$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4648ae8-5915-33b5-9e99-2c517b5a1137.roa File: d4648ae8-5915-33b5-9e99-2c517b5a1137.roa (raw, json) Hash identifier: mQ5P7NxFFm3GS2Z2iLMyyenJeFmufn5hTjl2q+3m+Ro= Subject key identifier: 1C:F6:4A:96:8D:01:4A:0D:28:66:8C:47:C0:8A:22:5E:6F:44:1C:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332FA1186C93773CFC30880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4648ae8-5915-33b5-9e99-2c517b5a1137.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 75.90.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:fa:11:86:c9:37:73:cf:c3:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=ac3f54aa-aabd-4ff8-80e5-de66d4b57c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:db:05:df:b0:e9:15:f7:6e:a5:28:52:52: 9f:06:f3:3c:a6:67:75:b2:31:34:d9:16:b6:8b:c4: 3c:5c:2b:07:33:28:38:52:e1:73:1c:57:fd:87:36: e7:eb:ae:f5:e0:58:10:3c:5d:6a:57:f9:bd:03:d2: 42:e9:9a:e3:6f:39:be:10:84:a3:2f:42:85:c4:56: 58:39:17:cd:84:98:b0:a6:07:9d:7f:9c:a0:37:47: 42:10:dd:80:72:87:00:ef:c3:d1:bc:84:2e:8b:1d: 0a:79:cf:b7:d8:4b:6c:80:72:fb:5b:2b:e4:a4:10: 09:16:88:d5:b0:33:fc:ef:75:66:1e:d4:d9:97:af: 40:43:73:ff:96:2c:f6:66:88:df:46:4d:2e:2d:1b: 3a:69:0c:f0:cb:8f:bc:6c:22:1a:a6:e3:f6:0e:0d: 5a:82:a9:7d:bf:f4:82:0a:0e:b8:d2:b9:30:f7:10: 84:b8:3d:53:fc:30:db:44:5f:b5:3d:c8:e8:2d:24: ed:37:48:74:dd:6a:8a:96:f4:75:5a:c6:50:fd:e3: 57:02:ba:e4:4d:0b:27:bc:f3:57:50:3f:37:be:4b: 8e:d6:4a:7f:23:d0:80:9c:93:41:3d:36:32:ad:41: a5:7d:f8:e9:77:99:03:7e:e9:a2:d9:da:56:75:d2: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:4A:96:8D:01:4A:0D:28:66:8C:47:C0:8A:22:5E:6F:44:1C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4648ae8-5915-33b5-9e99-2c517b5a1137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0a:69:14:d2:c1:a6:ef:dd:68:aa:23:9c:d1:a5:e1:b7:af: 7b:35:d5:17:23:ee:fd:28:aa:fb:a2:a9:61:8a:59:d3:78:d9: eb:81:9c:ad:fd:32:7c:d0:23:9b:16:38:95:6f:ad:98:82:8f: 2b:7b:67:50:07:01:fa:19:d8:23:9d:9a:01:a7:98:df:bb:12: 57:7c:f3:da:04:73:e8:41:b6:8e:df:b1:93:96:af:50:58:40: 95:7f:07:bf:b5:05:c8:59:63:4c:af:ba:4e:1e:01:7d:58:c7: 51:be:31:01:f9:99:c0:94:c3:6f:53:6f:bf:8d:42:e0:53:de: d3:b1:5e:76:eb:87:3f:1f:4a:10:69:14:17:bd:b6:b3:c5:c5: 9c:1d:1c:ef:a0:a1:ca:08:91:1a:83:32:6f:50:df:f1:fe:79: 60:6e:53:5c:ac:f3:53:b8:b9:62:fb:b8:8d:bb:e6:0e:63:08: 03:5a:40:70:b8:ef:17:a1:ed:52:ca:74:2c:ee:1e:a0:9d:1c: e7:22:c9:57:d6:6b:25:27:c9:78:c1:29:20:84:65:29:41:3f: f3:f8:f4:3c:43:d0:26:c5:6f:e6:99:91:d9:87:d9:4f:b9:52: f3:f1:eb:4e:2f:eb:76:d3:28:8b:1d:d6:00:84:80:c3:09:32: d5:dc:9c:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvoRhsk3c8/DCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YWMzZjU0YWEtYWFiZC00ZmY4LTgwZTUtZGU2NmQ0YjU3YzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTvbBd+w6RX3bqUoUlKfBvM8pmd1sjE02Ra2 i8Q8XCsHMyg4UuFzHFf9hzbn66714FgQPF1qV/m9A9JC6Zrjbzm+EISjL0KFxFZY ORfNhJiwpgedf5ygN0dCEN2AcocA78PRvIQuix0Kec+32EtsgHL7WyvkpBAJFojV sDP873VmHtTZl69AQ3P/liz2ZojfRk0uLRs6aQzwy4+8bCIapuP2Dg1agql9v/SC Cg640rkw9xCEuD1T/DDbRF+1PcjoLSTtN0h03WqKlvR1WsZQ/eNXArrkTQsnvPNX UD83vkuO1kp/I9CAnJNBPTYyrUGlffjpd5kDfumi2dpWddLhRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz2SpaNAUoNKGaMR8CKIl5vRBw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDQ2NDhhZTgtNTkxNS0z M2I1LTllOTktMmM1MTdiNWExMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAKaRTSwabv3WiqI5zRpeG3r3s11Rcj7v0oqvuiqWGKWdN42euBnK39 MnzQI5sWOJVvrZiCjyt7Z1AHAfoZ2COdmgGnmN+7Eld889oEc+hBto7fsZOWr1BY QJV/B7+1BchZY0yvuk4eAX1Yx1G+MQH5mcCUw29Tb7+NQuBT3tOxXnbrhz8fShBp FBe9trPFxZwdHO+gocoIkRqDMm9Q3/H+eWBuU1ys81O4uWL7uI275g5jCANaQHC4 7xeh7VLKdCzuHqCdHOciyVfWayUnyXjBKSCEZSlBP/P49DxD0CbFb+aZkdmH2U+5 UvPx604v63bTKIsd1gCEgMMJMtXcnBk= -----END CERTIFICATE-----Generated at Thu May 23 20:12:08 2024 by rpki-client on console-ams.rpki-client.org