$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78a65fa3-2671-3687-89ec-546777441e8d.roa File: 78a65fa3-2671-3687-89ec-546777441e8d.roa (raw, json) Hash identifier: um9UHMHLnHe71BAdFsUX68dznsdo2GjAtczazSzUDQQ= Subject key identifier: 2F:4C:5C:4C:CA:30:2F:E5:92:65:D3:B6:32:28:61:F5:5E:2C:52:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E25517EC9F0B5068C000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78a65fa3-2671-3687-89ec-546777441e8d.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 66.36.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e2:55:17:ec:9f:0b:50:68:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=db2c1f2e-b928-46b3-a191-49570a2b2d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:98:67:71:1e:73:22:31:3b:6b:49:90:f9: 62:75:27:7a:cb:91:76:09:7b:6f:da:92:f7:8a:b4: 38:f9:03:43:ed:57:f0:15:d7:9a:6f:7e:df:7b:e0: 55:58:20:fd:71:8f:fe:6e:a2:5c:5a:9a:9d:db:61: d1:9d:56:65:f4:41:a8:e6:a2:70:ae:84:f0:d3:e8: a2:c1:32:8b:3c:8a:20:07:a8:eb:1d:fc:16:49:b6: 71:a9:c7:98:b6:25:ec:bb:1f:6e:06:65:3f:82:24: 8f:38:74:6e:d6:29:1d:1f:81:8c:0d:45:1b:72:13: b3:58:5c:0d:4f:a4:8a:86:ed:0f:56:e5:3c:89:79: 6f:40:64:c5:9c:97:88:25:22:7b:d9:10:f3:d4:06: a1:06:f7:fc:59:76:ba:71:98:8b:66:7f:63:bf:a5: d9:c4:0a:4a:98:69:1c:59:c1:d4:78:3e:6c:05:12: cb:2f:8d:6f:b3:da:d9:1b:b8:2e:51:c7:85:f7:75: 98:20:aa:fd:18:f9:7a:e5:4a:bf:ac:2b:e0:24:23: da:7e:fd:c8:f5:00:e3:68:63:28:94:90:6d:e7:e4: 21:a1:ac:ac:2f:77:b6:d8:6d:ba:71:b4:ae:0e:8d: 66:e3:50:05:d9:c9:dc:51:a2:23:de:56:c7:4c:55: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4C:5C:4C:CA:30:2F:E5:92:65:D3:B6:32:28:61:F5:5E:2C:52:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78a65fa3-2671-3687-89ec-546777441e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.36.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4b:5b:62:7e:12:44:63:42:0c:4f:6d:d0:88:5e:d3:e4:92: 4c:bf:a1:07:d6:8b:a9:20:e0:37:7f:50:03:85:ca:df:9e:4c: 67:dd:83:ac:b3:8d:e0:66:a7:fa:71:46:78:79:b3:7f:1f:4d: 76:88:bc:f7:f0:05:b7:5f:4f:41:c4:53:d4:08:f4:30:2b:40: 93:19:a7:a2:c1:fb:bd:53:48:c1:ea:ba:c4:c6:5a:a6:ea:87: 2a:e9:e9:53:29:d8:79:33:26:bb:ee:dc:d9:66:23:25:a2:51: da:2a:5d:b3:91:db:fd:cf:5f:b7:14:2f:8a:a0:ee:06:19:b2: 4a:27:2e:5b:3c:06:cd:c6:9d:8e:a9:5a:d0:5b:7f:af:81:38: 6c:65:c0:4c:1f:9f:bd:27:3e:30:aa:45:fd:f1:09:9a:52:24: 0f:ef:d2:93:e7:50:98:d2:21:a1:f7:98:b4:80:7f:1b:ac:25: c5:8f:4e:04:9c:bb:1b:b8:08:bd:10:51:d4:6d:15:15:01:ed: 6a:dd:60:2a:68:53:cc:88:db:34:a3:1e:39:f6:f7:bb:eb:82: 6e:fb:4f:0c:a1:dc:89:d7:b6:3e:ba:de:54:0b:0b:59:75:c0: 8f:1e:04:bd:f7:b3:39:22:65:56:d3:0a:63:15:a9:8a:c3:39: 11:db:5e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuJVF+yfC1BowAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZGIyYzFmMmUtYjkyOC00NmIzLWExOTEtNDk1NzBhMmIyZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpSYZ3EecyIxO2tJkPlidSd6y5F2CXtv2pL3 irQ4+QND7VfwFdeab37fe+BVWCD9cY/+bqJcWpqd22HRnVZl9EGo5qJwroTw0+ii wTKLPIogB6jrHfwWSbZxqceYtiXsux9uBmU/giSPOHRu1ikdH4GMDUUbchOzWFwN T6SKhu0PVuU8iXlvQGTFnJeIJSJ72RDz1AahBvf8WXa6cZiLZn9jv6XZxApKmGkc WcHUeD5sBRLLL41vs9rZG7guUceF93WYIKr9GPl65Uq/rCvgJCPafv3I9QDjaGMo lJBt5+QhoaysL3e22G26cbSuDo1m41AF2cncUaIj3lbHTFWqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9MXEzKMC/lkmXTtjIoYfVeLFK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzhhNjVmYTMtMjY3MS0z Njg3LTg5ZWMtNTQ2Nzc3NDQxZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQiQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhLW2J+EkRjQgxPbdCIXtPkkky/oQfWi6kg4Dd/UAOFyt+eTGfdg6yz jeBmp/pxRnh5s38fTXaIvPfwBbdfT0HEU9QI9DArQJMZp6LB+71TSMHqusTGWqbq hyrp6VMp2HkzJrvu3NlmIyWiUdoqXbOR2/3PX7cUL4qg7gYZskonLls8Bs3GnY6p WtBbf6+BOGxlwEwfn70nPjCqRf3xCZpSJA/v0pPnUJjSIaH3mLSAfxusJcWPTgSc uxu4CL0QUdRtFRUB7WrdYCpoU8yI2zSjHjn297vrgm77Twyh3InXtj663lQLC1l1 wI8eBL33szkiZVbTCmMVqYrDORHbXnI= -----END CERTIFICATE-----Generated at Thu May 23 13:45:00 2024 by rpki-client on console-fra.rpki-client.org