$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa File: d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa (raw, json) Hash identifier: RVvTJ0oCXB7rWJfySvGAwXZz7s0ExsG2MHfdo+/R+CY= Subject key identifier: 9A:79:3A:C4:50:43:87:67:2F:BE:20:28:15:B0:B0:9B:F3:39:D6:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332DDC938CC41FB1F2C2980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 64.61.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:dd:c9:38:cc:41:fb:1f:2c:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=0ef9694a-a927-4a53-b420-50f86bd5648e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:76:02:57:85:31:8e:86:7b:86:d4:a8:c4:35: da:86:37:d7:62:66:74:2d:30:32:ac:6b:5b:1f:49: 80:ae:81:60:11:f3:49:11:7b:25:89:be:cb:dd:05: 1e:9f:2a:c7:7d:e9:53:de:e3:3c:09:86:85:e8:e5: b3:50:2c:ea:7b:97:ff:39:a5:c7:3d:1a:51:bf:f2: 58:12:22:b9:97:de:19:79:69:33:e7:7f:a8:fb:70: 63:89:72:56:81:ad:4a:e1:d0:a8:13:a2:52:80:73: 79:46:81:1b:48:57:4c:2e:f8:ec:42:ae:24:26:a3: 8f:a9:e8:c8:63:79:c6:56:ee:97:cd:3d:45:6b:a9: 3a:f9:fc:88:f4:2f:b3:2f:f3:df:f0:a6:f5:36:55: e2:db:07:ff:a0:ac:a9:6f:6b:9c:e0:a3:89:07:58: f5:ff:90:a2:c7:1c:28:3b:e6:41:4b:a4:2d:38:ea: e9:49:ea:c8:dc:39:85:80:0b:80:15:e1:7c:29:24: 74:d8:02:f1:2c:66:5f:3e:b1:9c:9b:9d:48:61:3e: 2c:c0:4d:26:37:65:3a:46:9c:d2:6a:9b:6b:2d:13: eb:1e:3f:23:5b:7b:35:1b:40:9c:b2:fa:bb:13:6d: e1:37:27:e0:13:c2:4f:0b:e7:81:42:57:b1:17:5e: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:79:3A:C4:50:43:87:67:2F:BE:20:28:15:B0:B0:9B:F3:39:D6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d68e4f8f-a57d-3259-a6de-a47dab3fe003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0e:9f:85:8e:27:c8:eb:23:a2:9b:55:b4:7f:3d:a2:f6:6c: 4a:d2:fd:3c:93:ac:f9:4a:be:f8:97:3e:73:de:ce:1f:52:10: e8:ce:12:91:5e:81:07:b8:40:d6:d2:dc:93:6d:21:72:ce:20: 7c:70:1b:a7:5c:da:fe:d0:47:46:2a:de:83:79:11:37:2b:24: c0:ee:97:03:f8:56:97:ed:b0:5a:ff:e5:79:9e:93:ce:5f:b4: bb:d7:0b:e1:36:6f:0c:4f:bc:97:40:b7:29:49:73:46:0b:bd: 08:fb:35:3a:9f:b8:6b:43:bc:95:0b:be:b5:e3:94:a4:5d:30: fb:9b:0b:8f:ea:57:ea:c3:e1:89:25:3c:ea:79:68:d1:38:8d: 96:58:84:94:99:da:6b:22:cd:48:37:30:4a:44:78:40:9a:dd: 20:fe:ea:23:b5:ac:df:6d:0f:25:4f:72:96:a8:84:3c:6d:5a: 22:ff:e6:85:68:7b:97:d8:68:16:37:31:49:89:31:81:ac:bd: 55:ad:fe:ad:a9:aa:e5:39:5f:93:71:a3:a2:eb:f7:70:e5:ea: f8:e2:8e:ce:45:ae:e2:e8:3b:4b:df:0d:83:16:8c:76:d2:96: bc:c9:80:b8:59:09:39:36:4e:61:dd:0e:94:e5:4e:6e:26:b9: 82:0b:89:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMt3JOMxB+x8sKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MGVmOTY5NGEtYTkyNy00YTUzLWI0MjAtNTBmODZiZDU2NDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93YCV4UxjoZ7htSoxDXahjfXYmZ0LTAyrGtb H0mAroFgEfNJEXslib7L3QUenyrHfelT3uM8CYaF6OWzUCzqe5f/OaXHPRpRv/JY EiK5l94ZeWkz53+o+3BjiXJWga1K4dCoE6JSgHN5RoEbSFdMLvjsQq4kJqOPqejI Y3nGVu6XzT1Fa6k6+fyI9C+zL/Pf8Kb1NlXi2wf/oKypb2uc4KOJB1j1/5Cixxwo O+ZBS6QtOOrpSerI3DmFgAuAFeF8KSR02ALxLGZfPrGcm51IYT4swE0mN2U6RpzS aptrLRPrHj8jW3s1G0Ccsvq7E23hNyfgE8JPC+eBQlexF163bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp5OsRQQ4dnL74gKBWwsJvzOdaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDY4ZTRmOGYtYTU3ZC0z MjU5LWE2ZGUtYTQ3ZGFiM2ZlMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQD2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQOn4WOJ8jrI6KbVbR/PaL2bErS/TyTrPlKvviXPnPezh9SEOjOEpFe gQe4QNbS3JNtIXLOIHxwG6dc2v7QR0Yq3oN5ETcrJMDulwP4VpftsFr/5Xmek85f tLvXC+E2bwxPvJdAtylJc0YLvQj7NTqfuGtDvJULvrXjlKRdMPubC4/qV+rD4Ykl POp5aNE4jZZYhJSZ2msizUg3MEpEeECa3SD+6iO1rN9tDyVPcpaohDxtWiL/5oVo e5fYaBY3MUmJMYGsvVWt/q2pquU5X5Nxo6Lr93Dl6vjijs5FruLoO0vfDYMWjHbS lrzJgLhZCTk2TmHdDpTlTm4muYILif4= -----END CERTIFICATE-----Generated at Thu May 23 20:12:09 2024 by rpki-client on console-ams.rpki-client.org