$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fae10422-2ca6-3104-b62b-9af4e5f82190.roa File: fae10422-2ca6-3104-b62b-9af4e5f82190.roa (raw, json) Hash identifier: jSP232GZxw73Je6bHVsCWYQnJ2rMn4Air9dM8sZs1Sk= Subject key identifier: 48:EA:9C:1C:EB:DF:7D:63:67:2A:57:23:AC:D2:22:D8:FE:3D:11:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533307F385EC4F9927169D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fae10422-2ca6-3104-b62b-9af4e5f82190.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 139.55.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:07:f3:85:ec:4f:99:27:16:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=63e0b962-651b-4cd0-a733-4252edfd7618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:d9:0a:a8:1a:19:db:92:6b:18:9f:cf:28: e6:63:43:e0:f8:a1:97:bf:a3:73:f4:56:dd:da:2f: 25:01:b4:43:f7:34:f7:86:6f:6a:e2:4a:f2:5e:cd: 93:98:25:59:13:8c:98:71:29:1b:cb:b0:c2:45:66: b5:56:71:7e:aa:86:7f:fa:90:0d:30:5c:fd:fb:89: 83:34:b7:5a:4d:57:fe:d9:82:90:ec:60:64:11:78: b6:a6:ad:0a:f5:d7:5a:c2:48:2d:27:01:11:5b:86: 08:59:ae:6e:cc:32:d5:92:f1:79:cd:c4:f5:62:1a: d9:ff:91:84:ac:8d:f7:1d:b8:63:02:3b:3d:82:5f: 03:b2:d7:36:cd:05:31:d9:f3:4b:d7:75:b7:d3:3e: 63:bd:90:9b:71:d9:63:94:70:48:04:89:85:ce:ab: e3:92:8e:e2:0d:4f:a2:24:80:88:0c:10:10:f5:13: 64:77:24:95:90:a3:fe:f2:87:40:1c:7c:16:b6:dd: 5b:65:33:e9:08:9d:2b:c4:6a:09:a0:4e:3a:f3:bd: cd:08:0c:84:f5:2b:2c:ee:d7:4c:65:07:75:49:75: e5:c5:2a:16:e4:b3:58:ce:ac:2b:3a:db:6a:11:a8: 0c:e2:49:f8:4b:5d:6e:75:69:e5:d0:83:05:ae:e6: bf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:9C:1C:EB:DF:7D:63:67:2A:57:23:AC:D2:22:D8:FE:3D:11:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fae10422-2ca6-3104-b62b-9af4e5f82190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:97:b1:01:25:00:ec:6b:07:fa:0f:58:db:48:81:94:07:cb: d8:af:f6:4a:4f:70:19:0f:a4:1a:84:13:94:e8:e2:1a:22:ea: 44:dd:48:5b:15:d9:d1:a0:9c:23:6b:5b:0f:8f:77:f5:63:31: 6a:b1:6a:52:b0:80:7d:44:2d:62:9e:9f:d7:b4:42:d5:4a:b5: 78:85:6a:54:7d:03:70:ea:77:0f:5a:3c:4f:f8:31:09:ae:fb: 3e:87:4e:08:42:c7:d2:6b:5d:f1:9b:67:55:85:4e:5d:ad:7d: 27:91:ad:f3:44:53:b6:52:e2:fd:5e:85:26:3d:5b:73:20:52: 67:81:5d:05:ff:4d:4d:1f:53:02:32:ae:fd:16:f9:50:47:92: 6b:97:a3:92:97:fe:34:08:19:c8:c7:74:6b:0c:5d:c3:50:96: e8:bf:3e:06:45:4e:fc:5d:4c:ab:11:06:96:15:dc:4b:2c:07: 47:21:a9:13:fb:c2:69:29:b7:46:e3:a8:8f:bc:09:ef:00:a5: 98:35:dc:1f:68:d6:23:37:c2:d3:b6:11:13:95:fd:3a:80:e8: 00:a9:79:a1:3f:cc:a2:d9:ce:62:3d:30:85:48:87:e0:e4:3b: 9a:f9:21:df:da:91:8f:02:b8:92:70:21:d7:24:67:9b:76:9a: 2c:a4:30:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwfzhexPmScWnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NjNlMGI5NjItNjUxYi00Y2QwLWE3MzMtNDI1MmVkZmQ3NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZrZCqgaGduSaxifzyjmY0Pg+KGXv6Nz9Fbd 2i8lAbRD9zT3hm9q4kryXs2TmCVZE4yYcSkby7DCRWa1VnF+qoZ/+pANMFz9+4mD NLdaTVf+2YKQ7GBkEXi2pq0K9ddawkgtJwERW4YIWa5uzDLVkvF5zcT1YhrZ/5GE rI33HbhjAjs9gl8Dstc2zQUx2fNL13W30z5jvZCbcdljlHBIBImFzqvjko7iDU+i JICIDBAQ9RNkdySVkKP+8odAHHwWtt1bZTPpCJ0rxGoJoE46873NCAyE9Sss7tdM ZQd1SXXlxSoW5LNYzqwrOttqEagM4kn4S11udWnl0IMFrua/EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjqnBzr331jZypXI6zSItj+PRGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFlMTA0MjItMmNhNi0z MTA0LWI2MmItOWFmNGU1ZjgyMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+XsQElAOxrB/oPWNtIgZQHy9iv9kpPcBkPpBqEE5To4hoi6kTdSFsV 2dGgnCNrWw+Pd/VjMWqxalKwgH1ELWKen9e0QtVKtXiFalR9A3Dqdw9aPE/4MQmu +z6HTghCx9JrXfGbZ1WFTl2tfSeRrfNEU7ZS4v1ehSY9W3MgUmeBXQX/TU0fUwIy rv0W+VBHkmuXo5KX/jQIGcjHdGsMXcNQlui/PgZFTvxdTKsRBpYV3EssB0chqRP7 wmkpt0bjqI+8Ce8ApZg13B9o1iM3wtO2EROV/TqA6ACpeaE/zKLZzmI9MIVIh+Dk O5r5Id/akY8CuJJwIdckZ5t2miykMHI= -----END CERTIFICATE-----Generated at Thu May 23 13:45:08 2024 by rpki-client on console-fra.rpki-client.org