$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b677160a-b109-310e-9ba1-1747b13bff1f.roa File: b677160a-b109-310e-9ba1-1747b13bff1f.roa (raw, json) Hash identifier: 5PqQRR7e2lTEkpyY/rMq8c3CH55n5fSFmUQHE0oyN/4= Subject key identifier: 44:0C:BE:50:CD:54:06:76:58:C8:24:40:8B:D8:7C:C4:A5:81:A4:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553330E638344DAB81851FB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b677160a-b109-310e-9ba1-1747b13bff1f.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 173.187.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:0e:63:83:44:da:b8:18:51:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=3c433a6d-9fa7-43b5-9bfb-1e17ddf88450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:ba:bf:a1:4c:90:a4:98:f9:36:6b:e8:46: 68:5c:de:1b:81:c0:4c:3b:6a:7b:d0:48:5e:f3:33: be:6c:c5:27:06:58:6d:98:0f:24:82:b4:29:28:77: 76:9c:df:ed:9e:54:6c:f1:67:32:51:c4:cb:10:bc: 2d:7a:0f:77:eb:c1:b0:9c:cf:08:07:20:e6:fd:e5: 4c:06:5f:15:7d:10:1f:29:a4:f1:50:32:d2:c2:68: 08:30:0c:ad:fc:15:fe:50:1e:cf:54:32:05:7b:c8: cf:2e:5b:dd:9b:b7:f7:6f:d4:52:84:2c:63:f7:b1: e8:a4:9f:5e:99:2e:0c:20:ff:1f:db:59:84:93:6c: 22:03:61:35:a4:39:3e:26:5f:fc:32:18:f6:f9:3e: 8d:7c:2a:99:8f:65:a0:5d:d2:7c:fd:87:af:e0:a7: 45:19:b1:42:0a:0b:11:ce:9e:22:ac:4a:20:a3:3e: 5d:91:7b:52:53:d9:19:8b:fd:4a:f6:1b:d0:25:43: c6:2e:cb:cb:5e:e2:fa:6d:e9:5c:fa:56:f1:49:cd: b1:78:e6:d7:2c:70:76:7e:a8:28:48:df:6c:7b:64: 31:b4:8a:88:60:fe:f1:9d:5e:9f:6c:45:ba:25:d6: eb:5d:f3:97:c7:2f:6e:53:b8:f8:07:1b:f4:3a:a6: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:BE:50:CD:54:06:76:58:C8:24:40:8B:D8:7C:C4:A5:81:A4:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b677160a-b109-310e-9ba1-1747b13bff1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ab:87:25:c3:0e:18:74:1b:31:66:b0:89:a7:e1:4f:98:b0: d9:05:c4:84:a3:98:43:99:98:bd:2b:9c:73:63:76:0a:42:75: 72:12:d6:c9:7b:0c:89:48:f7:18:4d:49:d6:3b:b9:d7:7e:64: 59:60:93:27:47:f1:60:9e:dd:7d:e3:ac:fe:8c:93:68:73:b1: c5:3c:74:eb:31:f1:77:01:a9:5e:52:31:e5:f3:61:4a:6b:4e: 07:fe:36:4d:7c:2a:e7:21:95:27:81:49:f8:6e:a5:5e:35:66: ca:6d:02:7c:5a:e0:27:2a:2d:e5:8e:09:9e:7e:49:34:55:43: fe:46:34:c8:9d:e6:f5:6b:92:21:06:86:ed:4e:d5:b4:b5:d5: 80:9e:42:3e:c1:37:a7:15:12:bf:ff:89:7f:bc:6c:f9:aa:76: fe:6d:37:23:01:e3:5e:dd:a7:07:0a:4e:41:d8:06:53:d1:de: fb:e1:9f:84:06:3d:68:5b:a8:86:bb:15:e9:c5:d6:b1:dd:54: 51:b6:ca:da:0c:25:18:4c:17:8f:b6:b8:32:d9:dd:30:b6:05: 8e:3a:a0:84:6e:ae:91:b6:7d:3a:2b:45:65:d1:a9:7c:29:0e: eb:c0:a8:6d:38:48:53:80:0d:00:0d:17:d8:5a:2e:bc:64:6a: 07:1c:f8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMw5jg0TauBhR+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk M2M0MzNhNmQtOWZhNy00M2I1LTliZmItMWUxN2RkZjg4NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8m6v6FMkKSY+TZr6EZoXN4bgcBMO2p70Ehe 8zO+bMUnBlhtmA8kgrQpKHd2nN/tnlRs8WcyUcTLELwteg9368GwnM8IByDm/eVM Bl8VfRAfKaTxUDLSwmgIMAyt/BX+UB7PVDIFe8jPLlvdm7f3b9RShCxj97HopJ9e mS4MIP8f21mEk2wiA2E1pDk+Jl/8Mhj2+T6NfCqZj2WgXdJ8/Yev4KdFGbFCCgsR zp4irEogoz5dkXtSU9kZi/1K9hvQJUPGLsvLXuL6belc+lbxSc2xeObXLHB2fqgo SN9se2QxtIqIYP7xnV6fbEW6JdbrXfOXxy9uU7j4Bxv0Oqaf6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQMvlDNVAZ2WMgkQIvYfMSlgaTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjY3NzE2MGEtYjEwOS0z MTBlLTliYTEtMTc0N2IxM2JmZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJarhyXDDhh0GzFmsImn4U+YsNkFxISjmEOZmL0rnHNjdgpCdXIS1sl7 DIlI9xhNSdY7udd+ZFlgkydH8WCe3X3jrP6Mk2hzscU8dOsx8XcBqV5SMeXzYUpr Tgf+Nk18KuchlSeBSfhupV41ZsptAnxa4CcqLeWOCZ5+STRVQ/5GNMid5vVrkiEG hu1O1bS11YCeQj7BN6cVEr//iX+8bPmqdv5tNyMB417dpwcKTkHYBlPR3vvhn4QG PWhbqIa7FenF1rHdVFG2ytoMJRhMF4+2uDLZ3TC2BY46oIRurpG2fTorRWXRqXwp DuvAqG04SFOADQANF9haLrxkagcc+Ek= -----END CERTIFICATE-----Generated at Thu May 23 19:42:33 2024 by rpki-client on console-fra.rpki-client.org