3:cf:52:a3:ff:98:c6:65:d9:89: ce:7d:e5:73:42:6f:c8:df:ca:45:8b:94:5f:81:dd: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:37:D8:7F:3C:A5:53:8E:8A:1E:2B:92:48:B8:2B:AB:9D:37:1A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6b:b6:a3:0b:24:78:74:7f:02:26:b8:bd:a2:a6:01:7e:be: 77:2a:9e:a6:41:6f:1d:b8:22:f9:3b:5e:f9:e0:96:c8:3b:56: 9b:b4:0a:6e:18:8a:cc:c8:9f:70:bb:71:6f:6e:63:9f:f2:89: f9:a7:6a:24:f2:76:89:1a:c7:e3:48:09:9a:09:9f:d2:56:36: f9:72:fc:93:1c:f3:af:33:4f:7a:c5:db:68:7f:b2:15:6a:31: 31:69:9e:c4:0c:47:e0:65:55:96:1e:d8:68:11:93:b2:3e:48: 49:c2:4d:ee:2f:06:a0:7b:20:b4:18:c7:f6:bc:07:fb:e9:9f: a7:52:23:21:3c:46:75:61:28:9d:a2:ca:06:ed:70:05:e0:be: f2:e3:b0:eb:06:8d:52:ec:11:d0:62:b2:22:90:ae:b7:fc:d6: 30:8c:c1:91:5f:98:7f:bf:f5:de:7e:b3:3f:21:7b:45:fc:6e: 20:3b:4c:57:7f:55:39:68:f2:9c:f8:75:d4:7d:aa:4b:65:4a: 6a:c4:b4:04:57:e5:ba:6a:09:17:50:b2:f0:c1:00:e5:e2:0d: a5:15:d7:ad:d7:a9:35:07:c0:db:56:6b:75:1d:41:b9:1c:72: cc:ca:3a:3d:13:d9:c6:a6:2a:ae:44:6f:11:54:24:35:f3:a4: e2:30:f9:bf -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVTMu1aw3n5z3kBPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk N2NiZjMwMDEtN2I2MC00N2Y2LThiZTctZmFjZmE3NjliOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni47ybmfYKUwvaXsJ3IdYMIStiRIJYEMKlpe Rsq5tP8Qvi0kefiLYf3fnlkB3xTHntWzlXdxkPc9PP0sMD9VXbkGQ0ylRYvTyZ/p QUPwrCRcnVzpdlLNMG68bjmUqTCwjecxa9p71zaFWCM2ar7fuXm/RZMAZbjvY3ZS gg37o9vYwvv00nA44KjnkibaXdqL3n6J6MPR3nzHBrp8dnnB7wvQ/mZEiEdDaEYw 1QHiTmIiyBmjaXvsFTjrNQw2gv6Ao78aq5IK4raBv3c5pUlEsDml7uyYBzx5L7hX wbtc2rhVQYmCrMPPUqP/mMZl2YnOfeVzQm/I38pFi5Rfgd3tMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFk32H88pVOOih4rkki4K6udNxoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzYxMWFlMTQtYzM2Ny0z ZjAyLTgzZjUtZTk5OTZlYjFlMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRxwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAimu2owskeHR/Aia4vaKmAX6+dyqepkFvHbgi+Tte+eCWyDtWm7QKbhiK zMifcLtxb25jn/KJ+adqJPJ2iRrH40gJmgmf0lY2+XL8kxzzrzNPesXbaH+yFWox MWmexAxH4GVVlh7YaBGTsj5IScJN7i8GoHsgtBjH9rwH++mfp1IjITxGdWEonaLK Bu1wBeC+8uOw6waNUuwR0GKyIpCut/zWMIzBkV+Yf7/13n6zPyF7RfxuIDtMV39V OWjynPh11H2qS2VKasS0BFflumoJF1Cy8MEA5eINpRXXrdepNQfA21ZrdR1BuRxy zMo6PRPZxqYqrkRvEVQkNfOk4jD5vw== -----END CERTIFICATE-----Generated at Thu May 23 13:44:56 2024 by rpki-client on console-fra.rpki-client.org