$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c42475d7-446a-3f8e-8984-2013843605ce.roa File: c42475d7-446a-3f8e-8984-2013843605ce.roa (raw, json) Hash identifier: VmY3oPTQ/bUd29TBw5uEeWpZmDNX2xQclgTslCPeQoQ= Subject key identifier: 87:FE:37:6B:81:AA:18:A2:3A:11:7C:9C:7B:2F:A8:0E:F8:8D:7C:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332EAC1042117649A4D0EE8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c42475d7-446a-3f8e-8984-2013843605ce.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 69.40.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ea:c1:04:21:17:64:9a:4d:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=5449c965-831a-4619-8a8b-08b5d8094900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:8d:b3:33:7a:ac:70:30:94:48:d7:12:2c: cb:75:55:33:c9:cf:36:c0:16:cf:36:59:4d:4f:a6: 9f:4f:1a:d6:f5:bb:0b:11:57:be:b8:4f:f9:1f:c9: 28:cb:07:ef:53:91:14:ed:80:d2:d0:94:14:76:4c: 56:27:24:2b:da:2c:89:c5:55:ed:74:2c:fa:51:90: 4e:8c:8c:65:71:23:72:bd:18:66:79:0c:78:8e:22: ce:d4:4c:8c:f4:ce:4b:13:8e:40:54:57:72:df:88: b8:46:3a:9c:46:2d:1e:a0:1e:e5:e4:21:f9:7c:44: d3:de:4a:fc:22:1a:f4:4a:9c:60:85:55:5a:b5:70: 6e:45:c9:7b:86:d5:b0:87:46:85:9d:f6:83:6c:cc: 59:31:83:89:42:4b:a9:5d:c0:e4:eb:c2:0f:61:ef: b8:03:ad:3e:38:30:46:78:5a:ca:2a:59:65:1f:60: 4b:be:00:6b:ee:32:22:f1:92:d0:75:d3:07:9e:5a: 58:11:26:89:7c:1f:e0:84:4e:04:a8:67:6e:e1:5b: ab:f5:4b:fb:45:be:4d:b8:fa:75:71:3e:bb:a7:9e: 47:2a:11:30:56:7a:00:8c:82:02:09:75:e7:7c:44: 22:06:5c:65:8f:62:e1:a2:67:88:69:7c:a1:97:38: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FE:37:6B:81:AA:18:A2:3A:11:7C:9C:7B:2F:A8:0E:F8:8D:7C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c42475d7-446a-3f8e-8984-2013843605ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:30:a0:c5:2e:15:87:14:57:00:58:db:b4:58:15:69:35:01: de:20:70:00:c0:b3:ac:aa:d4:eb:63:c7:46:ab:85:1a:ed:91: cf:23:5a:fa:a2:7f:00:a8:17:7a:51:5d:25:c0:f2:09:b0:73: 64:0c:ee:d1:3e:10:c1:6c:a7:6e:5a:a2:bf:d6:19:2b:b7:16: 59:c1:1a:b7:7a:41:44:88:2f:b4:b1:a0:9e:51:b8:af:aa:8f: c5:e0:a2:63:8d:08:85:ff:d9:70:50:ef:a9:2a:cb:f2:e2:72: 97:e4:4a:4d:b9:78:d2:8a:15:b2:14:49:26:05:ff:e7:eb:30: 34:f3:25:23:21:76:2f:34:9a:ec:4e:5a:ee:1d:f1:3d:e0:d7: 2d:5b:59:a0:e1:36:75:37:73:ff:c8:d8:da:64:d7:8f:0d:3e: a2:f0:41:0c:9b:39:6e:22:eb:35:0d:5b:c0:79:84:6a:a0:27: 9b:7a:45:d1:da:d3:c3:63:11:b7:86:4c:1b:42:04:fc:a7:c7: 89:8e:cb:75:c9:51:f3:ef:a6:2f:b3:10:a1:f8:4d:87:61:d1: e6:b1:34:97:fc:97:0d:5b:a8:29:cb:19:5a:c6:ad:5d:6c:73: e1:87:f2:c5:dc:95:09:8a:13:ca:56:99:21:7e:d1:18:c8:fc: fb:e9:ad:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMurBBCEXZJpNDugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NTQ0OWM5NjUtODMxYS00NjE5LThhOGItMDhiNWQ4MDk0OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksGNszN6rHAwlEjXEizLdVUzyc82wBbPNllN T6afTxrW9bsLEVe+uE/5H8koywfvU5EU7YDS0JQUdkxWJyQr2iyJxVXtdCz6UZBO jIxlcSNyvRhmeQx4jiLO1EyM9M5LE45AVFdy34i4RjqcRi0eoB7l5CH5fETT3kr8 Ihr0SpxghVVatXBuRcl7htWwh0aFnfaDbMxZMYOJQkupXcDk68IPYe+4A60+ODBG eFrKKlllH2BLvgBr7jIi8ZLQddMHnlpYESaJfB/ghE4EqGdu4Vur9Uv7Rb5NuPp1 cT67p55HKhEwVnoAjIICCXXnfEQiBlxlj2LhomeIaXyhlzixgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf+N2uBqhiiOhF8nHsvqA74jXw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQyNDc1ZDctNDQ2YS0z ZjhlLTg5ODQtMjAxMzg0MzYwNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkwoMUuFYcUVwBY27RYFWk1Ad4gcADAs6yq1Otjx0arhRrtkc8jWvqi fwCoF3pRXSXA8gmwc2QM7tE+EMFsp25aor/WGSu3FlnBGrd6QUSIL7SxoJ5RuK+q j8XgomONCIX/2XBQ76kqy/LicpfkSk25eNKKFbIUSSYF/+frMDTzJSMhdi80muxO Wu4d8T3g1y1bWaDhNnU3c//I2Npk148NPqLwQQybOW4i6zUNW8B5hGqgJ5t6RdHa 08NjEbeGTBtCBPynx4mOy3XJUfPvpi+zEKH4TYdh0eaxNJf8lw1bqCnLGVrGrV1s c+GH8sXclQmKE8pWmSF+0RjI/PvprRk= -----END CERTIFICATE-----Generated at Thu May 23 13:45:04 2024 by rpki-client on console-fra.rpki-client.org