$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/498dcbcf-ea93-3beb-b9b7-17c7ab205401.roa File: 498dcbcf-ea93-3beb-b9b7-17c7ab205401.roa (raw, json) Hash identifier: XJUwNIi1vI2GoSuQ/7IrakmcZEuNKRAh2/6iIbcl7Ho= Subject key identifier: 70:D8:C5:C4:27:7B:16:E6:3B:06:17:E9:76:9A:DB:9E:6D:03:27:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533315C182EE2A4C22C2FF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/498dcbcf-ea93-3beb-b9b7-17c7ab205401.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 174.131.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:15:c1:82:ee:2a:4c:22:c2:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=2304b487-d3f0-40f7-ab07-774b2469445d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:db:ca:5e:f6:e0:6e:a9:f4:38:5c:23:53: bc:9f:68:57:66:9d:5b:e0:20:2d:3d:8a:a9:e3:dc: 46:c7:1c:69:e0:ee:80:b9:d1:60:55:8b:d2:bd:44: 78:ed:95:c6:61:c4:da:4f:7c:86:b4:7d:38:dd:ba: c9:46:fa:91:c6:fb:44:b8:06:b2:fa:4a:70:c0:5a: b9:f5:cd:72:b2:c5:0e:e6:1d:d2:50:2c:52:e2:0c: c3:43:92:7a:13:d2:5d:e5:46:97:93:72:9e:a1:31: 9f:44:42:d3:a1:50:53:b5:c8:a6:6b:c6:58:73:f6: fc:4f:6a:89:31:59:be:38:1c:c0:80:0e:9b:b3:04: 0a:77:07:c9:9b:81:71:25:ad:48:71:74:e1:70:78: d1:fd:7f:7d:8f:2a:99:4e:b9:45:89:27:20:c9:76: e6:d6:a0:30:bd:74:44:92:8b:21:55:8c:99:e5:d1: a6:56:6f:c2:71:41:66:97:33:0b:cc:43:e5:30:f1: c9:43:12:d8:38:53:55:8e:b8:3f:0a:41:ac:89:7d: 6f:9a:94:58:5f:7a:fe:fc:cc:45:14:ea:f4:56:57: 3e:1a:42:4d:2e:59:12:4b:21:4d:69:9d:54:8b:1c: 0e:89:1f:7c:5d:64:f7:88:0d:a5:73:b2:8d:8e:4c: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D8:C5:C4:27:7B:16:E6:3B:06:17:E9:76:9A:DB:9E:6D:03:27:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/498dcbcf-ea93-3beb-b9b7-17c7ab205401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:17:00:82:ae:e8:8e:a4:a6:a0:44:8e:a8:0b:7b:c5:57:26: 76:91:a2:9d:8d:af:d8:8b:51:2b:42:81:8a:f1:68:34:cb:05: fc:ff:47:1f:39:77:92:fd:14:e7:9f:fe:aa:22:8c:47:23:88: 81:02:de:2a:40:0e:20:52:17:55:fb:49:73:79:38:c0:2b:44: 5b:c6:95:1c:a1:05:00:76:65:6c:e6:ac:ce:89:23:dd:a1:7d: e2:a6:71:77:51:63:79:76:15:ef:e3:74:b6:0f:d1:95:8a:a0: a1:6e:cd:0f:6c:a1:cf:6c:de:3a:2a:c0:b6:fc:3b:d0:57:1f: 55:76:74:e8:82:4e:2e:c2:00:31:bd:e7:cd:1c:d7:bf:35:10: 97:16:17:98:96:6e:9c:98:e3:8a:d0:33:9d:5d:42:68:9b:40: 7f:2e:65:d2:85:05:a4:5d:48:e9:76:ed:90:ab:17:9d:aa:f5: 05:55:42:7c:d6:ea:dc:ce:d3:3e:86:93:c2:f6:3c:02:83:08: 6f:c4:99:36:f9:19:95:59:40:ef:0d:33:15:04:cd:ab:8a:2a: 42:48:c9:b3:86:06:82:f0:c2:1b:0f:b6:36:c4:0b:ab:47:53: ce:db:d7:8a:a9:0c:47:17:a8:4b:89:88:5a:6c:3c:71:38:ac: 40:e2:f5:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxXBgu4qTCLC/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MjMwNGI0ODctZDNmMC00MGY3LWFiMDctNzc0YjI0Njk0NDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRbbyl724G6p9DhcI1O8n2hXZp1b4CAtPYqp 49xGxxxp4O6AudFgVYvSvUR47ZXGYcTaT3yGtH043brJRvqRxvtEuAay+kpwwFq5 9c1yssUO5h3SUCxS4gzDQ5J6E9Jd5UaXk3KeoTGfRELToVBTtcima8ZYc/b8T2qJ MVm+OBzAgA6bswQKdwfJm4FxJa1IcXThcHjR/X99jyqZTrlFiScgyXbm1qAwvXRE koshVYyZ5dGmVm/CcUFmlzMLzEPlMPHJQxLYOFNVjrg/CkGsiX1vmpRYX3r+/MxF FOr0Vlc+GkJNLlkSSyFNaZ1UixwOiR98XWT3iA2lc7KNjkwzswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDYxcQnexbmOwYX6Xaa255tAye+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDk4ZGNiY2YtZWE5My0z YmViLWI5YjctMTdjN2FiMjA1NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIXAIKu6I6kpqBEjqgLe8VXJnaRop2Nr9iLUStCgYrxaDTLBfz/Rx85 d5L9FOef/qoijEcjiIEC3ipADiBSF1X7SXN5OMArRFvGlRyhBQB2ZWzmrM6JI92h feKmcXdRY3l2Fe/jdLYP0ZWKoKFuzQ9soc9s3joqwLb8O9BXH1V2dOiCTi7CADG9 580c1781EJcWF5iWbpyY44rQM51dQmibQH8uZdKFBaRdSOl27ZCrF52q9QVVQnzW 6tzO0z6Gk8L2PAKDCG/EmTb5GZVZQO8NMxUEzauKKkJIybOGBoLwwhsPtjbEC6tH U87b14qpDEcXqEuJiFpsPHE4rEDi9Sg= -----END CERTIFICATE-----Generated at Sat May 18 01:54:31 2024 by rpki-client on console-ams.rpki-client.org