$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa File: b508d8e4-48c2-34a6-8dec-287de9c363f1.roa (raw, json) Hash identifier: OPSmXwjDrISyuyjQB48lkw0CfrYH//YW36AdrqMxptI= Subject key identifier: CD:F4:F7:61:8E:3C:06:EA:9B:D6:95:B9:FB:84:E0:AB:46:4B:91:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553333D80BCE806446B43CF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 27338 IP address blocks: 209.192.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:3d:80:bc:e8:06:44:6b:43:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=94336a36-8438-4e0e-8fe6-43304c149819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:59:38:f6:77:ea:8b:99:e3:37:ae:83:79: 69:2a:ce:82:99:df:a7:a6:41:8d:a8:0d:a6:0a:92: 09:09:20:20:03:fa:29:c6:96:e5:a6:c3:54:9c:4c: e9:71:b4:47:09:63:16:36:24:97:f0:ec:49:63:f7: a2:b5:99:d4:37:d7:0e:87:df:fc:af:6a:a7:2c:f8: 0b:1f:98:3e:9c:9a:93:d8:36:bb:b6:f7:ca:4c:83: 58:c4:22:ec:0c:bd:90:a9:1c:06:af:06:ee:d6:d7: 72:6e:50:a8:d9:52:8c:04:66:5d:61:e1:71:7e:88: e7:e3:52:9c:5f:e9:25:d1:18:94:dd:7d:42:77:e3: f0:cf:a8:01:a6:82:01:92:11:27:7a:d8:31:7d:17: 10:ce:76:35:c1:ea:48:42:57:c5:e7:ac:18:6e:0a: 02:6a:cb:e8:17:3c:32:7e:c9:57:ae:dc:dc:68:46: 5d:2c:61:a5:6b:c1:8e:f6:cb:ab:18:8d:0e:ad:cf: ec:45:aa:a6:ea:da:73:6c:84:0f:45:8f:2d:f9:47: 83:a3:33:83:e5:a5:5f:5b:cd:bf:0c:3d:32:47:dd: 6d:9d:81:c7:7e:86:88:17:03:16:17:d1:05:f9:3a: ec:81:71:e8:ff:10:7b:06:1b:52:96:dc:77:08:32: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F4:F7:61:8E:3C:06:EA:9B:D6:95:B9:FB:84:E0:AB:46:4B:91:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:47:38:e6:ac:93:51:4b:79:6f:ea:a1:66:bb:d4:15:46:db: 65:89:b7:f0:4e:22:98:33:8e:1c:57:15:b3:b6:e7:59:bf:12: 66:dc:7d:9d:50:1f:cc:14:05:fc:45:dc:f1:31:a2:69:8b:fc: 35:86:54:8b:05:87:87:a9:c6:96:1a:2d:0f:5b:40:84:d5:f6: 19:ea:14:26:e1:73:be:c4:8a:9c:f3:9a:dc:e8:3a:16:5a:a6: 0a:1e:f6:82:93:cb:52:56:65:69:37:f9:f8:e2:4f:84:3d:d9: ea:4a:4a:c0:d8:c2:0e:03:19:11:a9:22:3c:4f:22:88:67:a4: af:80:f3:f1:9d:0c:00:39:fb:67:e9:ab:23:f1:8e:cc:7e:51: 8d:c3:7a:22:bb:b7:44:a6:a0:70:5e:51:64:62:21:0a:29:8e: 22:c5:58:9d:c9:89:3f:de:cc:c1:c0:c6:1d:6e:6c:10:2a:cb: 7b:0f:20:e8:0a:f6:e7:a9:60:e4:94:57:95:49:65:6c:e4:75: 35:b2:28:7f:a8:8e:ae:59:01:d0:0f:b6:39:59:94:90:93:19: 05:4e:38:44:1a:e9:2f:57:45:8c:e4:b9:06:b0:f8:37:84:ba: 2a:0a:6c:36:d2:3a:44:c4:f6:33:26:15:bf:56:34:19:a7:22: 96:03:17:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMz2AvOgGRGtDz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OTQzMzZhMzYtODQzOC00ZTBlLThmZTYtNDMzMDRjMTQ5ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SJZOPZ36ouZ4zeug3lpKs6Cmd+npkGNqA2m CpIJCSAgA/opxpblpsNUnEzpcbRHCWMWNiSX8OxJY/eitZnUN9cOh9/8r2qnLPgL H5g+nJqT2Da7tvfKTINYxCLsDL2QqRwGrwbu1tdyblCo2VKMBGZdYeFxfojn41Kc X+kl0RiU3X1Cd+Pwz6gBpoIBkhEnetgxfRcQznY1wepIQlfF56wYbgoCasvoFzwy fslXrtzcaEZdLGGla8GO9surGI0Orc/sRaqm6tpzbIQPRY8t+UeDozOD5aVfW82/ DD0yR91tnYHHfoaIFwMWF9EF+TrsgXHo/xB7BhtSltx3CDIr4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3092GOPAbqm9aVufuE4KtGS5F9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUwOGQ4ZTQtNDhjMi0z NGE2LThkZWMtMjg3ZGU5YzM2M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBHOOask1FLeW/qoWa71BVG22WJt/BOIpgzjhxXFbO251m/EmbcfZ1Q H8wUBfxF3PExommL/DWGVIsFh4epxpYaLQ9bQITV9hnqFCbhc77EipzzmtzoOhZa pgoe9oKTy1JWZWk3+fjiT4Q92epKSsDYwg4DGRGpIjxPIohnpK+A8/GdDAA5+2fp qyPxjsx+UY3DeiK7t0SmoHBeUWRiIQopjiLFWJ3JiT/ezMHAxh1ubBAqy3sPIOgK 9uepYOSUV5VJZWzkdTWyKH+ojq5ZAdAPtjlZlJCTGQVOOEQa6S9XRYzkuQaw+DeE uioKbDbSOkTE9jMmFb9WNBmnIpYDF1Y= -----END CERTIFICATE-----Generated at Sat May 18 01:40:39 2024 by rpki-client on console-fra.rpki-client.org