$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46f8c813-b3db-339e-8e4f-8b76a453df9b.roa File: 46f8c813-b3db-339e-8e4f-8b76a453df9b.roa (raw, json) Hash identifier: tL2ZQXJyr9e4g/9WiEGzgiXeHYAU+QIZyTqn6269CTQ= Subject key identifier: D4:3A:BC:CD:76:C0:82:1B:67:9B:29:90:9F:DA:6D:C2:DC:B7:DC:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E66FB585049CD98DBE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46f8c813-b3db-339e-8e4f-8b76a453df9b.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 67.140.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e6:6f:b5:85:04:9c:d9:8d:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=9bfbed12-2d59-4c29-bb81-d2d34a3b73ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:e4:78:83:5e:5b:4e:6e:88:4f:78:37:39: 26:54:a4:d5:9a:bc:d7:f0:f4:6a:6f:1c:ac:74:8f: 2a:41:a3:b4:24:15:7e:c2:08:2c:9f:6f:84:5d:0e: c1:c3:0c:97:23:d0:59:30:28:27:89:7c:2c:72:a6: 6e:84:83:41:58:21:7e:07:5d:0f:35:d1:5b:cb:c5: bf:e9:0d:c4:df:20:49:f3:6d:42:f9:df:51:15:64: ac:ee:2f:d7:a7:1a:d5:66:12:4e:0d:4b:ce:14:4a: b0:09:a7:97:56:08:8d:ae:22:32:67:ae:f6:35:9b: 1d:13:6e:b3:68:5b:9d:93:24:f1:76:1a:57:65:43: 6f:85:36:63:14:49:73:f1:2f:60:4f:9f:f2:43:c1: e0:bf:ea:e2:b5:76:75:e3:32:0b:ac:6d:8e:41:f5: 94:79:b3:f1:45:b0:a4:b2:d5:b1:bf:78:36:f9:e5: 4d:8a:b6:50:c6:8b:20:34:03:61:88:58:b1:08:07: a8:3d:84:51:64:f5:b3:39:9d:c2:dd:8f:42:5a:01: db:45:fd:81:83:ac:33:74:5e:ce:c8:d9:73:22:72: c5:14:2c:4f:9e:42:c4:46:14:e0:fa:ac:93:47:9d: ae:23:6d:44:63:82:b2:49:b9:a9:fd:56:85:75:96: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3A:BC:CD:76:C0:82:1B:67:9B:29:90:9F:DA:6D:C2:DC:B7:DC:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46f8c813-b3db-339e-8e4f-8b76a453df9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:53:c4:29:ec:ff:2e:6d:78:62:0d:93:2f:54:d3:de:1d:de: 11:e6:e9:45:47:1e:23:df:e8:96:df:01:4e:08:48:80:24:91: 35:c0:b6:7d:96:f7:dd:07:c8:a7:19:f6:da:6d:d3:b4:24:5a: 63:53:f6:0a:b2:81:22:0b:6a:f4:73:a4:ab:8b:91:70:2a:02: c8:33:e4:95:b9:cc:75:3d:11:be:37:86:96:c7:79:69:98:1b: 77:5e:cc:b9:d4:c5:78:5f:db:c3:ea:d4:dd:8f:f7:69:7c:ba: c8:75:a2:66:77:9e:f5:03:00:fa:4f:d4:4c:56:7e:57:98:c0: f1:b8:0f:07:88:9c:8f:eb:d4:ec:62:05:d2:4c:bf:3e:ae:82: 18:f8:58:11:6e:cd:de:8b:2a:5a:df:56:77:c8:78:b6:56:99: 76:d0:4f:86:c2:ca:ef:cb:ae:67:d0:fb:7e:3e:dc:b4:10:e0: f4:8b:07:0e:4b:76:19:74:df:c1:46:43:e9:57:4f:72:91:52: cb:80:d6:94:95:56:41:6d:d3:09:0b:ca:a1:da:c5:ed:29:cd: f7:17:ec:a8:11:80:6b:ae:17:05:16:90:40:a4:fd:77:ba:1f: 39:e2:95:3d:61:cf:46:13:fa:3c:6f:7d:15:d4:a7:74:d5:8c: 8a:0c:47:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuZvtYUEnNmNvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OWJmYmVkMTItMmQ1OS00YzI5LWJiODEtZDJkMzRhM2I3M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJTkeINeW05uiE94NzkmVKTVmrzX8PRqbxys dI8qQaO0JBV+wggsn2+EXQ7BwwyXI9BZMCgniXwscqZuhINBWCF+B10PNdFby8W/ 6Q3E3yBJ821C+d9RFWSs7i/XpxrVZhJODUvOFEqwCaeXVgiNriIyZ672NZsdE26z aFudkyTxdhpXZUNvhTZjFElz8S9gT5/yQ8Hgv+ritXZ14zILrG2OQfWUebPxRbCk stWxv3g2+eVNirZQxosgNANhiFixCAeoPYRRZPWzOZ3C3Y9CWgHbRf2Bg6wzdF7O yNlzInLFFCxPnkLERhTg+qyTR52uI21EY4KySbmp/VaFdZbgRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ6vM12wIIbZ5spkJ/abcLct9ztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZmOGM4MTMtYjNkYi0z MzllLThlNGYtOGI3NmE0NTNkZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1TxCns/y5teGINky9U094d3hHm6UVHHiPf6JbfAU4ISIAkkTXAtn2W 990HyKcZ9tpt07QkWmNT9gqygSILavRzpKuLkXAqAsgz5JW5zHU9Eb43hpbHeWmY G3dezLnUxXhf28Pq1N2P92l8ush1omZ3nvUDAPpP1ExWfleYwPG4DweInI/r1Oxi BdJMvz6ughj4WBFuzd6LKlrfVnfIeLZWmXbQT4bCyu/LrmfQ+34+3LQQ4PSLBw5L dhl038FGQ+lXT3KRUsuA1pSVVkFt0wkLyqHaxe0pzfcX7KgRgGuuFwUWkECk/Xe6 HznilT1hz0YT+jxvfRXUp3TVjIoMRxY= -----END CERTIFICATE-----Generated at Sat May 18 01:54:30 2024 by rpki-client on console-ams.rpki-client.org