$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa File: b85fcffe-594a-3ca2-98c5-30c94c748750.roa (raw, json) Hash identifier: tl2p99IO80b0Qdf3QFHRzPf2WQ2BBdxf7aR07OCCp0Q= Subject key identifier: D5:5A:2A:3D:81:43:56:43:77:63:5A:AA:12:77:4F:E2:15:9B:AD:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533318F754F41813E50FE200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 205.147.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:18:f7:54:f4:18:13:e5:0f:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=6cf23762-356d-42a3-926c-6b527b2e72b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:18:57:dc:5b:d1:34:15:ca:5f:47:d5:84: 65:d1:67:40:fd:a4:02:9f:eb:59:28:e3:99:7a:0a: a5:9d:df:f7:dd:c2:8f:8a:1c:a2:14:dc:cc:a0:f3: 46:f7:bf:cc:b1:0a:33:9d:6d:9c:e7:94:20:04:15: e9:81:87:51:ae:25:91:86:e3:1e:e1:11:62:dc:93: 43:a1:d9:68:a8:ec:36:cc:43:a3:f4:20:ea:08:0e: 10:5d:24:7e:ea:68:0e:26:77:e6:6d:f1:48:ae:59: 5c:a4:bb:b9:54:e3:a9:91:34:09:c0:dd:10:a0:1a: 8e:6b:05:e6:c3:12:b6:6b:5c:f9:a0:af:38:2e:f0: e9:66:64:a0:96:f3:fc:53:16:29:e3:0f:52:c0:5e: 2d:71:38:52:1e:c4:67:13:82:13:99:e5:dd:22:a6: 85:cf:4d:79:63:14:f3:df:21:bf:14:74:7a:c0:6b: b6:66:e0:93:f1:fb:85:40:d9:53:1d:ef:d1:18:05: 59:b4:25:42:3c:c6:e8:8d:66:51:81:9f:4c:ba:bd: 7d:17:39:c9:97:bd:46:c1:9e:0c:f3:95:dd:e0:c7: 43:b7:6e:a4:ab:e7:cf:a0:30:10:1b:7d:db:64:aa: a7:17:25:45:31:ec:56:98:e3:10:f3:9d:93:44:27: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5A:2A:3D:81:43:56:43:77:63:5A:AA:12:77:4F:E2:15:9B:AD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.147.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fc:08:4e:da:dd:32:47:d3:eb:52:42:43:d0:35:67:ec:77: e6:36:8e:ba:5f:65:a0:fa:b4:74:dd:65:f2:90:99:d2:a3:67: 91:e2:ef:2e:d0:fb:df:95:44:48:d4:aa:59:34:47:c0:02:0c: f0:d0:e8:75:a5:fc:22:92:f0:fd:b5:92:1f:9f:f1:ec:d9:e4: 6f:c3:cb:4a:86:fa:42:9e:56:78:47:b4:b8:db:01:8b:48:ee: 94:13:f3:7c:b4:14:38:45:c9:3b:20:61:e7:1c:e5:8a:de:c7: 10:f6:dd:8b:f3:ce:2f:6b:3f:72:ab:44:99:d0:e8:dd:91:5a: b1:6c:ab:08:78:9a:3b:81:ba:ff:2a:16:5f:14:c0:48:9a:49: 59:4b:7c:7c:71:5d:7b:3e:ba:43:cc:71:fb:2c:72:12:61:ac: 76:b5:f1:a4:bf:e5:9c:34:61:ca:d6:9c:d3:4b:a2:b2:9b:d4: 8c:9f:18:b3:82:be:a8:38:5a:60:15:ff:11:cb:f8:d7:52:ba: d3:65:ca:0f:8b:be:11:23:73:75:07:ef:83:d4:b6:f8:17:3d: d7:72:f3:ab:05:21:f2:be:76:f5:e1:19:55:51:8e:25:f2:d7: 96:b3:89:22:67:e6:8d:39:1c:e6:8a:31:bf:4b:10:0d:c5:78: 2c:71:c7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxj3VPQYE+UP4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NmNmMjM3NjItMzU2ZC00MmEzLTkyNmMtNmI1MjdiMmU3MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFQYV9xb0TQVyl9H1YRl0WdA/aQCn+tZKOOZ egqlnd/33cKPihyiFNzMoPNG97/MsQoznW2c55QgBBXpgYdRriWRhuMe4RFi3JND odloqOw2zEOj9CDqCA4QXSR+6mgOJnfmbfFIrllcpLu5VOOpkTQJwN0QoBqOawXm wxK2a1z5oK84LvDpZmSglvP8UxYp4w9SwF4tcThSHsRnE4ITmeXdIqaFz015YxTz 3yG/FHR6wGu2ZuCT8fuFQNlTHe/RGAVZtCVCPMbojWZRgZ9Mur19FznJl71GwZ4M 85Xd4MdDt26kq+fPoDAQG33bZKqnFyVFMexWmOMQ852TRCe+lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVaKj2BQ1ZDd2NaqhJ3T+IVm63rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg1ZmNmZmUtNTk0YS0z Y2EyLTk4YzUtMzBjOTRjNzQ4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj8CE7a3TJH0+tSQkPQNWfsd+Y2jrpfZaD6tHTdZfKQmdKjZ5Hi7y7Q +9+VREjUqlk0R8ACDPDQ6HWl/CKS8P21kh+f8ezZ5G/Dy0qG+kKeVnhHtLjbAYtI 7pQT83y0FDhFyTsgYecc5YrexxD23Yvzzi9rP3KrRJnQ6N2RWrFsqwh4mjuBuv8q Fl8UwEiaSVlLfHxxXXs+ukPMcfsschJhrHa18aS/5Zw0YcrWnNNLorKb1IyfGLOC vqg4WmAV/xHL+NdSutNlyg+LvhEjc3UH74PUtvgXPddy86sFIfK+dvXhGVVRjiXy 15aziSJn5o05HOaKMb9LEA3FeCxxx0o= -----END CERTIFICATE-----Generated at Thu May 23 16:33:54 2024 by rpki-client on console-ams.rpki-client.org