$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa File: 43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa (raw, json) Hash identifier: e4bCDBabJUg0izxVHqj4TGrOiWrm0blbjCb+064HIKA= Subject key identifier: C5:9B:36:6A:18:E6:7E:4A:91:2B:68:66:B4:C3:B4:36:96:50:9E:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E09E00AF67FC6FF3C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 64.206.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e0:9e:00:af:67:fc:6f:f3:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=d36a0828-a380-4add-9615-61a8397ed6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:42:78:7f:dd:99:69:09:aa:f1:14:66:92:86: 17:58:8f:09:71:8f:b1:25:00:4d:ae:74:ef:cb:4b: c8:ac:8b:57:2b:2c:85:09:7e:97:aa:2a:ea:59:3b: 31:39:14:68:95:b0:ce:01:73:e6:6f:ae:29:2a:c5: e8:b0:7f:2c:f4:f9:5e:e1:b4:8f:36:6f:41:2b:08: e7:03:fe:2b:ba:85:cb:0c:56:cb:05:d7:a6:85:74: 4a:ab:43:8e:3d:10:d2:a0:98:63:e6:8f:ed:11:6e: b6:bd:30:d5:6f:69:c1:63:ca:94:d8:cc:24:2c:6c: 84:d6:09:f2:32:95:53:3c:47:e0:0f:3c:45:c6:db: 71:9d:06:4b:3b:38:9b:ef:d6:4a:b1:aa:16:e7:39: 7a:bf:6c:67:89:db:ea:5a:55:b5:06:f4:8b:df:fc: 43:9b:47:a9:b5:c0:76:09:fb:55:c1:e7:2e:55:71: db:6e:8e:dd:5f:2e:08:fb:d4:52:4e:73:c9:29:16: ab:24:87:32:f4:b0:ab:e6:c0:29:fb:a0:8e:2a:82: 60:36:76:41:36:76:ca:0e:65:88:98:7e:b1:c9:3f: c8:6b:2f:a4:bc:14:5d:57:13:32:b0:55:33:9c:6d: 78:a5:09:1d:5d:f6:33:dc:43:50:2f:de:c7:fd:a4: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9B:36:6A:18:E6:7E:4A:91:2B:68:66:B4:C3:B4:36:96:50:9E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43f8cb3f-62e0-3298-875e-eb95d7be4fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6e:46:40:5f:f3:25:97:d7:96:fa:d0:fe:0f:79:f8:fb:9f: 96:fb:c0:fd:d9:11:24:24:53:f1:a5:b3:e2:35:9c:7c:fc:7c: 5d:0e:13:b6:02:01:c3:d9:8e:71:c3:02:d6:8c:42:43:c7:e1: 4d:de:e0:91:9c:be:bb:4c:a3:46:38:bf:d5:dd:4c:59:1b:d1: 5b:83:78:c7:44:be:29:6f:9e:42:60:ba:e7:39:8c:0f:e9:ba: d6:61:c5:38:1c:ed:ac:94:93:37:77:24:e4:42:f3:1f:94:4b: 46:5d:a8:88:af:fc:94:92:e3:9f:83:9e:69:c8:b9:6d:c9:b2: 75:e0:03:7a:ab:96:df:5f:f8:fe:ec:ea:06:b5:e6:9b:24:c2: 81:8e:ae:d8:fa:d6:a7:52:94:6b:6d:ee:27:87:b5:26:31:a3: 0a:4e:89:d8:cb:f2:fd:21:38:a4:c2:8e:09:db:89:0e:e1:20: f0:08:b4:e5:3f:1b:41:16:eb:36:07:b0:0f:2c:53:fc:b7:a9: e7:4d:0a:02:b0:f3:8f:80:5e:01:e6:1b:02:69:43:aa:0a:ef: 71:80:4c:d4:53:77:de:e7:36:3e:c0:61:80:88:83:53:b6:3f: b3:86:0a:76:6d:88:12:0b:cd:04:c0:c7:26:06:06:80:a7:15: 1f:13:8c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuCeAK9n/G/zyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZDM2YTA4MjgtYTM4MC00YWRkLTk2MTUtNjFhODM5N2VkNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEJ4f92ZaQmq8RRmkoYXWI8JcY+xJQBNrnTv y0vIrItXKyyFCX6XqirqWTsxORRolbDOAXPmb64pKsXosH8s9Ple4bSPNm9BKwjn A/4ruoXLDFbLBdemhXRKq0OOPRDSoJhj5o/tEW62vTDVb2nBY8qU2MwkLGyE1gny MpVTPEfgDzxFxttxnQZLOzib79ZKsaoW5zl6v2xnidvqWlW1BvSL3/xDm0eptcB2 CftVwecuVXHbbo7dXy4I+9RSTnPJKRarJIcy9LCr5sAp+6COKoJgNnZBNnbKDmWI mH6xyT/Iay+kvBRdVxMysFUznG14pQkdXfYz3ENQL97H/aS4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWbNmoY5n5KkStoZrTDtDaWUJ7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNmOGNiM2YtNjJlMC0z Mjk4LTg3NWUtZWI5NWQ3YmU0ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhuRkBf8yWX15b60P4Pefj7n5b7wP3ZESQkU/Gls+I1nHz8fF0OE7YC AcPZjnHDAtaMQkPH4U3e4JGcvrtMo0Y4v9XdTFkb0VuDeMdEvilvnkJguuc5jA/p utZhxTgc7ayUkzd3JORC8x+US0ZdqIiv/JSS45+DnmnIuW3JsnXgA3qrlt9f+P7s 6ga15pskwoGOrtj61qdSlGtt7ieHtSYxowpOidjL8v0hOKTCjgnbiQ7hIPAItOU/ G0EW6zYHsA8sU/y3qedNCgKw84+AXgHmGwJpQ6oK73GATNRTd97nNj7AYYCIg1O2 P7OGCnZtiBILzQTAxyYGBoCnFR8TjCE= -----END CERTIFICATE-----Generated at Thu May 23 20:11:42 2024 by rpki-client on console-ams.rpki-client.org