$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97659691-d19d-3565-a95a-d5763eda2649.roa File: 97659691-d19d-3565-a95a-d5763eda2649.roa (raw, json) Hash identifier: EF0R3FGNiiYOm76qVJqz7L1EE1NkWtE6EJfVmvRj2Vc= Subject key identifier: 77:F7:39:C7:2F:EE:45:EE:00:A5:8C:8D:8A:2C:68:F8:43:73:3F:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332F0D5FAE8C44ADE82D600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97659691-d19d-3565-a95a-d5763eda2649.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 71.29.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:f0:d5:fa:e8:c4:4a:de:82:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=31dc4886-7b16-446c-8aae-ff128cf9d3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:a3:0f:c0:25:86:3a:75:78:4e:84:78:24: 12:df:4f:aa:af:50:0d:89:de:46:52:5a:dc:27:e3: 58:6a:29:8d:ce:ca:ed:f2:60:25:a2:70:7d:92:33: 3c:d5:ce:79:dd:29:71:f5:87:52:9e:d5:fb:b7:2e: ac:41:c6:35:4f:ff:e4:9c:68:60:44:c9:a6:8c:9e: e2:13:ed:0d:6d:d7:aa:f8:2e:c9:95:86:3e:15:ab: 90:1d:89:5e:af:ee:fa:9c:a9:e2:13:c8:2d:b2:9a: a4:02:80:89:c8:61:67:18:e6:6d:d6:c9:52:58:f6: f9:1e:f0:30:b4:e7:60:04:3b:4f:7f:04:12:3a:14: bb:bf:cf:f1:2c:f8:b9:38:85:c2:6f:22:16:f7:72: be:27:a8:a3:f3:85:f9:58:79:04:61:e0:70:56:4e: 09:a0:73:ac:87:3a:78:67:0d:d4:4e:68:03:d6:84: 12:fc:4e:dd:bd:8d:dc:09:64:2a:ce:c7:6f:2a:e8: 76:a1:60:fa:62:ab:4e:1c:6e:c2:8b:34:41:f0:6c: 53:1a:ed:3e:e9:8f:ae:19:e5:c4:73:a6:3f:20:9f: b7:79:13:14:05:08:92:88:1f:dd:85:bb:e3:88:0f: 49:76:d4:e2:9a:b9:84:30:b4:1f:53:de:b6:6b:ae: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F7:39:C7:2F:EE:45:EE:00:A5:8C:8D:8A:2C:68:F8:43:73:3F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97659691-d19d-3565-a95a-d5763eda2649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7c:57:ff:27:79:59:74:f2:38:f9:bf:0a:69:7a:4b:77:70: 8d:c2:76:32:53:ad:1a:6a:14:b7:54:fb:e5:b8:8e:b9:5f:14: b8:39:ac:bc:aa:88:3d:c6:e0:1d:d0:b4:26:b5:ca:a0:4e:04: f2:19:b8:03:f8:c9:dc:32:55:00:76:40:63:83:60:74:fc:2b: c1:b5:de:7f:d9:46:44:08:cb:55:94:bd:65:5c:c5:3d:ff:14: c0:6e:5b:a7:c1:b4:b5:d8:2b:84:58:7e:fb:6d:c2:9e:4f:fb: f2:9c:ce:a0:33:dc:63:11:95:2c:92:02:03:0b:9a:7a:6c:a4: 5b:b6:24:7b:54:e1:c5:8c:a7:c9:cb:3f:d6:53:54:b2:a3:ca: 90:31:b1:be:ce:27:29:fc:27:76:d1:6e:6a:b0:9a:78:1a:07: cc:4e:2f:a6:48:2a:11:8f:fb:6c:5a:16:63:37:51:70:36:96: 58:3d:99:64:0c:8e:5e:5b:24:c9:bd:84:25:3b:d1:be:50:c0: 6f:28:dc:d6:81:8f:f9:e7:17:46:cd:ec:90:9b:d3:3d:75:93: fc:45:54:a2:13:41:75:af:5d:50:30:10:73:f5:38:a1:e0:8d: 8f:11:16:69:a5:0c:51:ce:d5:44:1a:51:62:5e:71:71:4d:58: 4d:74:d6:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvDV+ujESt6C1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MzFkYzQ4ODYtN2IxNi00NDZjLThhYWUtZmYxMjhjZjlkM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHCjD8Alhjp1eE6EeCQS30+qr1ANid5GUlrc J+NYaimNzsrt8mAlonB9kjM81c553Slx9YdSntX7ty6sQcY1T//knGhgRMmmjJ7i E+0Nbdeq+C7JlYY+FauQHYler+76nKniE8gtspqkAoCJyGFnGOZt1slSWPb5HvAw tOdgBDtPfwQSOhS7v8/xLPi5OIXCbyIW93K+J6ij84X5WHkEYeBwVk4JoHOshzp4 Zw3UTmgD1oQS/E7dvY3cCWQqzsdvKuh2oWD6YqtOHG7CizRB8GxTGu0+6Y+uGeXE c6Y/IJ+3eRMUBQiSiB/dhbvjiA9JdtTimrmEMLQfU962a66wqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf3Occv7kXuAKWMjYosaPhDcz96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2NTk2OTEtZDE5ZC0z NTY1LWE5NWEtZDU3NjNlZGEyNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ8V/8neVl08jj5vwppekt3cI3CdjJTrRpqFLdU++W4jrlfFLg5rLyq iD3G4B3QtCa1yqBOBPIZuAP4ydwyVQB2QGODYHT8K8G13n/ZRkQIy1WUvWVcxT3/ FMBuW6fBtLXYK4RYfvttwp5P+/KczqAz3GMRlSySAgMLmnpspFu2JHtU4cWMp8nL P9ZTVLKjypAxsb7OJyn8J3bRbmqwmngaB8xOL6ZIKhGP+2xaFmM3UXA2llg9mWQM jl5bJMm9hCU70b5QwG8o3NaBj/nnF0bN7JCb0z11k/xFVKITQXWvXVAwEHP1OKHg jY8RFmmlDFHO1UQaUWJecXFNWE101nY= -----END CERTIFICATE-----Generated at Thu May 23 19:42:31 2024 by rpki-client on console-fra.rpki-client.org