$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3fe60b0-72fe-3682-9774-a5f1f7421406.roa File: b3fe60b0-72fe-3682-9774-a5f1f7421406.roa (raw, json) Hash identifier: tUEGynrpLYToK8GzF952+QaM6vW90FQFxBjdmPdV5mQ= Subject key identifier: CE:7D:A3:CB:83:82:7B:89:2E:2D:40:56:61:B8:A9:F4:36:85:A9:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553331FB44997D54F94853500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3fe60b0-72fe-3682-9774-a5f1f7421406.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 208.78.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:1f:b4:49:97:d5:4f:94:85:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=61f0441a-e90a-46ed-afe3-ef385045b12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:f2:4c:21:fd:39:c3:eb:0e:65:f6:0f:99: 23:ec:0c:e1:46:2f:f8:58:f1:4f:4e:41:14:03:b3: 75:3c:eb:de:e1:a1:52:c4:1d:d1:35:65:56:51:46: 9f:90:c4:b3:0b:69:bd:9d:e4:3e:87:ea:d4:f9:b0: 12:71:bd:f6:80:52:e0:6c:d0:b3:05:3f:51:76:cc: 71:f1:63:dd:36:b3:6a:a4:e3:df:7c:d1:95:b8:46: e1:3a:e4:e5:2e:48:9d:c1:51:4e:1b:e7:b7:39:e4: c3:b4:48:ea:0f:ab:ce:b5:5f:78:81:b3:c7:3d:6d: 0f:66:44:ce:5d:04:cd:d5:d5:17:72:fb:ac:8e:44: 3b:a5:f8:cf:ba:49:7f:79:40:a5:eb:a2:de:9a:26: c4:37:b9:b0:7b:8a:a2:01:9d:6c:23:f5:a1:7d:d1: 6a:27:f1:85:ed:fa:23:02:2b:f4:03:3d:4b:4c:b5: fc:7c:3c:3a:2e:b8:c5:a5:bc:6c:f8:31:a8:9e:c2: bd:03:84:59:14:58:f5:e8:ee:fe:d7:8c:9c:f6:26: 2b:95:4c:ce:a4:9f:c9:cf:14:bf:40:fe:38:d2:bb: 43:48:5c:ce:e5:86:65:51:5d:9b:96:65:7c:f6:78: 27:a2:d5:ff:27:54:30:24:df:cd:bc:67:7e:1c:79: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7D:A3:CB:83:82:7B:89:2E:2D:40:56:61:B8:A9:F4:36:85:A9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3fe60b0-72fe-3682-9774-a5f1f7421406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.78.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2d:a6:78:68:8a:b8:bf:88:13:6f:3c:c0:e5:5a:a0:d5:f4: 0b:b0:4c:16:cc:46:49:80:43:db:ea:95:0a:88:cf:9c:2f:23: 01:23:88:3d:f1:58:83:03:59:1f:15:9f:6d:f9:43:47:22:bd: 8f:b8:ce:76:f9:02:18:b4:81:40:56:c9:28:64:cb:47:bf:7d: ea:18:ee:6b:51:33:60:64:6a:7e:85:01:8d:9d:60:84:ed:21: 7c:78:76:e6:35:43:76:71:dc:85:dc:50:44:be:3b:e2:14:3c: 3e:97:a7:da:a8:63:e6:23:5a:40:75:b8:44:97:8f:a7:62:e0: 39:18:20:e5:24:15:b1:39:1d:60:0c:72:2a:6d:c6:17:58:17: fe:2c:6b:b8:fd:d1:07:7b:c3:be:2a:d0:3c:54:53:92:9c:75: f3:6a:cd:e8:06:71:29:5e:c4:2c:d7:b8:e1:2e:35:89:f0:94: 85:76:bb:94:fa:00:b4:66:a7:91:60:db:e4:c1:23:85:06:80: 9d:f3:48:d5:1b:81:7d:2a:21:c9:4f:62:4c:8d:14:d1:77:1a: 81:1f:58:80:2f:2b:30:a5:7f:14:ed:dd:90:cb:0e:71:fe:4b: e0:f1:c8:b2:67:2c:96:25:50:64:38:54:92:2d:74:1a:12:f7: f3:c9:e6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMx+0SZfVT5SFNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NjFmMDQ0MWEtZTkwYS00NmVkLWFmZTMtZWYzODUwNDViMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuLyTCH9OcPrDmX2D5kj7AzhRi/4WPFPTkEU A7N1POve4aFSxB3RNWVWUUafkMSzC2m9neQ+h+rU+bAScb32gFLgbNCzBT9Rdsxx 8WPdNrNqpOPffNGVuEbhOuTlLkidwVFOG+e3OeTDtEjqD6vOtV94gbPHPW0PZkTO XQTN1dUXcvusjkQ7pfjPukl/eUCl66LemibEN7mwe4qiAZ1sI/WhfdFqJ/GF7foj Aiv0Az1LTLX8fDw6LrjFpbxs+DGonsK9A4RZFFj16O7+14yc9iYrlUzOpJ/JzxS/ QP440rtDSFzO5YZlUV2blmV89ngnotX/J1QwJN/NvGd+HHl1bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM59o8uDgnuJLi1AVmG4qfQ2hamQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjNmZTYwYjAtNzJmZS0z NjgyLTk3NzQtYTVmMWY3NDIxNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4tpnhoiri/iBNvPMDlWqDV9AuwTBbMRkmAQ9vqlQqIz5wvIwEjiD3x WIMDWR8Vn235Q0civY+4znb5Ahi0gUBWyShky0e/feoY7mtRM2Bkan6FAY2dYITt IXx4duY1Q3Zx3IXcUES+O+IUPD6Xp9qoY+YjWkB1uESXj6di4DkYIOUkFbE5HWAM ciptxhdYF/4sa7j90Qd7w74q0DxUU5KcdfNqzegGcSlexCzXuOEuNYnwlIV2u5T6 ALRmp5Fg2+TBI4UGgJ3zSNUbgX0qIclPYkyNFNF3GoEfWIAvKzClfxTt3ZDLDnH+ S+DxyLJnLJYlUGQ4VJItdBoS9/PJ5rs= -----END CERTIFICATE-----Generated at Sat May 18 01:40:39 2024 by rpki-client on console-fra.rpki-client.org