$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4fe50ad6-dd6d-353d-8aeb-045719857f90.roa File: 4fe50ad6-dd6d-353d-8aeb-045719857f90.roa (raw, json) Hash identifier: rtmL3zexA6vOlLa1t84f4kYLq6FcNe5cFXWBbuf3Tys= Subject key identifier: AC:13:95:D7:F7:EB:A8:66:BA:2E:93:BF:A8:AD:0F:DD:7F:B2:97:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533312F78987E126D6382540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4fe50ad6-dd6d-353d-8aeb-045719857f90.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 173.213.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:12:f7:89:87:e1:26:d6:38:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=f761ef5e-d8e2-482c-aee2-ff71d7de5c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:af:15:45:07:bf:36:9a:95:d9:1c:4c:4f: 0f:c4:af:84:f1:2f:73:28:67:6c:ec:a5:7f:49:de: cd:c0:2f:94:9f:52:f8:b6:29:a1:89:a7:6c:3c:85: 0d:01:fd:5e:b6:2c:f9:04:21:50:7d:57:2d:0d:b0: 3a:21:20:f1:81:93:60:fe:e2:b9:eb:1d:76:74:17: fa:26:ba:2b:5b:50:cd:43:34:83:5a:41:88:f8:85: e1:b3:12:e3:a6:4c:4c:64:6f:03:a6:6d:a4:94:50: c8:1a:1f:a6:63:ca:92:6a:a5:e3:fc:3a:57:19:d7: 20:ba:61:d6:70:88:c3:65:dc:8c:8a:bd:63:38:c8: 36:86:58:28:f9:43:18:50:fa:22:8d:dd:1f:c6:fd: fb:77:91:2f:e3:0c:33:e9:ba:cf:2e:70:77:c2:b2: 9a:18:c8:0b:cb:6d:78:e1:c6:b4:41:c3:79:9e:0a: ca:b8:04:25:25:63:ea:1e:46:57:4d:9b:e9:ee:73: b8:7f:ab:e0:b8:0a:a2:db:d1:b9:ab:d4:f6:ee:9e: 18:3b:dc:6e:3b:f2:67:f3:c5:d8:ba:c6:42:14:89: fa:1d:85:ea:1e:25:bb:ab:ac:95:89:a0:b2:e0:f6: a9:59:d3:94:ae:0b:a6:fe:2e:c5:8b:42:b2:a9:5f: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:13:95:D7:F7:EB:A8:66:BA:2E:93:BF:A8:AD:0F:DD:7F:B2:97:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4fe50ad6-dd6d-353d-8aeb-045719857f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:39:70:e6:f7:37:cf:4f:6d:3d:c8:06:55:4d:d7:6c:3e:d8: 45:31:ca:47:6b:e3:fa:4c:23:bc:57:c3:1c:eb:91:c1:6b:f1: a9:fe:af:7b:a0:c4:21:5f:7f:e2:4a:99:e1:03:55:1d:6e:81: 0f:90:9a:c3:f3:3c:0b:b9:da:7e:2c:95:b2:6f:93:18:ec:8f: 44:35:cf:a5:04:2e:ac:df:f4:60:6e:f0:90:24:90:16:a0:cb: 7d:03:da:48:26:4b:65:b6:cd:72:90:4d:b2:6f:93:19:c5:8f: 4d:21:70:bc:ea:0d:a4:88:24:8b:d5:75:1f:20:42:23:a8:ea: 31:37:f8:a7:94:31:d0:6a:55:fa:fd:47:7c:21:b9:3d:71:37: 51:78:fc:a0:7d:ca:01:ff:bf:71:3a:9f:8d:20:79:7e:38:7a: 1a:7f:f1:74:23:a9:a4:e3:4c:7f:27:e5:05:a7:c0:22:c4:de: 6f:83:48:39:65:dd:e0:65:e8:4b:c0:6a:52:b2:b3:e5:12:35: 6c:f9:cb:1a:b7:cf:08:a5:c5:c5:b9:af:d7:7a:97:a2:6c:b6: be:4c:5f:1b:06:9d:d0:b5:73:d4:e7:c1:34:5d:e6:59:fb:0d: c2:68:30:43:09:4e:9d:84:70:16:fb:47:04:9d:95:97:0a:34: fa:e3:c1:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxL3iYfhJtY4JUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk Zjc2MWVmNWUtZDhlMi00ODJjLWFlZTItZmY3MWQ3ZGU1YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWavFUUHvzaaldkcTE8PxK+E8S9zKGds7KV/ Sd7NwC+Un1L4timhiadsPIUNAf1etiz5BCFQfVctDbA6ISDxgZNg/uK56x12dBf6 JrorW1DNQzSDWkGI+IXhsxLjpkxMZG8Dpm2klFDIGh+mY8qSaqXj/DpXGdcgumHW cIjDZdyMir1jOMg2hlgo+UMYUPoijd0fxv37d5Ev4wwz6brPLnB3wrKaGMgLy214 4ca0QcN5ngrKuAQlJWPqHkZXTZvp7nO4f6vguAqi29G5q9T27p4YO9xuO/Jn88XY usZCFIn6HYXqHiW7q6yViaCy4PapWdOUrgum/i7Fi0KyqV+fvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwTldf366hmui6Tv6itD91/spdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGZlNTBhZDYtZGQ2ZC0z NTNkLThhZWItMDQ1NzE5ODU3ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrdWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM5cOb3N89PbT3IBlVN12w+2EUxykdr4/pMI7xXwxzrkcFr8an+r3ug xCFff+JKmeEDVR1ugQ+QmsPzPAu52n4slbJvkxjsj0Q1z6UELqzf9GBu8JAkkBag y30D2kgmS2W2zXKQTbJvkxnFj00hcLzqDaSIJIvVdR8gQiOo6jE3+KeUMdBqVfr9 R3whuT1xN1F4/KB9ygH/v3E6n40geX44ehp/8XQjqaTjTH8n5QWnwCLE3m+DSDll 3eBl6EvAalKys+USNWz5yxq3zwilxcW5r9d6l6Jstr5MXxsGndC1c9TnwTRd5ln7 DcJoMEMJTp2EcBb7RwSdlZcKNPrjwR4= -----END CERTIFICATE-----Generated at Sat May 18 01:54:31 2024 by rpki-client on console-ams.rpki-client.org