$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa File: f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa (raw, json) Hash identifier: E8y6iluq0GM59Z4jMnjnLF3TqYZ1PepDqUa3VuwWjTE= Subject key identifier: 0C:73:C3:27:13:B0:53:32:9A:AF:BA:50:1D:2D:64:F9:2A:A5:4F:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553331529B1406342FA370680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 174.131.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:15:29:b1:40:63:42:fa:37:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=b31b135d-4ecd-4b9b-8782-d2b08d9ad941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:ec:38:e7:57:9d:3d:06:cd:d9:e3:83:3e: 95:a6:37:40:1a:10:d1:73:b9:c7:dd:37:07:88:96: 7f:19:c8:3e:6e:02:75:6d:3c:a3:db:65:7d:e4:ed: f5:50:47:fb:25:af:4a:f6:b0:0f:bd:c1:ef:a3:49: fb:97:8c:75:76:c8:33:ba:6a:12:cf:bd:c1:cc:fb: e4:e8:5d:20:74:c7:8f:c9:79:be:f7:f2:1b:8d:ab: cd:a1:83:6b:c3:a7:c2:e0:79:cd:4e:2d:b0:f8:63: 4e:bc:33:00:db:15:bb:61:ad:0a:75:46:73:83:1b: bc:2d:a4:1b:e4:27:f1:a5:77:33:43:d0:65:ec:72: 7b:46:e8:47:da:c1:34:54:c8:c0:c2:ee:57:5a:02: 72:b6:51:44:9c:0c:e5:7d:b8:02:c2:93:97:04:2e: 9c:5d:10:5a:46:b6:9f:3a:dd:34:bf:66:ef:e8:9c: ec:a8:20:15:b1:23:6b:e7:9d:64:42:3c:b9:37:9e: 49:e9:22:07:8a:ae:3f:e9:93:42:70:42:62:ca:c4: 7b:a5:d2:ca:29:3e:f6:a3:38:97:c0:bb:77:91:f6: 6f:e0:25:c3:d0:fc:c9:78:32:3e:97:7d:6e:c1:83: a8:ab:d7:2d:ea:bf:4d:2b:a5:14:48:7a:56:e6:d9: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:C3:27:13:B0:53:32:9A:AF:BA:50:1D:2D:64:F9:2A:A5:4F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:47:c0:09:36:5e:50:fb:d9:ba:eb:f7:d5:fd:4a:0c:79:43: 24:06:4e:55:18:fc:26:b8:c2:6e:48:37:55:63:a5:50:19:82: 02:98:91:72:8e:d1:77:12:35:f8:86:63:ff:7f:a5:81:4a:ec: cb:dd:ea:91:ee:46:cb:01:cd:fa:d7:01:10:2d:d7:86:1d:f0: 16:11:1b:40:62:46:08:97:70:04:aa:09:e1:f6:3f:6c:e5:c9: 32:8d:c2:59:79:20:48:3b:33:4b:b4:39:c7:45:83:b9:72:da: c0:b8:c3:8b:1c:b4:0d:a8:cc:df:f5:9d:b0:43:c4:29:c8:a0: 7f:f8:c8:2d:db:20:21:c7:88:7c:fd:8d:10:5d:92:8a:d0:35: ba:54:96:9c:0f:5a:06:38:e7:03:c9:22:5c:01:d9:a0:6b:26: 0b:bc:69:e1:17:be:14:5e:b9:2c:86:3a:47:2c:ab:7e:a7:cd: 21:55:b3:bd:fb:48:cb:2f:09:79:b1:95:97:6f:43:a8:a4:f9: ff:f0:d2:23:dc:24:e6:a0:b2:93:33:d3:43:78:a9:fc:b2:d5: 86:4a:c8:33:12:c2:9e:20:57:37:92:b0:c6:51:61:38:a5:99: 3f:fb:7b:0b:d9:23:b0:c2:f7:cb:46:46:b9:9f:4d:5a:85:a8: 7d:d3:d6:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxUpsUBjQvo3BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YjMxYjEzNWQtNGVjZC00YjliLTg3ODItZDJiMDhkOWFkOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFjsOOdXnT0Gzdnjgz6VpjdAGhDRc7nH3TcH iJZ/Gcg+bgJ1bTyj22V95O31UEf7Ja9K9rAPvcHvo0n7l4x1dsgzumoSz73BzPvk 6F0gdMePyXm+9/IbjavNoYNrw6fC4HnNTi2w+GNOvDMA2xW7Ya0KdUZzgxu8LaQb 5CfxpXczQ9Bl7HJ7RuhH2sE0VMjAwu5XWgJytlFEnAzlfbgCwpOXBC6cXRBaRraf Ot00v2bv6JzsqCAVsSNr551kQjy5N55J6SIHiq4/6ZNCcEJiysR7pdLKKT72oziX wLt3kfZv4CXD0PzJeDI+l31uwYOoq9ct6r9NK6UUSHpW5tlGAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxzwycTsFMymq+6UB0tZPkqpU93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM2YzgyZDgtZTNmMi0z MDIzLTg1YmEtOGQ0YTBlOWEwNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9HwAk2XlD72brr99X9Sgx5QyQGTlUY/Ca4wm5IN1VjpVAZggKYkXKO 0XcSNfiGY/9/pYFK7Mvd6pHuRssBzfrXARAt14Yd8BYRG0BiRgiXcASqCeH2P2zl yTKNwll5IEg7M0u0OcdFg7ly2sC4w4sctA2ozN/1nbBDxCnIoH/4yC3bICHHiHz9 jRBdkorQNbpUlpwPWgY45wPJIlwB2aBrJgu8aeEXvhReuSyGOkcsq36nzSFVs737 SMsvCXmxlZdvQ6ik+f/w0iPcJOagspMz00N4qfyy1YZKyDMSwp4gVzeSsMZRYTil mT/7ewvZI7DC98tGRrmfTVqFqH3T1oo= -----END CERTIFICATE-----Generated at Sat May 18 01:40:43 2024 by rpki-client on console-fra.rpki-client.org