$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a290c149-0017-3a57-a073-21736e428a6b.roa File: a290c149-0017-3a57-a073-21736e428a6b.roa (raw, json) Hash identifier: xVjZfQvulDlh5KiJHlxmy58FuDasS1ShQq+4FgzkUAk= Subject key identifier: D9:8A:4B:5F:4A:34:7A:43:FC:D1:93:ED:D3:2F:D1:7A:AB:2F:74:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533313EB7805D55BB5622520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a290c149-0017-3a57-a073-21736e428a6b.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 174.130.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:13:eb:78:05:d5:5b:b5:62:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=16cbe6b5-a4fc-4f3c-81a1-095d81608a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:f9:fa:e3:7e:e9:f7:7a:5a:13:e3:38:11: a7:e5:d7:e1:0f:13:fb:b5:90:fc:51:1e:57:34:80: 83:f4:d4:dd:34:08:26:20:73:fc:8f:f6:e4:c7:d7: 80:1d:30:1a:26:d4:b0:35:6c:b0:92:6f:d7:99:22: 06:8b:a2:82:11:3b:6a:22:75:8c:af:e0:33:64:64: be:f2:46:3d:9f:f1:c1:5c:2e:cc:5f:94:89:d1:c0: f5:11:d2:81:fa:5a:c6:1c:45:f9:be:b3:8f:35:c3: b9:90:70:fc:e9:4c:51:0b:a2:ff:3b:3b:75:3e:60: 38:ff:02:0f:45:a6:7c:f0:24:35:73:af:28:6d:33: 97:1e:09:61:37:3a:ec:cb:4a:b9:35:3d:7f:a2:68: fb:14:34:3a:c4:18:1c:e9:7a:0f:eb:5d:1e:ac:c5: 77:28:39:e2:fd:42:db:4c:35:2e:98:0f:1c:16:8e: 1c:d1:b8:62:54:0e:52:7a:a6:e4:33:6f:e1:2f:9c: bd:a1:cb:18:50:ae:d7:ba:51:85:0b:c7:72:fa:83: 56:ba:4d:ff:e9:bf:c1:47:67:ef:fd:71:5a:4c:4f: e9:80:bb:0e:e2:26:f7:89:ec:02:47:08:2a:22:74: 6e:66:00:80:c4:33:24:e8:ff:e8:f5:f1:6b:6d:a9: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8A:4B:5F:4A:34:7A:43:FC:D1:93:ED:D3:2F:D1:7A:AB:2F:74:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a290c149-0017-3a57-a073-21736e428a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:aa:37:6c:2e:81:c1:d4:46:de:fd:b0:3d:0e:94:1b:d6:56: d7:1d:7d:51:09:36:40:55:28:38:8d:ec:3a:f3:1b:39:8a:91: e1:13:c3:ae:85:bb:25:d0:c7:e5:d9:df:68:d6:64:46:0d:03: 88:99:82:d6:e0:d7:16:04:f4:1d:d6:ab:3f:9c:cf:3b:70:78: 5d:4a:a0:11:8a:62:15:b1:a8:51:de:ff:2e:7b:e6:e9:5c:0f: 31:ef:83:08:a3:c2:94:eb:28:f5:87:e5:2d:04:4c:0a:37:ce: 90:12:0c:6d:bc:15:ac:d4:be:fc:42:f0:58:ae:fa:66:d7:f2: 45:5e:4b:91:4b:54:e1:9b:0b:07:af:24:fe:ed:f5:21:ad:18: ce:ed:b1:e8:2a:ff:bb:f0:a4:58:13:34:0e:4b:bc:63:56:8d: a3:3b:39:75:2a:3f:0d:2c:e2:9a:b7:87:15:8d:76:76:f5:ac: 9a:2b:d9:92:8f:b1:aa:a0:41:a9:e9:ef:34:b9:b9:7f:83:42: 55:06:65:fb:62:16:54:b2:eb:ee:33:2f:61:71:90:ba:be:dd: 00:bd:ea:b3:89:37:ba:b0:4a:33:12:c9:8f:97:6d:e7:a4:6d: c2:9e:78:6a:7a:12:b5:8d:ca:35:4a:08:e4:6a:96:ad:34:26: fb:ae:a1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxPreAXVW7ViJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MTZjYmU2YjUtYTRmYy00ZjNjLTgxYTEtMDk1ZDgxNjA4YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22L5+uN+6fd6WhPjOBGn5dfhDxP7tZD8UR5X NICD9NTdNAgmIHP8j/bkx9eAHTAaJtSwNWywkm/XmSIGi6KCETtqInWMr+AzZGS+ 8kY9n/HBXC7MX5SJ0cD1EdKB+lrGHEX5vrOPNcO5kHD86UxRC6L/Ozt1PmA4/wIP RaZ88CQ1c68obTOXHglhNzrsy0q5NT1/omj7FDQ6xBgc6XoP610erMV3KDni/ULb TDUumA8cFo4c0bhiVA5SeqbkM2/hL5y9ocsYUK7XulGFC8dy+oNWuk3/6b/BR2fv /XFaTE/pgLsO4ib3iewCRwgqInRuZgCAxDMk6P/o9fFrbamD5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmKS19KNHpD/NGT7dMv0XqrL3QOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI5MGMxNDktMDAxNy0z YTU3LWEwNzMtMjE3MzZlNDI4YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWqN2wugcHURt79sD0OlBvWVtcdfVEJNkBVKDiN7DrzGzmKkeETw66F uyXQx+XZ32jWZEYNA4iZgtbg1xYE9B3Wqz+czztweF1KoBGKYhWxqFHe/y575ulc DzHvgwijwpTrKPWH5S0ETAo3zpASDG28FazUvvxC8Fiu+mbX8kVeS5FLVOGbCwev JP7t9SGtGM7tsegq/7vwpFgTNA5LvGNWjaM7OXUqPw0s4pq3hxWNdnb1rJor2ZKP saqgQanp7zS5uX+DQlUGZftiFlSy6+4zL2FxkLq+3QC96rOJN7qwSjMSyY+Xbeek bcKeeGp6ErWNyjVKCORqlq00Jvuuof8= -----END CERTIFICATE-----Generated at Fri May 24 02:52:32 2024 by rpki-client on console-ams.rpki-client.org