$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8784271-14f2-3a55-aa3d-e84a293f68eb.roa File: d8784271-14f2-3a55-aa3d-e84a293f68eb.roa (raw, json) Hash identifier: 520P32npzN6qr8PBJLesIn3O/bqmlT4yliLevz5ThUc= Subject key identifier: 8B:13:B8:BD:68:FD:22:E6:D4:52:4E:97:BD:57:C8:23:65:35:6B:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332B0548025E0E9131D280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8784271-14f2-3a55-aa3d-e84a293f68eb.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 216.183.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2b:05:48:02:5e:0e:91:31:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=4bc37380-b5dc-48e9-b476-163f5f60b533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:d3:08:07:3e:8f:15:28:f9:62:d7:39:ed: 5d:02:9a:94:79:bb:d6:9a:0c:a8:ec:30:69:5d:2a: 80:8f:77:d2:b3:ed:74:c8:c5:ae:6f:e8:5b:e2:2a: 27:2a:38:a6:ff:f4:e7:07:60:b6:da:43:43:9c:12: 5c:69:98:49:b1:50:46:e5:a1:a0:28:56:12:0b:dd: 05:56:17:eb:87:e1:f5:76:ef:15:b0:f4:c9:9d:29: eb:d9:de:c2:df:db:ea:a9:25:fb:de:ca:66:c5:83: 97:19:0a:e3:7c:2d:94:40:31:28:e3:26:1f:31:18: 56:13:96:28:24:5d:74:80:00:72:f3:57:79:90:31: 43:e4:fd:07:1c:83:68:e0:17:73:25:11:2b:6e:51: 85:0a:2a:d9:05:19:0b:ee:65:dc:db:ed:fd:aa:82: 0f:eb:1d:cc:11:45:d7:77:d4:a0:cd:a5:19:a3:9d: 85:ac:b4:01:75:21:b8:d5:4f:4e:ed:f3:cc:50:53: da:11:c5:39:39:06:10:1b:3d:3d:8e:b8:0e:39:27: 9f:ba:a5:2d:13:69:5d:21:8f:b0:58:82:eb:2d:3c: 90:a1:73:c6:3b:d1:d2:62:d0:ac:89:c4:90:34:ae: 1a:1d:e2:1a:de:9b:9b:5b:35:23:77:d3:74:0f:78: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:B8:BD:68:FD:22:E6:D4:52:4E:97:BD:57:C8:23:65:35:6B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8784271-14f2-3a55-aa3d-e84a293f68eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.183.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:38:35:f0:db:0d:92:e8:89:77:c6:c6:63:18:37:51:35:c8: 8d:85:80:cd:5d:90:dc:38:b3:82:6c:15:44:6f:89:bc:a0:9c: de:3c:32:6a:0b:1e:8e:2c:0d:0f:b6:5a:5a:6d:2d:2a:23:c4: 46:91:93:80:60:24:62:1f:7e:4a:42:16:97:4c:df:62:bc:61: ae:91:ba:2a:0c:4e:a0:28:e2:17:ed:32:7f:06:72:52:63:23: 54:0b:4d:4c:ed:f6:62:07:fb:70:27:9e:aa:75:eb:e0:97:08: 4e:27:db:e8:aa:2a:15:90:88:ee:be:3e:67:e4:b8:ff:de:77: 9f:dc:1a:3c:45:8e:6e:95:75:79:de:b7:40:8d:38:38:11:55: b4:50:17:7d:4c:02:20:b9:aa:a3:7f:59:c2:7a:5d:4a:37:cb: 3d:b0:eb:ab:86:5b:02:be:86:61:48:bd:12:11:e3:cf:4e:53: 98:80:90:30:e5:22:fe:50:56:a3:65:5f:f1:9c:45:30:4e:38: 31:4d:0f:b6:c9:56:81:18:40:41:e1:c5:e6:e2:ac:c8:19:5d: 1a:9d:90:fd:47:8e:a8:52:05:0f:98:6a:6c:1c:dd:e1:cd:70: e4:a8:de:46:83:d9:a3:91:b7:5b:99:e1:47:0b:0f:f6:17:a3: f0:f2:f9:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMysFSAJeDpEx0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NGJjMzczODAtYjVkYy00OGU5LWI0NzYtMTYzZjVmNjBiNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3fTCAc+jxUo+WLXOe1dApqUebvWmgyo7DBp XSqAj3fSs+10yMWub+hb4ionKjim//TnB2C22kNDnBJcaZhJsVBG5aGgKFYSC90F Vhfrh+H1du8VsPTJnSnr2d7C39vqqSX73spmxYOXGQrjfC2UQDEo4yYfMRhWE5Yo JF10gABy81d5kDFD5P0HHINo4BdzJRErblGFCirZBRkL7mXc2+39qoIP6x3MEUXX d9SgzaUZo52FrLQBdSG41U9O7fPMUFPaEcU5OQYQGz09jrgOOSefuqUtE2ldIY+w WILrLTyQoXPGO9HSYtCsicSQNK4aHeIa3pubWzUjd9N0D3gsKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsTuL1o/SLm1FJOl71XyCNlNWtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg3ODQyNzEtMTRmMi0z YTU1LWFhM2QtZTg0YTI5M2Y2OGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2LfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM4NfDbDZLoiXfGxmMYN1E1yI2FgM1dkNw4s4JsFURvibygnN48MmoL Ho4sDQ+2WlptLSojxEaRk4BgJGIffkpCFpdM32K8Ya6RuioMTqAo4hftMn8GclJj I1QLTUzt9mIH+3Annqp16+CXCE4n2+iqKhWQiO6+PmfkuP/ed5/cGjxFjm6VdXne t0CNODgRVbRQF31MAiC5qqN/WcJ6XUo3yz2w66uGWwK+hmFIvRIR489OU5iAkDDl Iv5QVqNlX/GcRTBOODFND7bJVoEYQEHhxebirMgZXRqdkP1HjqhSBQ+Yamwc3eHN cOSo3kaD2aORt1uZ4UcLD/YXo/Dy+fQ= -----END CERTIFICATE-----Generated at Fri May 24 02:52:40 2024 by rpki-client on console-ams.rpki-client.org