$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa File: e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa (raw, json) Hash identifier: IXSz3VmQtCS+Ki4jGWXiPERyBAwMdvibObQNJ5+PrWk= Subject key identifier: 75:85:5E:E5:B7:96:55:29:99:07:71:A4:8B:4B:9A:CB:81:3C:C7:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332DE759F705CD70F01FB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 64.89.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:de:75:9f:70:5c:d7:0f:01:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=9efdc66d-429a-4f47-8736-59f3b7ac3201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:6f:8c:55:40:6d:f1:ab:3e:73:5f:99:9d: bd:32:62:12:aa:7f:0e:ef:3e:0a:30:67:a1:99:94: 1c:9d:16:e4:8f:09:b7:c3:51:be:15:47:d0:ad:10: 3a:08:3b:55:9f:dc:de:92:ee:a9:2f:44:c1:ac:e5: ff:81:c5:ab:82:ba:0c:5d:73:b7:7e:75:c1:bb:97: 81:bd:6e:c5:74:79:e1:fb:49:85:d1:02:0d:5e:9b: 24:a3:bf:80:29:d1:c4:d7:dd:5f:08:43:1a:bb:84: fb:78:02:ca:8e:c5:25:a5:a6:5f:42:ae:8d:2b:53: 5c:1b:1c:93:f8:91:16:81:f1:fb:49:de:60:db:0f: 2a:27:30:2a:34:5b:f0:4d:42:6b:fb:26:87:ad:49: 18:d5:78:ff:f2:d9:ad:e4:fe:22:47:20:03:0e:32: 81:6a:0b:38:53:f1:23:f1:b4:5e:7d:74:ed:71:56: a8:32:0a:e4:34:2a:53:e0:0a:7f:fb:36:c6:b5:d0: b6:90:98:89:94:ea:aa:ab:bb:36:b8:d3:e5:ff:b8: e1:62:f2:53:d3:0b:0b:f2:94:73:bf:e1:76:68:ac: e9:9c:ea:c2:24:25:f5:7a:04:46:dd:58:09:2f:28: 35:25:7c:37:3a:91:bf:e2:ea:7c:01:c5:44:10:b9: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:85:5E:E5:B7:96:55:29:99:07:71:A4:8B:4B:9A:CB:81:3C:C7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.89.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:39:a9:b3:e3:9f:f4:d0:8a:c6:b7:6d:e2:a7:52:71:c3:8b: 5c:23:2e:d7:cd:d3:a6:a5:a3:2a:b1:4d:22:a1:15:6c:76:c5: ee:a7:f4:57:75:2c:bb:13:0d:68:e0:22:de:ce:9c:66:a8:3d: 1b:ae:c5:2c:2d:43:d8:57:14:a4:6e:19:ce:5b:c4:00:a9:83: b8:ee:3b:2e:17:3c:92:88:de:b5:dd:95:8e:52:5f:5d:b9:be: 6b:d4:6f:6b:b6:de:6d:85:c3:72:b2:52:7d:b9:e7:4e:f6:46: 86:61:5b:db:18:ec:af:63:61:c1:ce:cc:01:07:9e:de:72:03: 90:bb:38:ed:2e:f5:06:e9:25:d3:e2:ac:a4:b2:b0:10:0a:20: b2:4c:a6:cb:5e:c3:d1:6b:c4:6a:13:8e:fa:37:16:45:ac:05: 2d:30:9f:cb:e9:9b:54:82:76:86:8d:39:ad:3c:87:d3:59:21: fb:15:48:94:da:07:c5:a2:b4:aa:dc:52:97:a9:54:14:47:6d: 1e:a6:55:90:bc:e1:c9:70:d8:e0:ff:1b:67:54:87:14:89:b1: 89:e7:07:92:e5:93:b8:66:bd:4a:ae:df:fd:8e:d1:22:b0:4f: d3:ba:4e:c9:9f:0d:de:2a:97:5a:d6:14:93:3f:4f:04:21:c5: 47:19:b8:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMt51n3Bc1w8B+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OWVmZGM2NmQtNDI5YS00ZjQ3LTg3MzYtNTlmM2I3YWMzMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22JvjFVAbfGrPnNfmZ29MmISqn8O7z4KMGeh mZQcnRbkjwm3w1G+FUfQrRA6CDtVn9zeku6pL0TBrOX/gcWrgroMXXO3fnXBu5eB vW7FdHnh+0mF0QINXpsko7+AKdHE191fCEMau4T7eALKjsUlpaZfQq6NK1NcGxyT +JEWgfH7Sd5g2w8qJzAqNFvwTUJr+yaHrUkY1Xj/8tmt5P4iRyADDjKBags4U/Ej 8bRefXTtcVaoMgrkNCpT4Ap/+zbGtdC2kJiJlOqqq7s2uNPl/7jhYvJT0wsL8pRz v+F2aKzpnOrCJCX1egRG3VgJLyg1JXw3OpG/4up8AcVEELn/hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWFXuW3llUpmQdxpItLmsuBPMffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTlmZTIxOTAtMWJiYy0z MTU4LWFjMzMtM2EyOWJhNDMyZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg5qbPjn/TQisa3beKnUnHDi1wjLtfN06aloyqxTSKhFWx2xe6n9Fd1 LLsTDWjgIt7OnGaoPRuuxSwtQ9hXFKRuGc5bxACpg7juOy4XPJKI3rXdlY5SX125 vmvUb2u23m2Fw3KyUn255072RoZhW9sY7K9jYcHOzAEHnt5yA5C7OO0u9QbpJdPi rKSysBAKILJMpstew9FrxGoTjvo3FkWsBS0wn8vpm1SCdoaNOa08h9NZIfsVSJTa B8WitKrcUpepVBRHbR6mVZC84clw2OD/G2dUhxSJsYnnB5Llk7hmvUqu3/2O0SKw T9O6TsmfDd4ql1rWFJM/TwQhxUcZuHE= -----END CERTIFICATE-----Generated at Thu May 23 20:12:12 2024 by rpki-client on console-ams.rpki-client.org