$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b75f3696-c522-3e70-8f7e-4de39d73e1f9.roa File: b75f3696-c522-3e70-8f7e-4de39d73e1f9.roa (raw, json) Hash identifier: k8EYOrWtHpgfayuz5p4o5K964X3WE0Z9bUu6E/VFAlo= Subject key identifier: B8:85:BC:13:BB:E9:DE:90:CC:55:0E:E4:B9:A0:C0:44:AB:9F:7C:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D8D05ABA3918AA86F840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b75f3696-c522-3e70-8f7e-4de39d73e1f9.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.143.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d8:d0:5a:ba:39:18:aa:86:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=4ac19c8f-bdb4-4a69-afa0-c3215272c854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:3f:5c:ce:77:5b:ee:13:df:40:09:7e:41: d3:de:b4:bf:7c:22:61:91:23:02:51:56:09:81:47: 4f:01:a1:51:4b:f1:51:52:84:a6:cb:a6:99:28:2d: 7b:6b:43:83:cd:c2:a7:47:bf:53:cd:dd:5e:1a:45: 29:bd:41:f8:67:cd:b6:ad:90:14:fd:34:83:a0:53: 86:32:04:d8:7c:36:df:24:16:42:f2:8e:fd:96:4f: e6:ae:a1:af:82:0a:e2:08:bb:0a:3e:3d:48:6f:67: 70:ff:a8:4a:58:e3:e2:7d:cb:9b:6f:83:97:4c:55: a6:c4:07:ef:d9:eb:ea:be:4c:4a:f2:a7:df:24:48: 3c:d2:1a:f5:f2:5b:57:82:a7:2b:b6:4d:3c:76:e8: 09:0d:f5:2a:31:f4:ec:95:02:b1:39:ba:0a:49:c0: 88:c2:9e:e2:55:f1:1f:e0:5c:e9:69:de:46:5d:9e: 33:d9:6b:58:d9:76:a1:ef:5f:e8:73:73:a4:1a:1d: 8a:11:69:5d:91:a4:38:cf:0c:d1:b5:2d:04:ed:60: 32:09:1a:8f:45:fd:48:ee:46:4a:26:35:9d:a3:38: d3:9e:76:ad:68:69:ab:91:b0:6f:53:a8:55:43:fe: 1a:13:71:4e:89:bb:e6:b3:30:8b:74:9e:43:97:93: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:BC:13:BB:E9:DE:90:CC:55:0E:E4:B9:A0:C0:44:AB:9F:7C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b75f3696-c522-3e70-8f7e-4de39d73e1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.143.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:71:c1:b4:27:90:39:d4:8c:14:18:44:0e:f7:5c:fb:11:f3: d9:42:dd:37:92:f2:4e:9a:56:80:6c:c0:ce:b9:80:dc:ea:55: f7:07:e5:b5:ce:90:f3:f6:9c:83:c6:ad:49:5c:4d:d5:c3:db: 36:1e:ac:c6:8c:a3:22:db:e7:b4:ac:ff:64:ad:82:3e:75:88: e4:7e:c1:47:64:68:f5:e3:73:50:6e:ba:7f:c8:1f:6c:19:43: 31:f6:c0:98:30:a8:e5:22:06:a8:2b:37:d8:e6:f7:a0:c8:98: cf:ba:11:89:aa:27:5f:6c:c1:8b:d1:74:58:c1:a7:27:65:50: 97:ed:1f:4e:25:41:ae:b8:50:1c:ad:8e:a4:9d:e5:f0:5b:21: 6d:ae:3a:ed:09:6d:1d:af:03:d5:1a:f9:05:fe:7b:fe:06:18: 2c:38:22:a0:11:73:3e:a3:d6:93:4d:3c:3d:56:e0:5a:2f:5d: 04:54:0c:6c:a6:31:82:19:05:d8:ae:5d:45:fa:eb:11:27:94: 8f:b4:3f:78:4c:64:66:09:42:b1:8f:82:a2:3b:84:4b:9b:37: 1a:5e:0d:e9:a7:8b:af:4c:04:32:b1:52:d6:3b:28:54:25:e5: ee:59:56:77:dc:b3:31:22:da:a2:eb:6f:89:c1:3f:f9:20:6d: 9d:33:4f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMtjQWro5GKqG+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NGFjMTljOGYtYmRiNC00YTY5LWFmYTAtYzMyMTUyNzJjODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP4/XM53W+4T30AJfkHT3rS/fCJhkSMCUVYJ gUdPAaFRS/FRUoSmy6aZKC17a0ODzcKnR79Tzd1eGkUpvUH4Z822rZAU/TSDoFOG MgTYfDbfJBZC8o79lk/mrqGvggriCLsKPj1Ib2dw/6hKWOPifcubb4OXTFWmxAfv 2evqvkxK8qffJEg80hr18ltXgqcrtk08dugJDfUqMfTslQKxOboKScCIwp7iVfEf 4Fzpad5GXZ4z2WtY2Xah71/oc3OkGh2KEWldkaQ4zwzRtS0E7WAyCRqPRf1I7kZK JjWdozjTnnataGmrkbBvU6hVQ/4aE3FOibvmszCLdJ5Dl5N/8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiFvBO76d6QzFUO5LmgwESrn3x5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc1ZjM2OTYtYzUyMi0z ZTcwLThmN2UtNGRlMzlkNzNlMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5xwbQnkDnUjBQYRA73XPsR89lC3TeS8k6aVoBswM65gNzqVfcH5bXO kPP2nIPGrUlcTdXD2zYerMaMoyLb57Ss/2Stgj51iOR+wUdkaPXjc1Buun/IH2wZ QzH2wJgwqOUiBqgrN9jm96DImM+6EYmqJ19swYvRdFjBpydlUJftH04lQa64UByt jqSd5fBbIW2uOu0JbR2vA9Ua+QX+e/4GGCw4IqARcz6j1pNNPD1W4FovXQRUDGym MYIZBdiuXUX66xEnlI+0P3hMZGYJQrGPgqI7hEubNxpeDemni69MBDKxUtY7KFQl 5e5ZVnfcszEi2qLrb4nBP/kgbZ0zT9k= -----END CERTIFICATE-----Generated at Thu May 23 13:45:04 2024 by rpki-client on console-fra.rpki-client.org