$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868dec1d-0a06-3679-aa9d-b59d04977819.roa File: 868dec1d-0a06-3679-aa9d-b59d04977819.roa (raw, json) Hash identifier: 8TSlwIx+SgJNzowURJ/62P/R+LkEfDHJENJD/K6Wul8= Subject key identifier: F2:61:37:49:95:0C:DA:F3:15:F2:2D:51:82:68:B5:E5:FF:62:93:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328583D57E59A543839E22D7A609700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868dec1d-0a06-3679-aa9d-b59d04977819.roa Signing time: Thu 24 Mar 2022 04:00:00 +0000 ROA not before: Thu 24 Mar 2022 04:00:00 +0000 ROA not after: Thu 16 Mar 2028 04:00:00 +0000 asID: 64200 IP address blocks: 216.41.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Jul 2023 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:57:e5:9a:54:38:39:e2:2d:7a:60:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 24 04:00:00 2022 GMT Not After : Mar 16 04:00:00 2028 GMT Subject: CN=28ec87c6-a9b5-405a-8f94-b9fc2af93e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:fa:86:b6:5a:23:5e:ee:61:c0:f9:97:cc: c9:0a:f9:66:61:94:d8:cf:fd:91:e5:15:a8:89:a2: 5c:32:ce:1e:e7:6d:75:f9:11:15:3b:6d:59:f3:43: ff:67:24:b5:f5:19:df:eb:ed:b6:a7:51:14:fa:eb: ee:6d:c7:dd:b7:61:57:40:1d:2b:c0:bc:13:5e:53: 70:88:ab:a9:4a:43:f6:6c:1e:5f:c3:c4:58:5c:1a: 23:ec:2f:6b:b0:fc:cd:7c:96:00:4e:98:7c:f5:5c: ad:7b:40:84:4b:31:32:e2:06:3e:3b:77:77:91:87: 84:d3:dd:bc:b2:6e:dd:3c:ac:3e:67:20:e4:6f:30: c2:9d:77:ea:1e:e3:e5:a6:b5:34:fb:23:6e:db:d8: be:c2:77:da:62:d8:6a:fb:9f:34:51:41:ea:2d:74: e0:72:79:58:35:e3:94:db:1e:20:c5:f6:2d:09:9e: ac:8c:c8:44:62:cc:54:50:5a:3d:f2:15:cb:84:b2: 46:55:1b:a8:6b:d1:47:6f:00:20:ef:71:c6:73:dc: 03:ba:7b:62:0f:1d:ae:ed:7b:bb:f4:60:02:1e:46: 2b:bd:7b:39:25:52:7d:71:4e:ee:f5:38:ac:2b:41: 46:24:db:25:1e:5b:e1:fb:e8:a8:51:9a:34:28:85: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:61:37:49:95:0C:DA:F3:15:F2:2D:51:82:68:B5:E5:FF:62:93:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868dec1d-0a06-3679-aa9d-b59d04977819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.41.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:02:e3:a3:75:08:e6:99:88:3b:c3:05:ad:9b:31:c9:39:63: 24:2d:44:bf:1b:5f:e9:4e:11:f6:e7:3a:ea:e3:eb:c6:5a:f2: a5:73:97:02:6a:53:66:fe:60:82:9d:07:29:6e:8f:42:13:5a: ba:12:5b:4b:51:08:00:48:b8:bc:85:c0:d9:86:bd:83:0a:46: 97:ca:8a:40:ea:bb:92:f0:84:4d:e7:ba:ce:76:2c:29:92:9c: e1:1f:31:2c:6b:30:25:76:98:db:bf:af:e1:3a:60:42:d1:e5: be:a5:85:91:c4:84:4d:1a:4f:3e:00:4e:16:56:91:09:a5:6e: 20:ba:f4:bf:1f:68:20:dd:6f:6a:b6:7d:85:78:d8:09:56:a5: 58:97:ef:d6:45:74:7e:c8:d4:ee:1d:b4:72:47:81:72:c1:d7: dd:86:ee:13:83:a7:b2:00:b4:b5:77:3d:7d:39:1d:31:27:2c: c1:b4:37:a7:37:fd:e1:fb:66:bc:dd:cf:41:9d:5a:19:2c:a9: be:0a:10:82:f3:e9:51:54:0d:99:98:67:5b:05:51:a2:b7:ce: 42:15:85:70:14:a9:f3:82:a8:28:f6:87:28:3d:f4:4b:07:85: 9e:b1:50:21:cc:13:7f:ab:b1:9b:64:35:d3:5e:7a:c0:44:f1: 19:2a:a2:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1X5ZpUODniLXpglwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTIyMDMyNDA0MDAwMFoXDTI4MDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk MjhlYzg3YzYtYTliNS00MDVhLThmOTQtYjlmYzJhZjkzZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQf6hrZaI17uYcD5l8zJCvlmYZTYz/2R5RWo iaJcMs4e5211+REVO21Z80P/ZyS19Rnf6+22p1EU+uvubcfdt2FXQB0rwLwTXlNw iKupSkP2bB5fw8RYXBoj7C9rsPzNfJYATph89Vyte0CESzEy4gY+O3d3kYeE0928 sm7dPKw+ZyDkbzDCnXfqHuPlprU0+yNu29i+wnfaYthq+580UUHqLXTgcnlYNeOU 2x4gxfYtCZ6sjMhEYsxUUFo98hXLhLJGVRuoa9FHbwAg73HGc9wDuntiDx2u7Xu7 9GACHkYrvXs5JVJ9cU7u9TisK0FGJNslHlvh++ioUZo0KIWJewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJhN0mVDNrzFfItUYJoteX/YpNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODY4ZGVjMWQtMGEwNi0z Njc5LWFhOWQtYjU5ZDA0OTc3ODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcC46N1COaZiDvDBa2bMck5YyQtRL8bX+lOEfbnOurj68Za8qVzlwJq U2b+YIKdByluj0ITWroSW0tRCABIuLyFwNmGvYMKRpfKikDqu5LwhE3nus52LCmS nOEfMSxrMCV2mNu/r+E6YELR5b6lhZHEhE0aTz4AThZWkQmlbiC69L8faCDdb2q2 fYV42AlWpViX79ZFdH7I1O4dtHJHgXLB192G7hODp7IAtLV3PX05HTEnLMG0N6c3 /eH7Zrzdz0GdWhksqb4KEILz6VFUDZmYZ1sFUaK3zkIVhXAUqfOCqCj2hyg99EsH hZ6xUCHME3+rsZtkNdNeesBE8Rkqoik= -----END CERTIFICATE-----Generated at Wed Jul 19 22:38:57 2023 by rpki-client on console-fra.rpki-client.org