$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa File: eec145f0-2242-3162-9b24-4c63e4453493.roa (raw, json) Hash identifier: v9RkXdq8JJyfdW4Uz1eGrLfhDYbNCinMBz4S2I69zdM= Subject key identifier: FE:78:EF:24:6D:AA:2E:EF:6A:12:47:22:1D:5C:04:2A:62:35:14:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332D5326DC8799A5C2FB740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 40.128.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:d5:32:6d:c8:79:9a:5c:2f:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=98c44c66-ec92-4c13-8bfa-e44a29132afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:5c:6e:ba:6b:5d:3d:28:3e:7c:b2:73:7a: 25:c7:40:71:a6:09:83:d7:1f:bb:29:1d:9a:db:3b: c9:16:b8:a1:5b:bf:fd:fb:88:80:c7:ad:8e:be:73: f9:a0:26:d5:2d:cb:0a:89:fb:cb:4a:d1:15:c1:bc: d4:94:1f:61:88:1b:52:c9:2f:b0:f3:24:31:85:38: 36:cb:0c:ba:12:18:c5:67:67:02:75:ba:1d:8e:73: 3a:94:75:32:83:50:8b:6b:14:7e:5a:fd:9d:da:6b: 50:af:b5:4e:15:e2:92:3b:64:49:35:3f:68:30:a1: 77:54:03:e6:ac:34:ba:31:62:43:3b:f6:e2:bf:8d: b7:d9:50:b4:d7:06:04:9b:61:06:ea:e9:a4:32:28: 54:de:a0:40:01:46:60:91:ab:25:f6:3b:b7:d5:e7: ca:e6:25:da:74:27:ed:c3:df:0f:55:a2:1f:a1:71: 52:7f:46:60:89:78:34:f0:48:13:3b:ad:51:92:d5: 71:48:93:7e:09:ca:40:c9:4d:24:74:48:b3:62:87: c1:5f:01:33:96:68:35:a8:d5:6a:d4:5d:0f:09:3d: 74:ef:2b:d1:d0:71:64:6a:ff:f6:45:98:0c:19:98: cd:24:04:33:0d:fb:f7:2f:8d:c7:16:41:cc:e4:c2: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:78:EF:24:6D:AA:2E:EF:6A:12:47:22:1D:5C:04:2A:62:35:14:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e3:e5:b9:89:af:da:db:3b:da:4f:28:f0:0d:b0:31:80:3b: 1b:ed:81:a5:a1:9d:95:b0:bd:ae:4b:64:cf:26:b7:e8:a0:df: 6d:77:6e:65:9f:2d:34:28:5e:72:63:e3:98:6e:b1:87:b0:a5: 65:e0:49:b8:ee:62:19:63:78:e0:3f:69:f7:2a:b4:b7:7f:1d: 70:99:f0:53:f2:9a:23:91:be:3e:69:a0:0b:3a:9b:72:d1:89: 87:28:67:21:59:05:87:5d:95:d4:49:74:ef:2a:7f:39:e6:84: 37:a6:04:ad:84:a5:23:3b:a1:57:94:8d:ea:66:d2:8c:2f:b6: 57:24:1c:9a:0d:47:e5:c3:a2:c6:2f:84:07:2e:8a:e0:be:85: 14:78:c2:70:58:c0:b5:1d:d2:b1:f3:a6:67:43:5a:10:25:e1: 6a:46:11:f5:26:82:65:b4:80:9e:71:af:55:f4:05:e1:fb:9b: bb:5a:75:02:45:c9:32:61:57:f1:8d:84:42:c8:f2:69:b0:67: a2:c1:e2:bb:96:bf:cb:3f:5c:a0:5b:44:f0:6e:1c:df:89:3e: 97:ab:8c:92:91:63:a7:03:e8:84:db:89:c2:ef:4f:34:40:d8: 37:d7:77:8f:9d:5e:5b:af:5e:65:fb:83:f6:a8:5b:58:6a:be: 44:6f:40:9d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVTMtUybch5mlwvt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OThjNDRjNjYtZWM5Mi00YzEzLThiZmEtZTQ0YTI5MTMyYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3lcbrprXT0oPnyyc3olx0BxpgmD1x+7KR2a 2zvJFrihW7/9+4iAx62OvnP5oCbVLcsKifvLStEVwbzUlB9hiBtSyS+w8yQxhTg2 ywy6EhjFZ2cCdbodjnM6lHUyg1CLaxR+Wv2d2mtQr7VOFeKSO2RJNT9oMKF3VAPm rDS6MWJDO/biv4232VC01wYEm2EG6umkMihU3qBAAUZgkasl9ju31efK5iXadCft w98PVaIfoXFSf0ZgiXg08EgTO61RktVxSJN+CcpAyU0kdEizYofBXwEzlmg1qNVq 1F0PCT107yvR0HFkav/2RZgMGZjNJAQzDfv3L43HFkHM5MIKfwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP547yRtqi7vahJHIh1cBCpiNRQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWVjMTQ1ZjAtMjI0Mi0z MTYyLTliMjQtNGM2M2U0NDUzNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCKIAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANuPluYmv2ts72k8o8A2wMYA7G+2BpaGdlbC9rktkzya36KDfbXduZZ8t NChecmPjmG6xh7ClZeBJuO5iGWN44D9p9yq0t38dcJnwU/KaI5G+PmmgCzqbctGJ hyhnIVkFh12V1El07yp/OeaEN6YErYSlIzuhV5SN6mbSjC+2VyQcmg1H5cOixi+E By6K4L6FFHjCcFjAtR3SsfOmZ0NaECXhakYR9SaCZbSAnnGvVfQF4fubu1p1AkXJ MmFX8Y2EQsjyabBnosHiu5a/yz9coFtE8G4c34k+l6uMkpFjpwPohNuJwu9PNEDY N9d3j51eW69eZfuD9qhbWGq+RG9AnQ== -----END CERTIFICATE-----Generated at Fri May 24 01:54:01 2024 by rpki-client on console-fra.rpki-client.org