$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb13315-34e8-3f3d-b32a-942384386eb3.roa File: dfb13315-34e8-3f3d-b32a-942384386eb3.roa (raw, json) Hash identifier: vmHpx6HMFyl/y/SrJpIAAFDGZ5kldBmYOxqivKDYuj4= Subject key identifier: 02:DB:C3:37:D1:CC:70:0A:F3:9D:3F:F9:BB:D1:20:C1:AA:02:F3:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D6FF3CF9632AAB0E0500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb13315-34e8-3f3d-b32a-942384386eb3.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.139.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d6:ff:3c:f9:63:2a:ab:0e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=4a5fefd6-dcdc-4196-bc13-2f18d613772d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:25:ba:17:54:53:22:c8:e6:17:60:44:f5: ae:85:47:b0:ff:9a:cc:73:67:c5:41:d5:f1:67:56: 1a:36:e2:2c:b5:7f:10:6a:8a:03:8f:75:39:c9:a5: 76:6b:81:9e:3f:5d:1c:d1:72:19:51:dd:90:9d:2e: 4e:2f:f3:16:68:51:9f:79:09:59:9c:98:d3:e2:f6: 73:8d:26:90:22:b9:52:61:ac:e8:69:b4:78:3c:5f: 6c:7c:ff:29:69:a1:5d:27:c4:a4:81:66:bb:b4:2a: 45:ae:5f:ef:fe:6e:1a:b4:48:26:6b:42:8b:fb:5d: b2:2e:89:61:69:d3:4f:6e:4b:5c:37:dc:0f:ed:7e: e5:5b:51:d5:7b:66:fa:11:d3:23:06:25:ec:05:47: d0:a2:9f:23:f3:73:ac:1e:9f:d7:b1:b5:1a:9d:83: 23:45:ae:41:46:95:8f:84:7a:a7:a2:e9:51:59:27: 38:8c:e0:4f:05:ff:a1:3a:19:cc:86:28:a3:ec:2b: 8c:36:49:0b:5a:cb:84:bb:0c:ea:11:e1:97:e5:e3: 07:37:06:18:38:0d:bf:f3:e7:d8:76:8c:9c:23:85: c3:9c:83:90:71:7a:11:e3:d2:a1:b6:40:8c:86:08: f5:49:5e:07:3f:54:b4:6c:29:c5:00:b4:38:bf:65: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:C3:37:D1:CC:70:0A:F3:9D:3F:F9:BB:D1:20:C1:AA:02:F3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfb13315-34e8-3f3d-b32a-942384386eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.139.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0f:f1:fb:a1:7c:d7:da:50:d9:2b:4f:23:87:9e:1e:af:b5: 04:23:a9:e0:e8:13:29:4a:c8:aa:e0:18:21:99:d6:be:11:5e: 65:a0:3f:76:ad:e7:2a:f6:de:53:bf:1b:5a:31:9a:b0:e6:c0: ea:eb:fa:c6:1d:7f:c0:37:84:f9:fe:23:a9:78:04:84:18:a2: 6d:1c:36:48:1d:52:0f:b9:74:c7:b0:34:0d:ce:63:af:e2:b2: 77:f8:2e:55:b2:ba:0f:dc:8b:d1:d7:14:d1:dd:00:90:2e:42: 5f:77:e9:01:74:90:c0:19:02:70:6e:64:38:c1:a5:d5:c4:98: 65:cf:46:40:16:6a:1e:58:4d:1a:70:66:3a:ef:fe:b2:18:0f: 15:2d:53:77:f0:6c:42:d8:ea:3b:75:36:c7:fa:1c:ca:e8:69: 24:f1:16:e7:fb:28:8e:76:5b:ee:0f:40:ed:07:66:5a:b8:74: 6c:b9:aa:0a:94:91:d1:d8:28:b3:b9:15:59:9e:89:69:c3:94: 41:f0:12:7f:65:04:34:e2:91:22:8a:0d:01:f4:44:e1:d6:f0: c9:50:3f:63:10:72:47:17:e9:0a:9c:71:18:6f:60:a6:85:0f: 60:e3:6f:4c:8a:03:20:11:06:13:3f:93:d1:3f:e2:64:15:ce: 2f:a4:dd:d2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVTMtb/PPljKqsOBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NGE1ZmVmZDYtZGNkYy00MTk2LWJjMTMtMmYxOGQ2MTM3NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquUluhdUUyLI5hdgRPWuhUew/5rMc2fFQdXx Z1YaNuIstX8QaooDj3U5yaV2a4GeP10c0XIZUd2QnS5OL/MWaFGfeQlZnJjT4vZz jSaQIrlSYazoabR4PF9sfP8paaFdJ8SkgWa7tCpFrl/v/m4atEgma0KL+12yLolh adNPbktcN9wP7X7lW1HVe2b6EdMjBiXsBUfQop8j83OsHp/XsbUanYMjRa5BRpWP hHqnoulRWSc4jOBPBf+hOhnMhiij7CuMNkkLWsuEuwzqEeGX5eMHNwYYOA2/8+fY doycI4XDnIOQcXoR49KhtkCMhgj1SV4HP1S0bCnFALQ4v2XRgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFALbwzfRzHAK850/+bvRIMGqAvMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZiMTMzMTUtMzRlOC0z ZjNkLWIzMmEtOTQyMzg0Mzg2ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKIswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACQ/x+6F819pQ2StPI4eeHq+1BCOp4OgTKUrIquAYIZnWvhFeZaA/dq3n KvbeU78bWjGasObA6uv6xh1/wDeE+f4jqXgEhBiibRw2SB1SD7l0x7A0Dc5jr+Ky d/guVbK6D9yL0dcU0d0AkC5CX3fpAXSQwBkCcG5kOMGl1cSYZc9GQBZqHlhNGnBm Ou/+shgPFS1Td/BsQtjqO3U2x/ocyuhpJPEW5/sojnZb7g9A7QdmWrh0bLmqCpSR 0dgos7kVWZ6JacOUQfASf2UENOKRIooNAfRE4dbwyVA/YxByRxfpCpxxGG9gpoUP YONvTIoDIBEGEz+T0T/iZBXOL6Td0g== -----END CERTIFICATE-----Generated at Thu May 23 15:53:56 2024 by rpki-client on console-fra.rpki-client.org