$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64e766a9-1ce2-39a8-b830-0173ce6729cc.roa File: 64e766a9-1ce2-39a8-b830-0173ce6729cc.roa (raw, json) Hash identifier: wCCi3p2fq3qs22UAcAR0d0dFNhcdx+6TjVM0B1iH7xs= Subject key identifier: 9E:90:73:94:B0:B2:3C:60:E5:C2:D7:CA:A9:B3:61:D5:EA:26:C2:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328583D1AFABF2AF6AD657A165AC9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64e766a9-1ce2-39a8-b830-0173ce6729cc.roa Signing time: Wed 02 Mar 2022 05:00:00 +0000 ROA not before: Wed 02 Mar 2022 05:00:00 +0000 ROA not after: Wed 23 Feb 2028 05:00:00 +0000 asID: 7029 IP address blocks: 40.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:1a:fa:bf:2a:f6:ad:65:7a:16:5a:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 2 05:00:00 2022 GMT Not After : Feb 23 05:00:00 2028 GMT Subject: CN=4b1a6c14-1469-4446-ac04-a2d9f345faaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:df:a7:05:05:eb:79:ef:39:1e:ab:b0:a5: 63:48:f7:f3:4d:59:d5:29:3f:04:b3:33:cc:39:f6: 6d:c7:19:ad:25:77:05:33:2a:96:7c:ef:b2:c8:93: 2c:b7:39:8f:7b:34:9d:e0:3f:ba:80:58:0c:54:63: 00:ee:c1:23:6b:0d:f5:4a:0d:81:91:68:a5:78:46: 53:55:1e:1a:52:6d:9b:87:86:6a:66:dc:d0:c9:93: 60:8e:db:4e:b4:5c:19:2c:1a:89:a6:3b:e4:8f:b7: 60:de:61:4c:25:eb:9b:e2:96:40:97:82:68:19:34: bb:38:37:bc:3e:f8:2b:cd:30:36:55:c6:16:f5:43: 98:d2:17:eb:ef:08:a9:d1:b0:60:5c:cd:fe:b8:94: f9:15:78:f3:66:19:96:72:5c:71:40:a0:1c:25:df: 4d:98:c1:53:85:0d:ad:65:8f:ae:45:f7:42:aa:7a: c5:44:fe:bf:b2:55:69:34:5d:e4:7f:8b:b8:e8:0a: f3:fb:44:93:c0:04:a6:be:e3:25:7c:17:7a:67:6e: 5f:78:7b:df:7a:df:ba:ed:4e:eb:a9:3b:77:ef:b6: a5:7b:55:97:a1:6c:95:2c:fa:71:a6:d6:80:91:de: 0c:f8:57:b3:26:08:10:06:73:b3:48:cc:c0:7c:f2: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:90:73:94:B0:B2:3C:60:E5:C2:D7:CA:A9:B3:61:D5:EA:26:C2:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64e766a9-1ce2-39a8-b830-0173ce6729cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:65:df:3c:b3:b8:a0:64:c8:da:c1:71:5e:dc:8d:f8:af:97: df:98:e5:9a:c4:e1:6a:fe:be:ef:01:27:ec:e3:27:25:15:9b: 72:4e:e4:76:e3:c2:f1:27:27:be:f7:be:13:7d:8c:aa:58:74: 3c:46:62:33:bc:9c:8b:02:0f:4e:fc:d8:e8:cf:f2:f2:c1:a4: a0:36:8b:ed:cf:13:29:fa:b3:28:f4:82:45:31:cd:44:6f:89: 39:d7:a6:85:d4:8b:22:88:97:1c:b2:4b:a7:12:a5:b5:2e:d7: 49:b0:68:27:ee:37:a2:fb:20:d9:37:16:2c:3c:63:38:f6:f8: 9d:d3:1d:c5:a0:3e:aa:56:c1:dd:8a:e3:17:fc:6b:6c:19:5e: cb:02:c7:fd:e0:e1:bd:e4:77:44:9f:f8:1d:4a:ee:4b:51:4d: 71:37:a8:3c:0d:ce:34:ee:0a:6c:ce:f0:eb:4b:5e:be:76:4c: b0:47:65:13:eb:ca:8b:cb:68:b8:d7:00:50:e3:e7:c5:e4:49: f7:94:ba:00:2a:98:a7:0e:7d:c2:c2:33:47:b0:25:ec:ee:d5: 4a:f2:5a:a8:74:4a:a3:34:09:4e:c1:36:9f:75:46:f9:c0:30: 67:e1:27:01:b7:12:21:2a:da:0d:b1:c9:ae:39:51:a0:77:93: 8c:e7:b8:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0a+r8q9q1lehZaycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTIyMDMwMjA1MDAwMFoXDTI4MDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk NGIxYTZjMTQtMTQ2OS00NDQ2LWFjMDQtYTJkOWYzNDVmYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxbfpwUF63nvOR6rsKVjSPfzTVnVKT8EszPM OfZtxxmtJXcFMyqWfO+yyJMstzmPezSd4D+6gFgMVGMA7sEjaw31Sg2BkWileEZT VR4aUm2bh4ZqZtzQyZNgjttOtFwZLBqJpjvkj7dg3mFMJeub4pZAl4JoGTS7ODe8 PvgrzTA2VcYW9UOY0hfr7wip0bBgXM3+uJT5FXjzZhmWclxxQKAcJd9NmMFThQ2t ZY+uRfdCqnrFRP6/slVpNF3kf4u46Arz+0STwASmvuMlfBd6Z25feHvfet+67U7r qTt377ale1WXoWyVLPpxptaAkd4M+FezJggQBnOzSMzAfPJDxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6Qc5Swsjxg5cLXyqmzYdXqJsJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRlNzY2YTktMWNlMi0z OWE4LWI4MzAtMDE3M2NlNjcyOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9l3zyzuKBkyNrBcV7cjfivl9+Y5ZrE4Wr+vu8BJ+zjJyUVm3JO5Hbj wvEnJ773vhN9jKpYdDxGYjO8nIsCD0782OjP8vLBpKA2i+3PEyn6syj0gkUxzURv iTnXpoXUiyKIlxyyS6cSpbUu10mwaCfuN6L7INk3Fiw8Yzj2+J3THcWgPqpWwd2K 4xf8a2wZXssCx/3g4b3kd0Sf+B1K7ktRTXE3qDwNzjTuCmzO8OtLXr52TLBHZRPr yovLaLjXAFDj58XkSfeUugAqmKcOfcLCM0ewJezu1UryWqh0SqM0CU7BNp91RvnA MGfhJwG3EiEq2g2xya45UaB3k4znuJU= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:39 2024 by rpki-client on console-ams.rpki-client.org