$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c9cf489-5efb-3a2e-bbe9-03d559732b58.roa File: 9c9cf489-5efb-3a2e-bbe9-03d559732b58.roa (raw, json) Hash identifier: mlUVYfLwaiyNTUM01elL8+8SgmdqC/JyThfbOiNM/qc= Subject key identifier: D9:A7:B2:D4:E5:F5:0D:50:2C:07:1E:9E:94:6D:F9:E9:8B:1E:1A:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333163FCCB8797525DDEBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c9cf489-5efb-3a2e-bbe9-03d559732b58.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 198.14.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:16:3f:cc:b8:79:75:25:dd:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=cf2a5195-1b45-41a8-97b4-308f2781b130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:5d:f3:58:93:50:eb:2b:7a:9a:8f:e8:4e: a3:8d:ff:69:f4:ea:39:b4:12:9c:6f:75:37:1c:ae: 81:53:c9:6c:b8:f8:ff:f3:f7:57:01:5f:27:4b:16: e7:c7:23:08:d6:3f:29:3c:c9:7d:de:a7:0f:8b:c1: db:91:23:36:9e:d3:6c:bb:09:e7:83:b6:52:03:49: ff:55:bd:30:6e:c1:0e:64:92:2a:ed:cd:a8:3d:0a: 04:9b:b2:93:c7:92:9d:d1:1f:c0:5d:28:bf:e8:b6: e3:b1:21:2c:b4:fe:0d:62:17:a4:cf:32:a9:a6:42: f4:c5:70:80:a3:0a:e4:a0:bc:66:3a:f8:8b:9f:ac: 6a:b4:d7:d8:d3:bd:cf:9a:4f:1e:8d:5e:10:06:9a: 21:ae:84:40:74:e5:b5:52:33:e6:b5:18:d7:47:eb: 6c:14:7a:dc:e0:a3:86:1e:a4:8b:d1:35:eb:36:26: 7b:ce:8d:3b:75:65:fc:e4:f5:f7:40:1d:53:49:74: b6:0f:a1:c1:48:85:c9:32:4f:99:e3:0c:af:e0:45: b6:e8:94:fb:48:be:ab:ab:16:ca:d3:70:55:87:c8: 55:5a:cd:08:6e:f6:34:c1:cf:d6:d0:2d:3d:1a:06: 9d:78:9b:b0:80:5e:be:67:97:95:9c:7d:28:ed:09: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:B2:D4:E5:F5:0D:50:2C:07:1E:9E:94:6D:F9:E9:8B:1E:1A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9c9cf489-5efb-3a2e-bbe9-03d559732b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:87:73:f5:ae:bb:74:1f:c1:a0:3e:ba:52:b0:00:f7:92:d9: a4:33:0b:b1:8a:aa:1c:9d:e8:44:df:7b:63:9d:a4:0d:fa:03: 86:75:70:94:63:b3:47:5c:41:fa:ad:ff:ca:c8:d8:bb:42:90: ab:16:88:0e:42:e2:cc:73:81:66:3a:80:01:c8:e5:9a:97:31: 3e:e9:00:5b:1c:7f:b1:b2:31:8d:5e:39:21:d5:31:b2:bb:9c: 30:0a:8f:de:ab:44:35:4a:16:b4:0c:21:50:7f:cf:56:d4:6d: 09:d1:b1:07:bb:1a:46:42:60:28:29:6d:e4:b8:4a:aa:8b:bd: 7f:6c:21:bc:74:5f:05:68:e2:e7:1d:69:d3:ed:3a:07:2a:d6: aa:4f:0a:35:7f:e9:eb:f0:77:2b:51:b8:14:25:32:7c:cd:25: 0a:67:96:4a:a9:91:31:c3:f3:bf:78:e4:4b:ea:b0:47:ca:70: 22:05:da:9f:ae:74:de:70:f0:86:c0:d1:73:fa:0c:19:54:04: 33:15:64:0c:8c:ce:0f:b6:a6:94:89:04:b3:86:fd:73:bb:bf: be:fb:38:0e:1f:d6:4f:b3:6a:76:b2:bb:25:fe:e5:20:d3:36: 37:f9:aa:78:fe:1a:28:1f:6b:e8:2f:0e:68:73:e4:1e:c0:64: e5:1f:fa:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxY/zLh5dSXd68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk Y2YyYTUxOTUtMWI0NS00MWE4LTk3YjQtMzA4ZjI3ODFiMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI5d81iTUOsrepqP6E6jjf9p9Oo5tBKcb3U3 HK6BU8lsuPj/8/dXAV8nSxbnxyMI1j8pPMl93qcPi8HbkSM2ntNsuwnng7ZSA0n/ Vb0wbsEOZJIq7c2oPQoEm7KTx5Kd0R/AXSi/6LbjsSEstP4NYhekzzKppkL0xXCA owrkoLxmOviLn6xqtNfY073Pmk8ejV4QBpohroRAdOW1UjPmtRjXR+tsFHrc4KOG HqSL0TXrNiZ7zo07dWX85PX3QB1TSXS2D6HBSIXJMk+Z4wyv4EW26JT7SL6rqxbK 03BVh8hVWs0IbvY0wc/W0C09GgadeJuwgF6+Z5eVnH0o7Qm7ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmnstTl9Q1QLAcenpRt+emLHhrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWM5Y2Y0ODktNWVmYi0z YTJlLWJiZTktMDNkNTU5NzMyYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImHc/Wuu3QfwaA+ulKwAPeS2aQzC7GKqhyd6ETfe2OdpA36A4Z1cJRj s0dcQfqt/8rI2LtCkKsWiA5C4sxzgWY6gAHI5ZqXMT7pAFscf7GyMY1eOSHVMbK7 nDAKj96rRDVKFrQMIVB/z1bUbQnRsQe7GkZCYCgpbeS4SqqLvX9sIbx0XwVo4ucd adPtOgcq1qpPCjV/6evwdytRuBQlMnzNJQpnlkqpkTHD87945EvqsEfKcCIF2p+u dN5w8IbA0XP6DBlUBDMVZAyMzg+2ppSJBLOG/XO7v777OA4f1k+zanayuyX+5SDT Njf5qnj+Gigfa+gvDmhz5B7AZOUf+tU= -----END CERTIFICATE-----Generated at Thu May 23 16:33:51 2024 by rpki-client on console-ams.rpki-client.org