$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfbbc8e4-69e4-3eef-aa06-78d5b1e5e376.roa File: cfbbc8e4-69e4-3eef-aa06-78d5b1e5e376.roa (raw, json) Hash identifier: FQ+/SDjTHwOTZiGEYGL29aDS4P6O4c8zHJW8Dzob6XA= Subject key identifier: 42:95:16:CD:90:E8:B7:8E:58:76:ED:F4:13:D2:D6:65:D5:B3:47:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333378F9D0A2DB4F366EE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfbbc8e4-69e4-3eef-aa06-78d5b1e5e376.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 20141 IP address blocks: 209.168.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:37:8f:9d:0a:2d:b4:f3:66:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=e108f2aa-3016-4c17-b738-9a206e8501d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:87:cd:78:d1:95:5a:35:52:b5:ae:68:02: 10:c1:05:bf:2e:99:f9:53:59:34:6c:c6:6b:10:3d: cd:e2:42:37:e3:7c:4b:c4:3f:9f:c5:26:9f:b9:ad: fc:3d:72:c1:0b:6d:e0:af:8d:98:4e:7c:39:a7:41: b5:ac:c0:8d:20:a5:20:e2:e9:0e:5c:9d:86:04:84: ba:9d:65:9e:54:d1:cd:6b:df:6b:6c:e9:1b:09:95: ca:a7:62:4e:5f:b4:c6:ba:3c:aa:eb:7f:72:b2:0b: ba:a5:a2:a8:48:14:3d:f4:4a:eb:fe:21:a8:a9:b8: 7b:e0:0d:40:94:f8:d5:87:91:db:65:b1:f2:71:92: 00:a5:c7:e5:2f:42:29:a5:d6:45:2d:f2:9e:cc:1c: 61:2b:97:09:9d:4f:31:63:58:3f:82:87:25:81:a7: b1:06:bf:3e:79:dd:9e:91:63:d8:88:e3:60:a3:ce: 9e:ae:0c:ef:d8:62:22:72:2c:fd:7f:6f:b6:61:6b: 5c:80:15:49:c0:47:08:c3:ce:55:d8:59:41:12:c7: 21:4f:04:d1:33:6f:9b:9a:88:f7:3f:46:6e:92:6a: 41:ef:3e:19:cb:7c:55:e0:67:ef:f8:fb:00:91:11: 87:17:d9:e5:e8:6f:91:d7:f7:06:ae:59:a8:0a:b2: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:95:16:CD:90:E8:B7:8E:58:76:ED:F4:13:D2:D6:65:D5:B3:47:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfbbc8e4-69e4-3eef-aa06-78d5b1e5e376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.168.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:09:42:c0:4c:09:87:f4:a9:57:d7:a5:58:40:cd:20:f3:0b: 18:01:2f:f3:3c:74:2e:d9:1a:77:a3:d5:a0:71:58:f1:de:a6: 1c:8d:ca:43:5d:1f:06:58:c4:b6:88:34:d1:3b:9d:52:49:0c: bd:64:af:01:9e:99:f8:c5:23:2b:c0:3e:ec:bc:8d:6d:74:be: b8:5c:dd:e5:89:6b:e8:52:5e:40:2d:58:de:d3:5d:d6:7e:5e: d2:e0:45:32:c7:53:0e:d7:23:2c:86:1e:dd:8a:0a:a3:fb:36: 6e:cb:d8:ae:9f:95:1c:2f:2e:bf:1c:3a:cd:c9:a7:f2:22:d9: 02:4f:0b:51:37:0a:e6:c2:da:5a:18:99:e6:32:69:de:4a:3d: 4a:fc:7c:d9:07:31:db:79:dc:4f:7e:47:f4:37:8d:17:0e:60: ad:03:ec:8e:cd:a3:c4:5c:2a:51:51:34:2e:22:a4:9c:ef:61: 6d:ef:7f:ab:4f:d1:5f:c2:25:4c:8b:15:6b:96:d9:d1:0d:57: 18:d0:b9:f3:36:78:07:5d:83:90:ca:ec:68:a7:fe:a2:36:6c: 8b:03:12:06:0d:a5:ee:4a:9e:cf:aa:e4:9e:3d:c9:c0:3d:f0: c6:a0:88:72:b8:73:78:34:df:95:8d:78:82:b0:53:a5:49:45: 52:8f:fa:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMzePnQottPNm7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZTEwOGYyYWEtMzAxNi00YzE3LWI3MzgtOWEyMDZlODUwMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOuHzXjRlVo1UrWuaAIQwQW/Lpn5U1k0bMZr ED3N4kI343xLxD+fxSafua38PXLBC23gr42YTnw5p0G1rMCNIKUg4ukOXJ2GBIS6 nWWeVNHNa99rbOkbCZXKp2JOX7TGujyq639ysgu6paKoSBQ99Err/iGoqbh74A1A lPjVh5HbZbHycZIApcflL0IppdZFLfKezBxhK5cJnU8xY1g/goclgaexBr8+ed2e kWPYiONgo86ergzv2GIiciz9f2+2YWtcgBVJwEcIw85V2FlBEschTwTRM2+bmoj3 P0ZukmpB7z4Zy3xV4Gfv+PsAkRGHF9nl6G+R1/cGrlmoCrJNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKVFs2Q6LeOWHbt9BPS1mXVs0cqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZiYmM4ZTQtNjllNC0z ZWVmLWFhMDYtNzhkNWIxZTVlMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUJQsBMCYf0qVfXpVhAzSDzCxgBL/M8dC7ZGnej1aBxWPHephyNykNd HwZYxLaINNE7nVJJDL1krwGemfjFIyvAPuy8jW10vrhc3eWJa+hSXkAtWN7TXdZ+ XtLgRTLHUw7XIyyGHt2KCqP7Nm7L2K6flRwvLr8cOs3Jp/Ii2QJPC1E3CubC2loY meYyad5KPUr8fNkHMdt53E9+R/Q3jRcOYK0D7I7No8RcKlFRNC4ipJzvYW3vf6tP 0V/CJUyLFWuW2dENVxjQufM2eAddg5DK7Gin/qI2bIsDEgYNpe5Kns+q5J49ycA9 8MagiHK4c3g035WNeIKwU6VJRVKP+gY= -----END CERTIFICATE-----Generated at Mon May 6 17:38:44 2024 by rpki-client on console-fra.rpki-client.org