$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587be61b-8463-381f-9048-589a744cd92a.roa File: 587be61b-8463-381f-9048-589a744cd92a.roa (raw, json) Hash identifier: qBJZ82WO8HV2IN59enTxPGkjxT1zIu6lzT5gIcFK4Rs= Subject key identifier: FC:A4:79:40:3F:C7:78:CA:6B:76:3E:D5:16:29:4A:B9:33:33:7E:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533329EA44AA62BC26C88F50 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587be61b-8463-381f-9048-589a744cd92a.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 216.116.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:29:ea:44:aa:62:bc:26:c8:8f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=8e9a476e-6826-4096-b1b1-10af8377172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:d9:23:fd:ec:1f:37:29:ca:95:ba:39:22: 31:b6:06:06:0b:62:0e:ea:1d:02:7a:96:8a:6b:a8: 24:83:05:8f:c2:42:cd:15:f4:b4:cb:31:a6:24:83: 2c:bc:0f:1e:25:1e:84:06:ee:02:43:f3:5d:eb:ee: b1:09:4e:ea:2d:60:62:87:8b:9f:69:a2:53:0a:21: 5e:02:84:f6:67:7b:ee:8d:b2:3c:af:26:91:6f:33: 35:1c:9a:ae:e6:0e:64:be:0c:1e:53:60:4d:25:57: f3:42:a6:54:5b:dd:87:95:e0:8b:01:86:45:30:ff: 92:8b:eb:4f:18:71:18:0c:a8:e7:39:81:9f:59:f6: d6:d4:16:0f:5d:1d:2e:c3:42:bf:8b:66:36:39:70: 40:5d:01:45:28:c2:85:81:ff:ce:55:b0:e4:c9:c2: 05:3c:1c:70:89:e1:9b:b9:f5:2e:b3:4a:34:16:a2: ce:64:58:33:2c:9e:47:0d:48:52:97:6d:37:d9:4b: ad:df:cd:f6:51:b4:5f:9b:6a:28:d1:9a:7b:ec:08: de:a5:ba:59:2b:70:78:ba:b2:98:81:d4:1b:76:2b: ef:1e:82:67:33:d9:b4:0c:f1:ae:5b:1f:09:34:3f: 20:24:98:cc:c1:aa:85:9e:0f:cb:f5:13:bf:a7:2f: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A4:79:40:3F:C7:78:CA:6B:76:3E:D5:16:29:4A:B9:33:33:7E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587be61b-8463-381f-9048-589a744cd92a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.116.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:61:15:02:0a:2e:19:8c:51:b3:19:bb:97:b2:85:24:d3:be: 74:4f:45:c9:07:f4:f8:26:4a:ca:7c:02:fb:e6:a1:b6:dd:09: 04:a2:3c:29:9e:04:23:1f:8f:e7:9c:8c:8e:b8:01:dd:b7:d8: c7:1c:75:8a:ca:e8:32:70:2f:5f:6a:ae:89:c0:a9:91:a6:eb: 93:15:61:5c:20:2b:ea:5a:13:76:23:8b:1c:1a:96:b9:e5:34: ac:4b:14:2d:67:4f:ea:a3:3c:ac:97:07:5b:02:13:4f:3b:5b: ca:63:aa:4e:f0:cd:82:79:a9:ee:2e:c0:a9:25:fa:86:1a:b5: 6f:50:97:00:fb:a8:6b:35:d2:7d:0c:e1:83:cc:1b:38:54:bf: 05:6e:71:3c:9b:08:ab:b8:3a:6e:b5:27:67:2d:42:e1:36:59: 80:05:85:a7:6a:a1:18:af:00:2e:5e:17:3b:f1:60:47:b6:54: f0:20:53:54:51:a8:46:71:99:c0:75:1c:d7:80:ea:94:d3:68: 64:dd:37:ee:db:fc:05:c9:cc:da:30:cd:75:e7:60:a2:90:9d: 83:20:61:b0:c3:61:e5:8e:66:17:35:10:3a:9b:a3:39:a4:be: 40:02:4d:d4:c0:38:1c:34:6f:52:9a:f3:a0:03:b1:8d:69:ac: 55:01:89:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMynqRKpivCbIj1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OGU5YTQ3NmUtNjgyNi00MDk2LWIxYjEtMTBhZjgzNzcxNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+TZI/3sHzcpypW6OSIxtgYGC2IO6h0CepaK a6gkgwWPwkLNFfS0yzGmJIMsvA8eJR6EBu4CQ/Nd6+6xCU7qLWBih4ufaaJTCiFe AoT2Z3vujbI8ryaRbzM1HJqu5g5kvgweU2BNJVfzQqZUW92HleCLAYZFMP+Si+tP GHEYDKjnOYGfWfbW1BYPXR0uw0K/i2Y2OXBAXQFFKMKFgf/OVbDkycIFPBxwieGb ufUus0o0FqLOZFgzLJ5HDUhSl2032Uut3832UbRfm2oo0Zp77AjepbpZK3B4urKY gdQbdivvHoJnM9m0DPGuWx8JND8gJJjMwaqFng/L9RO/py9TIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPykeUA/x3jKa3Y+1RYpSrkzM35FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg3YmU2MWItODQ2My0z ODFmLTkwNDgtNTg5YTc0NGNkOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2HSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFhFQIKLhmMUbMZu5eyhSTTvnRPRckH9PgmSsp8AvvmobbdCQSiPCme BCMfj+ecjI64Ad232MccdYrK6DJwL19qronAqZGm65MVYVwgK+paE3Yjixwalrnl NKxLFC1nT+qjPKyXB1sCE087W8pjqk7wzYJ5qe4uwKkl+oYatW9QlwD7qGs10n0M 4YPMGzhUvwVucTybCKu4Om61J2ctQuE2WYAFhadqoRivAC5eFzvxYEe2VPAgU1RR qEZxmcB1HNeA6pTTaGTdN+7b/AXJzNowzXXnYKKQnYMgYbDDYeWOZhc1EDqbozmk vkACTdTAOBw0b1Ka86ADsY1prFUBicM= -----END CERTIFICATE-----Generated at Thu May 23 13:44:58 2024 by rpki-client on console-fra.rpki-client.org