$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: mHScE42256ABrg2s/vX89FReSvuKiw0olRBM3U9ogtw= Subject key identifier: 89:15:4E:04:FF:DD:FE:46:E6:F2:17:E7:0C:C0:2E:1E:0D:B5:57:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E15C420C210941C9B350 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e1:5c:42:0c:21:09:41:c9:b3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=9c50097f-3644-4c4f-8e77-58a4c4284914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:01:37:81:c0:b0:b7:ba:c0:97:25:d7:bb: cf:e3:ce:2e:e6:be:de:87:4d:69:7e:52:03:51:af: 83:ed:60:6d:68:bd:cd:51:6c:3c:8b:72:a7:1f:d7: 12:5d:ac:83:0c:5a:dc:b0:c8:ad:30:02:5b:7a:e4: 68:2c:a1:3a:dd:64:32:91:a2:e6:5c:61:9f:d0:f5: 4d:b9:5c:b0:86:10:94:21:92:d9:b6:cc:f6:68:a8: 7f:58:3e:a3:2e:18:16:a1:92:17:c2:1e:1c:e3:67: 70:85:14:c7:3f:ec:47:b5:ad:e9:86:61:05:ca:00: 5e:b9:22:0a:95:a1:e0:25:b4:6c:dc:0d:ff:31:84: 68:d6:f0:ee:17:f2:55:b3:a1:20:99:cc:34:c4:9f: 04:a8:64:bf:11:8b:cc:6a:e6:31:77:82:c8:78:ff: 81:ae:46:57:86:7f:15:ed:30:12:ab:ad:b3:e0:01: f4:45:90:98:4f:45:61:9a:a9:2a:74:17:e6:34:ce: 13:b6:80:e1:21:e5:8c:0b:d0:7d:d9:42:ca:f3:21: 28:f9:6b:23:a9:63:8b:f2:76:8a:03:8f:36:36:a0: 0f:ed:ce:ac:47:a2:bd:06:ed:d5:44:39:e2:22:ef: 1d:b7:6e:65:37:57:56:01:f7:fe:e4:96:ec:a4:e6: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:15:4E:04:FF:DD:FE:46:E6:F2:17:E7:0C:C0:2E:1E:0D:B5:57:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f6:c0:1f:72:ba:a3:16:b9:09:79:02:2a:49:fd:6c:ec:c6: 06:fc:d0:30:00:03:88:d2:1c:95:ad:52:f0:ee:c1:05:4d:cd: 01:38:06:95:7d:1b:34:5b:30:03:fa:93:8b:2f:e6:ab:1e:78: 2e:c0:33:6b:8a:16:82:8f:63:c9:2a:1f:56:6b:ca:33:fa:e0: 11:6b:4b:d5:16:4a:1b:46:a5:9a:a5:90:f3:35:2a:cf:f9:40: ad:17:08:c8:7c:9d:ef:f6:59:13:60:5b:85:96:e2:3c:a2:1f: af:31:47:ef:75:1e:c2:c7:37:1d:9e:f0:3c:6a:67:5f:8a:ba: e2:59:2b:99:49:a0:52:31:87:59:d5:d1:7d:64:4c:7e:1f:ba: f8:bc:83:0f:a6:12:1d:02:ce:8f:cf:06:6f:cd:c6:d3:f6:63: 60:fa:9f:5d:35:28:10:35:2c:88:f8:2e:f9:a2:69:34:af:18: 95:3e:1f:11:09:4c:91:e5:47:d4:99:10:5a:f1:31:63:f1:91: 78:02:e7:78:b2:20:3d:63:8e:a3:d3:15:f0:58:99:a3:7b:0e: 81:b4:ed:87:9e:be:32:d0:34:92:f1:68:54:6a:ac:7d:36:64: 07:ad:b4:c7:36:7d:d2:33:36:3c:26:44:cc:81:e9:cd:d9:21: f1:08:a3:8a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVTMuFcQgwhCUHJs1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OWM1MDA5N2YtMzY0NC00YzRmLThlNzctNThhNGM0Mjg0OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp74BN4HAsLe6wJcl17vP484u5r7eh01pflID Ua+D7WBtaL3NUWw8i3KnH9cSXayDDFrcsMitMAJbeuRoLKE63WQykaLmXGGf0PVN uVywhhCUIZLZtsz2aKh/WD6jLhgWoZIXwh4c42dwhRTHP+xHta3phmEFygBeuSIK laHgJbRs3A3/MYRo1vDuF/JVs6Egmcw0xJ8EqGS/EYvMauYxd4LIeP+BrkZXhn8V 7TASq62z4AH0RZCYT0VhmqkqdBfmNM4TtoDhIeWMC9B92ULK8yEo+WsjqWOL8naK A482NqAP7c6sR6K9Bu3VRDniIu8dt25lN1dWAff+5JbspOaCWwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIkVTgT/3f5G5vIX5wzALh4NtVc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACfbAH3K6oxa5CXkCKkn9bOzGBvzQMAADiNIcla1S8O7BBU3NATgGlX0b NFswA/qTiy/mqx54LsAza4oWgo9jySofVmvKM/rgEWtL1RZKG0almqWQ8zUqz/lA rRcIyHyd7/ZZE2BbhZbiPKIfrzFH73Uewsc3HZ7wPGpnX4q64lkrmUmgUjGHWdXR fWRMfh+6+LyDD6YSHQLOj88Gb83G0/ZjYPqfXTUoEDUsiPgu+aJpNK8YlT4fEQlM keVH1JkQWvExY/GReALneLIgPWOOo9MV8FiZo3sOgbTth56+MtA0kvFoVGqsfTZk B620xzZ90jM2PCZEzIHpzdkh8Qijig== -----END CERTIFICATE-----Generated at Fri May 24 01:53:49 2024 by rpki-client on console-fra.rpki-client.org