$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa File: 8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa (raw, json) Hash identifier: UCkd6MLHx6GS95wnjqk2R6fAUX4sf60tkRSC6SlfGjU= Subject key identifier: CF:D1:81:3C:1C:98:97:27:4E:7E:92:3F:72:5A:8E:7A:7F:42:9C:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553333E6601EB14CC5303CF20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 29877 IP address blocks: 66.55.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:3e:66:01:eb:14:cc:53:03:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=37020420-f2e2-42bd-9778-9f618953c525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:75:17:7f:c3:1d:ce:13:8d:61:e8:dd:0f: 3c:f3:91:95:04:02:43:b9:6f:00:52:7b:39:14:6f: c1:7d:df:c2:94:60:d4:a1:0d:d7:c5:31:85:9b:71: d9:71:41:90:13:b5:41:40:ff:01:c2:bc:1f:19:d2: 36:db:c4:8e:da:d5:39:79:69:28:5e:56:cc:4c:2f: fd:2f:c4:b7:36:d9:b7:55:6a:c4:5d:74:ef:db:b7: 44:b9:a7:df:3d:bb:22:20:fa:ba:15:84:fd:8c:66: 78:a4:66:75:8c:fd:1f:6b:2c:3f:61:3d:90:ae:b6: e7:ae:64:3c:6e:92:cd:3a:78:14:56:a0:f3:03:d9: 91:f7:c7:dd:39:46:c2:f6:22:8c:f0:ce:0c:48:00: 82:70:71:6d:d7:c8:14:e0:20:b5:51:b3:dc:e8:87: 4f:05:5b:e4:5b:af:b4:74:45:ec:2a:47:f8:64:a8: 6b:b5:2e:98:eb:0d:15:4b:c0:a5:01:e2:32:30:2d: e5:a4:a6:08:5c:c1:49:a5:27:8e:b2:cd:1c:ea:b8: c0:38:c9:da:9c:e7:4f:58:6c:64:0e:ce:90:09:3e: dd:a7:e4:9f:f9:b6:99:7a:7d:3b:d1:e4:09:cf:d4: 27:1c:51:d3:36:27:8e:ad:77:f9:44:ab:5c:62:64: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:81:3C:1C:98:97:27:4E:7E:92:3F:72:5A:8E:7A:7F:42:9C:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a17f0a1-0ade-3e21-a559-98f1db6d2de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.55.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:88:05:98:fd:fd:a1:87:28:16:bb:d4:05:aa:02:17:7c:16: 6c:11:98:9a:79:30:d3:0f:37:e5:09:ac:81:c3:6e:53:67:22: ee:56:8d:d3:1c:cb:94:cb:32:46:fe:1e:e8:fd:d4:5e:86:d3: 1d:5b:c7:c3:fe:9f:f7:55:68:82:ae:40:10:ae:eb:c2:b9:4c: 56:3f:ab:c8:f4:33:91:3b:b6:7c:64:d7:bc:95:af:79:53:ed: c7:8c:a2:86:0e:3b:ad:bc:6d:5f:cb:49:09:f6:ac:0e:8a:ee: 54:b6:28:3e:0c:a7:f8:55:c0:b1:81:03:2c:e1:25:2a:5e:4d: 2a:1a:e6:85:2f:0d:53:5a:81:41:75:d1:3c:45:92:e5:a9:df: 15:af:07:33:0c:de:ef:c3:a9:90:06:a4:37:fb:61:ef:ef:91: 22:f0:90:87:a0:f4:39:5d:57:69:4e:13:dd:3c:32:cf:7a:d4: e1:7d:77:fe:57:7f:32:19:6c:67:bf:e8:d2:00:13:54:08:da: 75:1d:c6:ae:62:08:f3:e1:bd:42:43:46:e8:08:b6:d0:83:c1: b5:34:d0:7b:e2:c2:40:c9:16:b6:74:86:55:11:64:e2:6e:30: af:62:3c:57:88:e0:99:36:b0:bd:4d:9c:e4:14:08:7a:29:97: 25:10:a9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMz5mAesUzFMDzyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MzcwMjA0MjAtZjJlMi00MmJkLTk3NzgtOWY2MTg5NTNjNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoZ1F3/DHc4TjWHo3Q8885GVBAJDuW8AUns5 FG/Bfd/ClGDUoQ3XxTGFm3HZcUGQE7VBQP8BwrwfGdI228SO2tU5eWkoXlbMTC/9 L8S3Ntm3VWrEXXTv27dEuaffPbsiIPq6FYT9jGZ4pGZ1jP0fayw/YT2QrrbnrmQ8 bpLNOngUVqDzA9mR98fdOUbC9iKM8M4MSACCcHFt18gU4CC1UbPc6IdPBVvkW6+0 dEXsKkf4ZKhrtS6Y6w0VS8ClAeIyMC3lpKYIXMFJpSeOss0c6rjAOMnanOdPWGxk Ds6QCT7dp+Sf+baZen070eQJz9QnHFHTNieOrXf5RKtcYmQSsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/RgTwcmJcnTn6SP3Jajnp/QpzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGExN2YwYTEtMGFkZS0z ZTIxLWE1NTktOThmMWRiNmQyZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+IBZj9/aGHKBa71AWqAhd8FmwRmJp5MNMPN+UJrIHDblNnIu5WjdMc y5TLMkb+Huj91F6G0x1bx8P+n/dVaIKuQBCu68K5TFY/q8j0M5E7tnxk17yVr3lT 7ceMooYOO628bV/LSQn2rA6K7lS2KD4Mp/hVwLGBAyzhJSpeTSoa5oUvDVNagUF1 0TxFkuWp3xWvBzMM3u/DqZAGpDf7Ye/vkSLwkIeg9DldV2lOE908Ms961OF9d/5X fzIZbGe/6NIAE1QI2nUdxq5iCPPhvUJDRugIttCDwbU00HviwkDJFrZ0hlURZOJu MK9iPFeI4Jk2sL1NnOQUCHoplyUQqXc= -----END CERTIFICATE-----Generated at Fri May 24 01:53:54 2024 by rpki-client on console-fra.rpki-client.org