$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa File: 7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa (raw, json) Hash identifier: Ie8FXEUyx9RqCMklPEvwhhvalkaisEYlCWsq5Fj7NHU= Subject key identifier: 3F:D2:A2:64:5A:CC:96:75:56:B5:E0:24:DE:79:F5:20:65:CD:BD:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553334427FBF30752EB091100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 54682 IP address blocks: 74.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:44:27:fb:f3:07:52:eb:09:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=635fe96a-998d-43bc-b204-469de471e5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5c:8c:f8:f3:92:35:e5:d9:73:fd:76:2a:4d: 78:7b:36:03:f2:95:1f:2e:12:0c:4f:92:04:47:22: e6:8d:19:94:05:da:1c:69:95:a8:e9:be:e4:8f:51: da:77:58:d6:27:d5:46:d4:34:89:ba:17:57:b8:63: 07:e2:35:67:32:48:45:2b:95:90:88:7f:c1:63:a8: 08:c7:34:42:99:70:8f:36:51:15:32:18:f6:5c:ad: 7c:36:a8:15:36:bc:53:38:3c:b3:e2:6a:b0:f4:79: 18:e0:5b:7f:51:ae:fe:e3:bf:bf:9d:18:d7:3f:b0: d7:4e:e7:07:b6:5d:e7:b5:d8:7f:1e:68:93:2f:f1: 58:fb:87:e4:1e:bb:d6:00:14:00:1b:ac:1a:bd:3f: a0:c3:4c:46:10:a0:fd:36:0e:d0:89:37:ee:bd:73: 80:7c:db:3b:3f:4d:43:39:8a:40:1a:b9:bb:c0:59: 26:f4:70:94:0a:1e:61:66:94:32:10:3e:02:7d:43: 3a:30:f3:b0:d4:59:0d:83:74:2f:33:a1:4c:81:08: 89:04:52:3b:46:7d:55:02:ea:90:c9:19:90:4d:5f: e4:a2:f6:99:6d:54:d7:49:2e:65:c2:a4:f1:03:be: b9:f2:a2:ac:1b:6a:c8:ff:bf:cb:36:c6:19:71:ad: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D2:A2:64:5A:CC:96:75:56:B5:E0:24:DE:79:F5:20:65:CD:BD:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a6:d6:9a:9e:b2:9a:b6:53:7a:46:e6:1c:c5:8b:11:cf:a4: 81:ac:92:8b:59:35:e8:28:0b:3a:31:f6:9e:07:99:49:4e:1e: 40:b9:25:72:29:8a:ca:92:71:06:1f:0f:e1:50:c8:c6:e4:b6: 36:19:c8:ee:a5:f9:55:88:1e:7b:4f:f3:cd:cc:5b:c6:02:94: d1:77:49:3d:fe:89:d5:2f:51:7c:ca:2e:f7:9e:cb:13:e3:41: e4:d0:b4:49:6e:a2:04:38:b7:4f:ae:93:8c:6b:8c:d6:a5:2f: 00:38:5a:28:3d:ac:f0:32:18:65:2b:89:c7:bd:7f:94:3e:c1: 7a:80:e0:bc:6d:c7:3a:45:a3:92:8f:36:d4:cf:33:66:1c:95: 71:90:04:a7:93:e5:cc:4f:ca:42:e2:60:e1:44:0d:62:fc:d5: c1:3f:12:e5:f6:9d:4c:6a:87:91:57:cb:a7:fa:45:5c:7c:17: e1:25:4b:82:11:d3:fd:f3:a4:58:8e:74:7f:56:7f:1e:9e:5a: b6:db:56:eb:be:ce:cf:2b:f9:12:8d:dd:9e:f1:97:a3:c8:b3: f5:4b:ed:7d:e7:38:8c:bf:03:c2:9a:68:66:db:2d:f1:be:72: 02:cd:13:24:3a:bc:32:b2:6a:83:59:94:92:43:90:d8:89:3c: 31:64:4d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTM0Qn+/MHUusJEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NjM1ZmU5NmEtOTk4ZC00M2JjLWIyMDQtNDY5ZGU0NzFlNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVyM+POSNeXZc/12Kk14ezYD8pUfLhIMT5IE RyLmjRmUBdocaZWo6b7kj1Had1jWJ9VG1DSJuhdXuGMH4jVnMkhFK5WQiH/BY6gI xzRCmXCPNlEVMhj2XK18NqgVNrxTODyz4mqw9HkY4Ft/Ua7+47+/nRjXP7DXTucH tl3ntdh/HmiTL/FY+4fkHrvWABQAG6wavT+gw0xGEKD9Ng7QiTfuvXOAfNs7P01D OYpAGrm7wFkm9HCUCh5hZpQyED4CfUM6MPOw1FkNg3QvM6FMgQiJBFI7Rn1VAuqQ yRmQTV/kovaZbVTXSS5lwqTxA7658qKsG2rI/7/LNsYZca2GhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/SomRazJZ1VrXgJN559SBlzb0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UyOGM0ZDYtZmNiNy0z MjQ0LWFkZGUtNzk4ZTA5NGEyZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABim1pqespq2U3pG5hzFixHPpIGskotZNegoCzox9p4HmUlOHkC5JXIp isqScQYfD+FQyMbktjYZyO6l+VWIHntP883MW8YClNF3ST3+idUvUXzKLveeyxPj QeTQtEluogQ4t0+uk4xrjNalLwA4Wig9rPAyGGUrice9f5Q+wXqA4LxtxzpFo5KP NtTPM2YclXGQBKeT5cxPykLiYOFEDWL81cE/EuX2nUxqh5FXy6f6RVx8F+ElS4IR 0/3zpFiOdH9Wfx6eWrbbVuu+zs8r+RKN3Z7xl6PIs/VL7X3nOIy/A8KaaGbbLfG+ cgLNEyQ6vDKyaoNZlJJDkNiJPDFkTQ0= -----END CERTIFICATE-----Generated at Fri May 24 01:53:53 2024 by rpki-client on console-fra.rpki-client.org