$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d33c9dee-64b8-339e-9de3-67883188a470.roa File: d33c9dee-64b8-339e-9de3-67883188a470.roa (raw, json) Hash identifier: HSStkTqRzHNu/wKRguc4DT3vFUWxpVqW6ek2SQSjdrk= Subject key identifier: 3D:7C:CF:BB:CF:A9:AD:E3:45:54:41:9A:25:2D:8D:C8:6E:B9:CE:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533335096120ED462E893128 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d33c9dee-64b8-339e-9de3-67883188a470.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7268 IP address blocks: 66.84.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:35:09:61:20:ed:46:2e:89:31:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=e9c35038-7abf-4fda-a6ac-649704a95d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:be:e7:ec:a5:a5:77:42:0b:1a:bd:1c:3e: e2:00:81:75:5f:ad:04:ff:5c:d3:ce:ae:a8:7b:d6: e8:5b:fd:7d:25:19:e8:32:fa:1b:61:13:13:a6:b4: bc:2a:6d:47:78:32:e5:9c:41:6e:32:54:16:39:2d: 82:a2:e6:2d:f6:70:38:ab:72:0b:03:46:23:a9:f1: 7c:69:35:8c:79:ab:33:13:e0:db:bd:54:9a:3a:1a: ec:a7:67:95:04:db:52:90:be:fa:27:46:70:72:5b: f3:11:2d:a7:4b:23:92:d5:17:08:97:76:b1:2b:97: 64:e4:82:eb:be:d2:1e:db:3e:1d:66:d4:9f:b0:2d: 97:78:4c:c0:ec:d7:cc:c8:83:be:0c:21:b0:30:83: 18:0b:66:3a:43:30:74:1f:d8:4c:ba:ed:df:f0:ec: 09:d9:df:51:2f:54:6d:3f:f1:63:24:93:45:e3:e7: 6b:5e:c7:2c:6c:f5:e0:72:d2:dd:46:de:cd:f9:09: ce:e3:13:f1:d3:9a:eb:92:d6:e4:08:23:ef:f0:13: 79:ad:9d:59:1c:87:14:b6:75:6d:de:04:73:b4:3f: cd:ba:3f:4a:98:48:1e:84:07:54:49:dc:7f:9e:07: e1:d2:e6:0f:89:e8:ba:c5:4e:83:d9:bc:c0:d1:51: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7C:CF:BB:CF:A9:AD:E3:45:54:41:9A:25:2D:8D:C8:6E:B9:CE:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d33c9dee-64b8-339e-9de3-67883188a470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.84.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:14:01:17:ec:e8:43:3b:42:ed:a9:a4:19:79:83:bb:d8:65: be:78:da:f7:ad:4c:eb:fb:5b:9c:98:8f:08:d9:fb:9a:6e:1c: ab:6e:56:d7:a8:15:8b:8b:3f:64:07:72:cd:e5:69:42:c4:a0: 17:c8:d8:2a:5e:2b:0e:26:d7:f2:15:fd:4b:20:6b:29:c9:4e: ac:db:bd:44:da:04:df:f4:48:2d:6c:2d:a3:83:de:b5:09:f0: 39:9b:39:91:08:0d:9b:d4:5d:fd:b5:24:ee:86:ed:57:31:b3: 0b:91:38:91:df:d6:2b:65:9a:f2:fa:41:3e:54:6a:3b:c7:61: a3:0b:89:73:ea:9a:dd:27:51:1a:ae:10:37:ab:6d:90:6d:01: bf:5c:41:3d:55:a8:49:dc:a0:fe:b4:95:51:3a:09:ed:c5:fc: b6:c6:43:cb:2d:f1:e8:c7:21:55:d5:41:a2:0c:7b:c0:b8:26: 3e:45:78:8f:07:25:41:05:1e:60:78:f3:24:41:7a:d3:94:9b: 63:b2:81:35:fd:3b:24:9f:1b:c4:be:47:18:49:58:b4:ae:a8: ea:e5:8d:66:50:b4:20:12:31:cb:a2:49:c6:f6:48:a8:84:0f: ca:79:54:0a:63:24:cb:43:77:31:93:cc:0c:79:1f:1d:c4:d2: 3a:8a:e3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMzUJYSDtRi6JMSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZTljMzUwMzgtN2FiZi00ZmRhLWE2YWMtNjQ5NzA0YTk1ZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+G+5+ylpXdCCxq9HD7iAIF1X60E/1zTzq6o e9boW/19JRnoMvobYRMTprS8Km1HeDLlnEFuMlQWOS2CouYt9nA4q3ILA0YjqfF8 aTWMeaszE+DbvVSaOhrsp2eVBNtSkL76J0ZwclvzES2nSyOS1RcIl3axK5dk5ILr vtIe2z4dZtSfsC2XeEzA7NfMyIO+DCGwMIMYC2Y6QzB0H9hMuu3f8OwJ2d9RL1Rt P/FjJJNF4+drXscsbPXgctLdRt7N+QnO4xPx05rrktbkCCPv8BN5rZ1ZHIcUtnVt 3gRztD/Nuj9KmEgehAdUSdx/ngfh0uYPiei6xU6D2bzA0VFjCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD18z7vPqa3jRVRBmiUtjchuuc5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDMzYzlkZWUtNjRiOC0z MzllLTlkZTMtNjc4ODMxODhhNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQlSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwUARfs6EM7Qu2ppBl5g7vYZb542vetTOv7W5yYjwjZ+5puHKtuVteo FYuLP2QHcs3laULEoBfI2CpeKw4m1/IV/UsgaynJTqzbvUTaBN/0SC1sLaOD3rUJ 8DmbOZEIDZvUXf21JO6G7VcxswuROJHf1itlmvL6QT5UajvHYaMLiXPqmt0nURqu EDerbZBtAb9cQT1VqEncoP60lVE6Ce3F/LbGQ8st8ejHIVXVQaIMe8C4Jj5FeI8H JUEFHmB48yRBetOUm2OygTX9OySfG8S+RxhJWLSuqOrljWZQtCASMcuiScb2SKiE D8p5VApjJMtDdzGTzAx5Hx3E0jqK43E= -----END CERTIFICATE-----Generated at Thu May 23 13:45:06 2024 by rpki-client on console-fra.rpki-client.org