$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67416a9c-33f9-3f90-b631-321afc3c8d25.roa File: 67416a9c-33f9-3f90-b631-321afc3c8d25.roa (raw, json) Hash identifier: CM4wmO8PGBFQJ//7MHOJu9oSZ2uWJNRPOQAgJOjYmJ4= Subject key identifier: BE:96:86:0D:EC:9B:FE:A4:FC:68:0F:B5:8A:BC:A7:DD:C1:BA:92:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332EC04AE4A8DD2CD776800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67416a9c-33f9-3f90-b631-321afc3c8d25.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 69.66.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ec:04:ae:4a:8d:d2:cd:77:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=24376e71-4549-442f-b327-589aaff97043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:ca:d3:d9:cd:0d:e0:c4:d7:e0:9c:2d:95: 1d:96:87:9b:bd:ca:21:4f:4e:ea:90:2b:7b:7c:5f: 5c:07:a3:ed:31:06:1e:4d:ec:b2:99:c8:ba:47:07: 12:71:04:1a:79:3d:8b:d1:e3:ec:be:53:25:1c:74: 4d:90:1c:e2:0c:39:d3:46:df:d0:cd:e2:82:57:a6: 87:58:00:3a:f4:50:89:19:4b:3e:6c:5f:3e:6c:4b: 87:1a:86:ad:d5:5f:25:ef:70:fd:54:d2:86:d5:18: de:b9:bc:04:90:db:ce:9d:46:43:a7:74:8c:61:63: 42:e1:0a:24:28:b4:2b:88:f6:85:97:f0:23:47:e0: 3a:30:d4:17:90:40:8b:ff:a3:c8:53:cc:86:f3:35: ec:53:db:7a:10:b3:c8:01:b1:f9:02:34:8e:60:17: 68:61:bc:f5:2c:20:83:4a:ca:1e:8c:13:93:fe:f6: 1b:02:d6:11:56:c0:51:2d:05:65:69:9d:48:aa:9c: 21:bc:83:6a:a6:83:0f:6b:ff:40:91:fc:75:f8:38: 34:c6:42:b1:cc:b1:0d:c2:85:5e:33:9c:e6:25:e1: 0b:bd:d9:92:47:7b:90:45:dc:db:af:1c:2d:1b:01: db:ea:99:cc:1e:fb:56:80:7f:74:9e:61:e0:4a:0f: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:96:86:0D:EC:9B:FE:A4:FC:68:0F:B5:8A:BC:A7:DD:C1:BA:92:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67416a9c-33f9-3f90-b631-321afc3c8d25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ba:3c:d9:8a:30:4d:ea:1e:d3:4e:57:20:17:b4:b4:91:ed: af:3c:f1:74:38:ba:e8:9f:3b:5d:8c:f3:fd:fa:d0:64:43:2a: ba:ba:20:fc:b6:4c:bf:07:ef:0b:1f:df:49:3c:eb:b1:fc:bc: 41:b1:c9:3d:35:5b:a9:b2:d8:9e:77:15:ed:d7:2c:89:e4:e4: 8b:03:69:8e:81:c2:6d:42:14:b8:e9:65:c1:55:9a:de:83:7e: 52:18:ec:8f:63:29:76:99:68:68:1e:a2:5d:96:ea:c0:23:29: c1:62:5c:a1:f4:09:16:45:41:18:62:a3:5d:79:a8:f7:cb:24: 72:fd:7e:45:9b:a8:3d:69:c4:74:7e:bf:dd:45:b5:f2:d7:f6: 8a:9a:76:3e:9e:00:cb:c3:2e:11:9b:ff:36:98:4f:56:0a:47: 1f:d6:c5:d2:45:73:d1:17:78:72:4d:2c:9b:56:59:e5:8e:d6: 4e:98:2d:53:1e:20:f9:fe:03:c4:b5:6d:11:a2:ef:19:cb:ce: f4:5d:03:96:ec:03:07:4e:4a:f0:09:fc:c3:f2:cd:b2:1b:02: db:49:47:f3:76:0f:cd:4c:96:a2:ef:be:57:b4:c9:07:60:4a: 5b:f1:df:40:e6:b5:ce:01:28:37:19:fa:43:73:38:98:7c:ad: 13:c9:33:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuwErkqN0s13aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MjQzNzZlNzEtNDU0OS00NDJmLWIzMjctNTg5YWFmZjk3MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx7K09nNDeDE1+CcLZUdloebvcohT07qkCt7 fF9cB6PtMQYeTeyymci6RwcScQQaeT2L0ePsvlMlHHRNkBziDDnTRt/QzeKCV6aH WAA69FCJGUs+bF8+bEuHGoat1V8l73D9VNKG1RjeubwEkNvOnUZDp3SMYWNC4Qok KLQriPaFl/AjR+A6MNQXkECL/6PIU8yG8zXsU9t6ELPIAbH5AjSOYBdoYbz1LCCD SsoejBOT/vYbAtYRVsBRLQVlaZ1IqpwhvINqpoMPa/9Akfx1+Dg0xkKxzLENwoVe M5zmJeELvdmSR3uQRdzbrxwtGwHb6pnMHvtWgH90nmHgSg+bfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6Whg3sm/6k/GgPtYq8p93BupIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc0MTZhOWMtMzNmOS0z ZjkwLWI2MzEtMzIxYWZjM2M4ZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa6PNmKME3qHtNOVyAXtLSR7a888XQ4uuifO12M8/360GRDKrq6IPy2 TL8H7wsf30k867H8vEGxyT01W6my2J53Fe3XLInk5IsDaY6Bwm1CFLjpZcFVmt6D flIY7I9jKXaZaGgeol2W6sAjKcFiXKH0CRZFQRhio115qPfLJHL9fkWbqD1pxHR+ v91FtfLX9oqadj6eAMvDLhGb/zaYT1YKRx/WxdJFc9EXeHJNLJtWWeWO1k6YLVMe IPn+A8S1bRGi7xnLzvRdA5bsAwdOSvAJ/MPyzbIbAttJR/N2D81MlqLvvle0yQdg Slvx30Dmtc4BKDcZ+kNzOJh8rRPJM/w= -----END CERTIFICATE-----Generated at Thu May 23 20:11:52 2024 by rpki-client on console-ams.rpki-client.org