$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be3e86c1-f876-3b5e-9bf1-1a9e40635d58.roa File: be3e86c1-f876-3b5e-9bf1-1a9e40635d58.roa (raw, json) Hash identifier: X1ojqkCwCu0i02hSYosx1bqiqL3+r4+1BRGHiT9mJ1c= Subject key identifier: F6:BF:1B:CA:33:26:64:22:FD:4D:84:56:CE:12:2D:28:23:87:DC:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332E67DC5927A9DD543AF60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be3e86c1-f876-3b5e-9bf1-1a9e40635d58.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 67.140.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:e6:7d:c5:92:7a:9d:d5:43:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=74157bac-00cd-41e3-bb31-f07f165f4a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:2e:7d:40:33:ce:d9:65:5a:ac:3d:a0:13: 6f:71:11:29:08:66:8b:e3:c2:8c:30:1f:97:19:c0: da:b3:78:59:07:ee:f0:b9:6f:77:a7:01:8b:aa:30: c5:1b:7f:cb:cc:e2:e6:1f:c1:f6:7b:3c:9b:54:3b: f9:95:fe:e6:b0:02:8d:91:fd:33:89:2b:d1:de:08: c5:a0:b4:31:19:06:a7:0d:5f:7d:17:45:b1:b6:fc: 05:9e:98:6f:94:38:c9:46:61:dd:95:42:67:67:da: 02:ca:c7:0c:0b:2f:7b:00:7c:13:a3:8e:69:84:49: e3:7e:af:d7:0e:77:51:be:22:f2:b8:7f:a9:64:b4: b2:b1:e8:7a:96:fa:5e:77:b9:58:e9:c8:db:fd:26: aa:80:86:67:3a:4e:bf:02:71:f2:be:f5:95:b3:41: f0:a1:82:ba:25:f5:70:f8:d4:a1:85:ae:90:1f:3d: 14:f1:02:d4:52:f4:e7:aa:55:89:a5:d0:82:fc:e5: 77:01:db:b7:f7:e0:be:e4:da:dc:97:38:71:c2:53: bf:14:9b:5c:8b:d8:d3:37:94:df:c6:d8:f8:7c:49: e6:4d:d4:22:6a:f6:ae:7a:4b:e4:93:19:fb:e9:63: f0:13:1d:9e:b4:64:22:46:0d:10:79:ee:ac:ef:80: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BF:1B:CA:33:26:64:22:FD:4D:84:56:CE:12:2D:28:23:87:DC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be3e86c1-f876-3b5e-9bf1-1a9e40635d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f2:fd:10:c3:71:2a:0c:35:1c:18:5a:20:22:66:d4:ad:d4: 02:e5:28:50:e5:51:d7:a7:61:ff:e8:05:fb:c0:46:21:4a:fa: 9c:fe:ec:7d:66:8a:72:0e:05:c9:29:a0:9a:7d:4b:f1:97:21: f5:40:36:69:8c:e6:83:ad:35:01:63:3d:65:c1:9e:08:37:0e: 7b:a7:c4:d8:c3:54:be:81:c4:b5:5b:0f:1e:08:29:10:3d:87: 10:65:39:93:c5:cf:25:9e:99:8a:e6:82:5a:8d:ca:4c:37:48: 96:26:9e:66:11:94:ce:af:ed:7f:3c:00:58:20:51:f1:d4:f0: c9:ce:47:e0:be:1a:e9:5c:cd:cf:b3:07:03:bf:61:0e:1b:e4: 31:e4:0c:48:d7:8a:ae:c1:03:a3:03:7d:6f:65:60:44:5f:bb: 66:74:fe:4c:84:a3:74:3a:6e:5c:3c:01:08:9b:5f:dc:a9:e4: 1a:f7:74:de:22:43:5b:f2:14:50:f9:11:66:6c:35:90:16:47: ee:71:69:57:88:67:fc:04:e0:6e:cd:54:66:79:ae:12:68:94: ad:f4:24:6d:64:eb:52:91:aa:af:a1:76:0a:14:4b:75:1d:21: 8d:ed:db:db:07:6b:d9:63:05:e0:82:42:fe:1b:0d:80:a5:4d: e2:87:03:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMuZ9xZJ6ndVDr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NzQxNTdiYWMtMDBjZC00MWUzLWJiMzEtZjA3ZjE2NWY0YTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFsufUAzztllWqw9oBNvcREpCGaL48KMMB+X GcDas3hZB+7wuW93pwGLqjDFG3/LzOLmH8H2ezybVDv5lf7msAKNkf0ziSvR3gjF oLQxGQanDV99F0WxtvwFnphvlDjJRmHdlUJnZ9oCyscMCy97AHwTo45phEnjfq/X DndRviLyuH+pZLSyseh6lvped7lY6cjb/SaqgIZnOk6/AnHyvvWVs0HwoYK6JfVw +NShha6QHz0U8QLUUvTnqlWJpdCC/OV3Adu39+C+5NrclzhxwlO/FJtci9jTN5Tf xtj4fEnmTdQiavauekvkkxn76WPwEx2etGQiRg0Qee6s74Dv8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa/G8ozJmQi/U2EVs4SLSgjh9whMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmUzZTg2YzEtZjg3Ni0z YjVlLTliZjEtMWE5ZTQwNjM1ZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAny/RDDcSoMNRwYWiAiZtSt1ALlKFDlUdenYf/oBfvARiFK+pz+7H1m inIOBckpoJp9S/GXIfVANmmM5oOtNQFjPWXBngg3DnunxNjDVL6BxLVbDx4IKRA9 hxBlOZPFzyWemYrmglqNykw3SJYmnmYRlM6v7X88AFggUfHU8MnOR+C+Gulczc+z BwO/YQ4b5DHkDEjXiq7BA6MDfW9lYERfu2Z0/kyEo3Q6blw8AQibX9yp5Br3dN4i Q1vyFFD5EWZsNZAWR+5xaVeIZ/wE4G7NVGZ5rhJolK30JG1k61KRqq+hdgoUS3Ud IY3t29sHa9ljBeCCQv4bDYClTeKHA9Q= -----END CERTIFICATE-----Generated at Thu May 23 02:54:25 2024 by rpki-client on console-ams.rpki-client.org