$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ab2af8c-2280-38ce-aba9-25beffa8c4ce.roa File: 9ab2af8c-2280-38ce-aba9-25beffa8c4ce.roa (raw, json) Hash identifier: A6vaDBg3wlDFkwttR9eXh92XpNPMvCh4Oh2j6yaff6U= Subject key identifier: 86:DA:16:20:9A:15:6A:70:CA:8A:4B:8B:0A:17:71:D6:A2:61:DB:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333161352667645E27C0550 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ab2af8c-2280-38ce-aba9-25beffa8c4ce.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 198.14.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:16:13:52:66:76:45:e2:7c:05:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=cf29d3d5-29fc-434f-a745-b2ad809b710f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:b3:7f:16:c9:8d:46:32:00:89:1b:01:85: 50:4e:09:60:62:cb:2c:4e:80:88:0c:52:23:09:b9: 76:a7:6b:75:ef:6a:cd:9e:a4:19:b4:7a:07:af:ab: 62:18:73:58:02:96:08:f4:a7:77:42:a3:59:9b:47: 49:2b:93:e1:77:ca:7a:4d:1e:15:34:85:bd:6b:fd: 6e:86:7c:aa:33:77:8f:36:cf:7c:74:52:5e:3d:4e: 38:aa:ad:a5:2a:3b:c2:06:f2:74:a8:76:8a:09:09: 22:3f:46:15:9f:09:76:5f:2b:7a:41:ba:aa:bf:75: 40:ce:14:fb:e1:b4:57:ed:ef:93:99:e3:64:e2:83: 88:16:64:24:61:7c:b1:73:90:31:7b:bf:0d:37:d4: af:b7:df:53:18:fd:e5:b1:ac:09:a1:36:04:bd:76: ba:87:34:e5:34:ef:4e:74:e6:a5:37:b1:06:3b:b0: 15:99:55:ee:3f:d7:e7:7a:48:8d:08:14:69:c4:cb: a7:30:3d:9d:cf:9a:9b:92:c9:a1:ee:de:62:ec:5d: e5:c3:83:26:f9:5a:98:ae:82:0d:89:1c:28:4f:54: b0:ae:6e:9a:13:06:b8:78:76:b2:47:ab:c7:37:c3: 09:01:a8:ac:a6:1c:a4:95:4d:45:d2:f4:6d:a4:b6: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:16:20:9A:15:6A:70:CA:8A:4B:8B:0A:17:71:D6:A2:61:DB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ab2af8c-2280-38ce-aba9-25beffa8c4ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f6:85:fd:b3:41:69:69:8d:60:8a:a9:41:4a:6e:35:b0:f8: f6:a7:d1:77:38:ce:ad:2c:0d:87:17:44:b5:c2:09:ca:e0:78: ac:3d:68:f2:50:4a:96:a3:4d:df:62:fd:09:98:b1:50:c1:89: 11:02:48:3a:3c:37:3f:d2:a8:29:d6:13:a3:f6:9a:13:be:be: 02:b4:48:4f:fc:7a:64:b0:fb:34:f6:ac:af:70:52:29:77:40: eb:5a:dd:87:2f:bf:1f:db:f4:71:7f:eb:b8:cb:6d:25:9b:38: 2d:a9:bf:3e:87:d2:0c:63:4e:03:a8:2a:ca:d5:a8:7e:4e:57: d0:fa:d7:66:ca:81:33:1d:34:c0:a6:7c:a3:4f:5d:8a:eb:b3: da:0e:bd:bd:ed:5c:7c:dc:0e:59:37:0e:6a:3f:b5:5e:d4:5c: 5b:53:95:03:e5:06:20:bf:0e:9f:c2:71:53:52:1d:01:d8:82: 63:9f:7e:8d:17:4b:5e:fc:63:07:f4:3c:e7:9a:21:9f:74:b4: 72:b3:0a:6f:b7:e0:c1:59:6c:41:5e:41:d5:b0:a2:fa:28:fc: 94:a5:e7:94:39:91:5e:4b:1e:ad:0d:ef:f7:7a:ab:13:7a:32: 6d:1e:90:38:a3:ef:ba:6c:83:39:ae:b6:3e:59:f5:eb:5b:86: 4b:c1:6b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxYTUmZ2ReJ8BVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk Y2YyOWQzZDUtMjlmYy00MzRmLWE3NDUtYjJhZDgwOWI3MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykGzfxbJjUYyAIkbAYVQTglgYsssToCIDFIj Cbl2p2t172rNnqQZtHoHr6tiGHNYApYI9Kd3QqNZm0dJK5Phd8p6TR4VNIW9a/1u hnyqM3ePNs98dFJePU44qq2lKjvCBvJ0qHaKCQkiP0YVnwl2Xyt6Qbqqv3VAzhT7 4bRX7e+TmeNk4oOIFmQkYXyxc5Axe78NN9Svt99TGP3lsawJoTYEvXa6hzTlNO9O dOalN7EGO7AVmVXuP9fnekiNCBRpxMunMD2dz5qbksmh7t5i7F3lw4Mm+VqYroIN iRwoT1Swrm6aEwa4eHayR6vHN8MJAaisphyklU1F0vRtpLZ5yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbaFiCaFWpwyopLiwoXcdaiYduGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWFiMmFmOGMtMjI4MC0z OGNlLWFiYTktMjViZWZmYThjNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb2hf2zQWlpjWCKqUFKbjWw+Pan0Xc4zq0sDYcXRLXCCcrgeKw9aPJQ SpajTd9i/QmYsVDBiRECSDo8Nz/SqCnWE6P2mhO+vgK0SE/8emSw+zT2rK9wUil3 QOta3Ycvvx/b9HF/67jLbSWbOC2pvz6H0gxjTgOoKsrVqH5OV9D612bKgTMdNMCm fKNPXYrrs9oOvb3tXHzcDlk3Dmo/tV7UXFtTlQPlBiC/Dp/CcVNSHQHYgmOffo0X S178Ywf0POeaIZ90tHKzCm+34MFZbEFeQdWwovoo/JSl55Q5kV5LHq0N7/d6qxN6 Mm0ekDij77psgzmutj5Z9etbhkvBa6M= -----END CERTIFICATE-----Generated at Fri May 24 01:53:55 2024 by rpki-client on console-fra.rpki-client.org