$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa File: f156dafc-4e5a-3bd6-9bea-783cddf20268.roa (raw, json) Hash identifier: zdL2xEga+iA3sZVA0qllp9I75v8/p773F5yGEmSgOPI= Subject key identifier: AE:A8:8E:5F:C3:C9:B8:DA:5D:52:8B:4F:FC:CC:FC:9F:C5:C5:66:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553333E834EAC95A781550B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 29877 IP address blocks: 66.163.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:3e:83:4e:ac:95:a7:81:55:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=5c77f0c4-e6e5-42ed-824b-77b6d7d47a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:e5:96:07:4c:aa:f3:6a:0a:5e:b7:d7:35: 3f:bf:7d:72:29:d3:17:03:37:ee:81:0e:4d:ae:0a: 85:d7:b4:e9:16:d7:b4:62:d8:a2:0f:4c:10:a9:02: e5:32:0b:7d:6d:bf:d5:0c:ca:a7:00:48:f7:64:15: 36:e7:87:b3:5c:61:69:e8:6e:73:bf:5a:7c:ea:e2: e5:a3:85:01:06:f7:eb:81:9b:37:7b:9d:0c:a6:cf: 09:77:41:10:d9:76:8d:2e:d1:c9:e5:b7:7e:5a:73: 0f:6b:88:8a:64:76:65:26:91:de:4b:36:0f:8c:20: 26:cb:5a:98:f3:43:74:6b:87:bb:cd:a6:7e:50:7e: 7a:94:d9:ce:e2:fa:c6:76:62:52:99:a5:49:49:d4: 28:ef:aa:da:db:3d:8e:14:c8:88:c0:fc:8d:c3:46: a3:28:66:d8:3c:c8:0a:1b:d2:19:01:68:b5:dc:79: 66:09:0c:9e:04:39:dc:0e:49:71:db:e2:6c:63:ee: 41:7d:d9:e5:5f:ca:7d:66:7f:87:84:c1:2b:b6:84: 63:38:77:52:b8:27:85:25:6e:05:c4:c4:39:bc:8b: 27:49:cd:c8:a4:2d:42:84:55:f5:65:3e:05:af:2e: 19:bd:45:11:33:9c:52:90:a8:36:e1:72:81:a1:8a: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A8:8E:5F:C3:C9:B8:DA:5D:52:8B:4F:FC:CC:FC:9F:C5:C5:66:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.163.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bf:98:f2:00:74:49:52:88:84:bd:c8:8f:a9:74:87:70:4b: e3:9f:70:34:70:8d:b4:79:e2:0f:80:1f:a5:94:fc:04:3f:fb: ab:12:2b:0e:f7:3d:45:ee:65:7c:7a:5d:7e:21:50:12:c3:40: bb:d5:31:9e:29:9b:d9:fb:0c:f5:b6:55:18:b4:a5:34:de:80: ba:33:3b:16:b9:63:30:4d:9c:96:f3:7b:19:41:dc:bd:ad:7c: 55:6d:ba:f3:46:9b:08:14:a0:66:31:d9:34:a3:10:4c:61:6d: 66:6f:86:dc:3e:f9:3f:9f:b6:60:fb:6e:47:7e:62:30:b3:2d: 72:9e:50:85:13:3a:8b:24:f2:86:e5:11:2d:8a:2d:fc:16:f7: 5c:3d:b4:1c:b5:b3:db:e9:43:79:cd:7c:d5:51:8f:12:33:be: 4e:22:49:a8:60:34:ef:89:ca:f7:68:bf:0a:5f:a6:be:31:c0: 4b:1d:0a:76:61:b6:5c:2d:3c:52:88:09:18:c9:fb:92:10:ac: cc:d7:25:dc:8b:4c:7d:a3:14:0d:1a:11:d7:da:56:09:05:c4: 45:87:67:ba:40:52:94:f8:c2:7d:eb:df:fb:fc:31:83:bf:77: 10:40:f6:46:73:3a:bc:02:fc:9c:89:fb:ac:76:b5:bc:a5:31: cf:0c:b1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMz6DTqyVp4FVCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NWM3N2YwYzQtZTZlNS00MmVkLTgyNGItNzdiNmQ3ZDQ3YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLvllgdMqvNqCl631zU/v31yKdMXAzfugQ5N rgqF17TpFte0YtiiD0wQqQLlMgt9bb/VDMqnAEj3ZBU254ezXGFp6G5zv1p86uLl o4UBBvfrgZs3e50Mps8Jd0EQ2XaNLtHJ5bd+WnMPa4iKZHZlJpHeSzYPjCAmy1qY 80N0a4e7zaZ+UH56lNnO4vrGdmJSmaVJSdQo76ra2z2OFMiIwPyNw0ajKGbYPMgK G9IZAWi13HlmCQyeBDncDklx2+JsY+5BfdnlX8p9Zn+HhMErtoRjOHdSuCeFJW4F xMQ5vIsnSc3IpC1ChFX1ZT4Fry4ZvUURM5xSkKg24XKBoYq9HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6ojl/DybjaXVKLT/zM/J/FxWaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjE1NmRhZmMtNGU1YS0z YmQ2LTliZWEtNzgzY2RkZjIwMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq/mPIAdElSiIS9yI+pdIdwS+OfcDRwjbR54g+AH6WU/AQ/+6sSKw73 PUXuZXx6XX4hUBLDQLvVMZ4pm9n7DPW2VRi0pTTegLozOxa5YzBNnJbzexlB3L2t fFVtuvNGmwgUoGYx2TSjEExhbWZvhtw++T+ftmD7bkd+YjCzLXKeUIUTOosk8obl ES2KLfwW91w9tBy1s9vpQ3nNfNVRjxIzvk4iSahgNO+Jyvdovwpfpr4xwEsdCnZh tlwtPFKICRjJ+5IQrMzXJdyLTH2jFA0aEdfaVgkFxEWHZ7pAUpT4wn3r3/v8MYO/ dxBA9kZzOrwC/JyJ+6x2tbylMc8MsQ8= -----END CERTIFICATE-----Generated at Thu May 23 19:42:37 2024 by rpki-client on console-fra.rpki-client.org