$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50a7f726-392c-3e00-9376-24f7c1d1128e.roa File: 50a7f726-392c-3e00-9376-24f7c1d1128e.roa (raw, json) Hash identifier: IHym8M1SnR6YDQrK3jVWLUGwR+k26bqaOEZXLZ48ohc= Subject key identifier: 58:33:CC:16:DC:C0:1F:AB:33:74:B3:12:34:EC:5E:15:51:03:93:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E6C91E7C6BF32EFC2EE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50a7f726-392c-3e00-9376-24f7c1d1128e.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 67.140.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e6:c9:1e:7c:6b:f3:2e:fc:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=e12ea9af-9fcc-4276-9025-f8dcba135631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:36:36:eb:b3:80:5b:fc:bf:de:db:6b:57:f0: 44:69:9f:26:f7:7f:38:3f:4a:ae:1b:67:69:26:f9: 29:14:49:06:81:07:1e:9d:57:e4:31:71:8f:fa:b0: b9:1a:4f:4a:38:18:a2:fb:4e:5b:a5:94:48:c6:2c: c9:ee:e7:90:e5:9c:6a:12:1b:8c:73:18:c6:d7:4f: fc:c7:fe:76:f6:e7:94:a5:36:d9:a5:fb:93:9f:9f: d9:3a:48:2a:80:e7:0a:3e:d6:10:17:c9:40:06:d1: 67:81:df:dc:2f:c8:3f:6c:39:e5:96:59:de:b2:6f: b4:10:a0:97:88:d5:23:6e:1c:2e:db:ef:69:82:fc: 2e:01:69:64:41:96:c1:66:a0:fe:5c:41:82:d1:03: a9:ad:4b:6e:45:9f:43:c4:f3:0a:23:ca:39:8c:76: 03:a4:82:25:96:8f:5a:e8:b8:4e:b1:26:06:9b:5e: e5:a2:1f:2c:58:84:2f:e7:d2:94:bc:1d:96:3f:c7: fb:61:8e:62:08:b6:50:98:0a:74:12:2c:71:e4:b7: 42:aa:43:4f:2f:c8:43:7b:04:58:bf:7f:a8:80:9b: 7e:82:cf:05:1a:5c:01:3c:1c:ee:9e:d7:b2:89:3e: 99:7a:dc:22:b8:79:f7:af:b3:67:c6:71:0b:40:cf: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:33:CC:16:DC:C0:1F:AB:33:74:B3:12:34:EC:5E:15:51:03:93:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50a7f726-392c-3e00-9376-24f7c1d1128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f0:2b:67:22:8a:6d:25:5b:5a:11:d5:fa:a9:dc:7e:4f:ba: 01:ad:1e:2b:e5:13:f9:ed:9e:5f:15:ac:40:59:09:f3:68:5a: 99:e0:d5:a5:fe:59:9b:99:a0:d8:d5:89:29:ad:15:d4:9f:23: a8:d2:0f:75:22:76:1a:1a:10:d8:cc:24:0a:23:1b:84:02:dd: 81:bd:64:e3:45:30:28:60:7b:85:5c:35:32:55:ac:fc:74:b8: 73:d3:35:50:c7:2d:89:65:af:8a:49:d0:bb:17:80:20:be:da: 0d:cf:36:32:05:bf:05:3b:44:4e:3f:c2:09:b8:4a:66:7f:55: 5f:ca:c6:b0:17:0d:f9:5a:f4:c5:63:f5:a1:38:6d:2a:c7:12: ad:9d:99:0a:16:0c:69:2f:99:9f:83:a9:09:b5:9a:2f:47:38: eb:4b:bb:6b:9b:69:43:1d:c1:76:5a:58:8a:d9:bc:ae:e1:0f: a9:47:20:13:20:5d:42:e6:30:06:d5:ad:0c:f3:a7:49:75:df: e0:1b:12:1d:7e:2d:6d:52:2b:2f:c6:05:f2:3d:8e:29:19:53: 23:9e:cb:ab:f1:3b:4b:9c:5c:61:a7:be:f1:f5:7f:3a:cb:b7: 21:96:b3:f3:16:7b:64:8f:67:32:89:08:73:9d:d6:5b:5a:01: 89:2b:78:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMubJHnxr8y78LuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZTEyZWE5YWYtOWZjYy00Mjc2LTkwMjUtZjhkY2JhMTM1NjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzY267OAW/y/3ttrV/BEaZ8m9384P0quG2dp JvkpFEkGgQcenVfkMXGP+rC5Gk9KOBii+05bpZRIxizJ7ueQ5ZxqEhuMcxjG10/8 x/529ueUpTbZpfuTn5/ZOkgqgOcKPtYQF8lABtFngd/cL8g/bDnlllnesm+0EKCX iNUjbhwu2+9pgvwuAWlkQZbBZqD+XEGC0QOprUtuRZ9DxPMKI8o5jHYDpIIllo9a 6LhOsSYGm17loh8sWIQv59KUvB2WP8f7YY5iCLZQmAp0Eixx5LdCqkNPL8hDewRY v3+ogJt+gs8FGlwBPBzunteyiT6ZetwiuHn3r7NnxnELQM80UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgzzBbcwB+rM3SzEjTsXhVRA5N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTBhN2Y3MjYtMzkyYy0z ZTAwLTkzNzYtMjRmN2MxZDExMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHwK2ciim0lW1oR1fqp3H5PugGtHivlE/ntnl8VrEBZCfNoWpng1aX+ WZuZoNjViSmtFdSfI6jSD3UidhoaENjMJAojG4QC3YG9ZONFMChge4VcNTJVrPx0 uHPTNVDHLYllr4pJ0LsXgCC+2g3PNjIFvwU7RE4/wgm4SmZ/VV/KxrAXDfla9MVj 9aE4bSrHEq2dmQoWDGkvmZ+DqQm1mi9HOOtLu2ubaUMdwXZaWIrZvK7hD6lHIBMg XULmMAbVrQzzp0l13+AbEh1+LW1SKy/GBfI9jikZUyOey6vxO0ucXGGnvvH1fzrL tyGWs/MWe2SPZzKJCHOd1ltaAYkreHc= -----END CERTIFICATE-----Generated at Thu May 23 13:44:57 2024 by rpki-client on console-fra.rpki-client.org