$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6d9b8ff-93fe-3f77-9c1f-35a1e2cc6394.roa File: b6d9b8ff-93fe-3f77-9c1f-35a1e2cc6394.roa (raw, json) Hash identifier: oP8FmUuqnSF0MAwe/S9MU9wtp8a+a6U0XqsiIiPSOOg= Subject key identifier: C7:7A:9C:A1:20:7D:38:82:82:83:8F:85:9B:FC:27:14:8F:3D:B7:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533329400BA57807F5AE50A8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6d9b8ff-93fe-3f77-9c1f-35a1e2cc6394.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 216.96.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:29:40:0b:a5:78:07:f5:ae:50:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=91bbb751-eb2e-4b87-bba1-4f913f5044f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:7f:75:a2:22:8d:5a:7d:f1:14:96:7c:db: 8a:ab:4a:9f:93:81:9e:19:e6:83:b5:ee:5c:1a:3f: e4:5f:0c:96:94:a8:40:c9:70:3d:d0:17:0c:ab:e8: 32:75:92:de:4e:ab:46:61:d6:5a:40:b4:05:04:ac: 66:cb:59:2d:db:ad:ed:85:3a:87:8c:67:6d:a7:82: 88:37:64:3a:f3:57:33:be:85:8a:c0:07:24:c3:8e: e9:1e:88:a2:ee:ac:27:e9:d2:19:a7:cb:58:5c:e1: b3:6d:99:3d:5c:c4:f2:f1:ee:08:d0:18:47:de:9c: 74:a8:d7:28:16:ea:1e:45:65:0c:76:c9:47:a5:d1: a2:9d:ac:b7:a4:ac:d4:3c:4f:b7:a7:84:ab:5e:10: 46:65:93:9c:3a:ff:cd:06:be:0b:64:f4:84:e0:25: df:d3:55:f5:a1:35:cb:a9:b3:53:39:61:d9:8d:36: 65:77:d1:93:41:03:ef:bc:72:cd:3e:57:98:05:e1: 74:2a:02:d4:b9:f1:93:f9:cb:8c:e3:80:6a:43:d9: df:55:7d:53:22:1c:e5:ca:14:45:28:69:4d:6b:3a: 2f:98:71:86:94:11:8a:1b:b2:51:91:14:5d:0b:31: 27:78:c4:8d:ae:d5:ab:77:d0:60:f7:82:b7:4c:5d: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7A:9C:A1:20:7D:38:82:82:83:8F:85:9B:FC:27:14:8F:3D:B7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6d9b8ff-93fe-3f77-9c1f-35a1e2cc6394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:26:7c:b1:85:1c:38:fc:c7:e4:d6:92:4a:9f:87:79:39:68: da:69:db:d7:73:ec:b9:ef:b0:55:da:d5:eb:5e:5b:81:df:cd: e1:8e:b5:3e:90:00:93:e8:aa:e2:6d:3d:22:b9:69:b6:3b:5e: d0:df:93:d0:15:0f:d7:4e:73:56:76:69:e8:b6:9c:a7:b4:83: 33:fb:9f:7d:5f:fd:46:7c:25:f8:68:0f:b6:18:88:e8:9d:83: c8:fe:1c:c4:73:11:63:f0:75:ca:19:40:28:68:81:cc:fc:29: 08:ff:17:c9:5c:23:19:f3:23:05:5b:78:1d:e8:58:8d:2b:d2: 15:fa:cc:1b:86:cc:78:57:95:1a:c5:00:8d:f9:ec:c3:78:04: cc:5c:1a:45:f5:22:96:17:fd:5f:02:b5:46:e2:a6:e2:bd:11: 25:f8:6b:80:3f:ab:39:5b:bf:e1:e3:3e:c6:ad:e1:1d:60:28: d4:f4:9c:c0:de:44:24:a4:8e:8a:a1:d4:0f:07:14:81:a8:74: 9a:df:91:ff:18:70:8a:5d:0d:40:a4:da:33:4f:f5:e2:67:17: 21:05:98:e8:eb:5e:50:39:d9:97:6e:69:b5:08:21:b8:dc:62: b7:7a:1a:d8:fd:ec:25:3f:d6:01:bd:4f:9f:ae:21:90:da:89: 41:f6:9a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMylAC6V4B/WuUKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OTFiYmI3NTEtZWIyZS00Yjg3LWJiYTEtNGY5MTNmNTA0NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXR/daIijVp98RSWfNuKq0qfk4GeGeaDte5c Gj/kXwyWlKhAyXA90BcMq+gydZLeTqtGYdZaQLQFBKxmy1kt263thTqHjGdtp4KI N2Q681czvoWKwAckw47pHoii7qwn6dIZp8tYXOGzbZk9XMTy8e4I0BhH3px0qNco FuoeRWUMdslHpdGinay3pKzUPE+3p4SrXhBGZZOcOv/NBr4LZPSE4CXf01X1oTXL qbNTOWHZjTZld9GTQQPvvHLNPleYBeF0KgLUufGT+cuM44BqQ9nfVX1TIhzlyhRF KGlNazovmHGGlBGKG7JRkRRdCzEneMSNrtWrd9Bg94K3TF2UAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd6nKEgfTiCgoOPhZv8JxSPPbcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjZkOWI4ZmYtOTNmZS0z Zjc3LTljMWYtMzVhMWUyY2M2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2GAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAmfLGFHDj8x+TWkkqfh3k5aNpp29dz7LnvsFXa1eteW4HfzeGOtT6Q AJPoquJtPSK5abY7XtDfk9AVD9dOc1Z2aei2nKe0gzP7n31f/UZ8JfhoD7YYiOid g8j+HMRzEWPwdcoZQChogcz8KQj/F8lcIxnzIwVbeB3oWI0r0hX6zBuGzHhXlRrF AI357MN4BMxcGkX1IpYX/V8CtUbipuK9ESX4a4A/qzlbv+HjPsat4R1gKNT0nMDe RCSkjoqh1A8HFIGodJrfkf8YcIpdDUCk2jNP9eJnFyEFmOjrXlA52ZduabUIIbjc Yrd6Gtj97CU/1gG9T5+uIZDaiUH2mtw= -----END CERTIFICATE-----Generated at Thu May 23 20:12:05 2024 by rpki-client on console-ams.rpki-client.org