$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa File: 3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa (raw, json) Hash identifier: M9Z45Z+Pgswu8EpZHErMMpiik7B7BPoPLE/MJy+tspA= Subject key identifier: FA:2D:26:8B:0E:34:EA:85:52:C7:96:7B:83:38:1C:64:07:FE:5C:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845979885B130A33BFA3496EE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa Signing time: Fri 19 Apr 2024 01:00:25 +0000 ROA not before: Fri 19 Apr 2024 01:00:25 +0000 ROA not after: Thu 18 Jul 2024 01:00:25 +0000 asID: 7029 IP address blocks: 2604:cb00:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:97:98:85:b1:30:a3:3b:fa:34:96:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 19 01:00:25 2024 GMT Not After : Jul 18 01:00:25 2024 GMT Subject: CN=a1dedd8f-c77a-4ba2-91d5-c1946596e439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:16:10:7f:0e:d3:5d:b4:12:40:50:8c:0a: c4:44:69:74:03:7b:11:59:ed:66:ae:58:64:f5:0d: cf:9b:42:cf:ec:ee:a3:95:10:48:08:b2:d3:9e:7d: 65:c4:8e:08:af:21:d8:7f:e7:93:ab:31:cf:16:0e: 9d:62:57:d2:c8:49:23:ad:db:cf:74:b8:58:60:21: 6b:94:5e:6d:60:0d:95:4a:bd:11:f3:9c:c8:93:42: 8d:5c:bd:82:f4:b4:26:fe:ac:bf:02:fb:8b:28:15: 10:db:fa:20:53:b8:0f:5c:b9:c7:9a:40:48:8b:a6: 27:d9:45:7b:71:3b:ae:6c:d0:65:e7:a1:5d:ef:a3: a0:80:27:da:f0:1d:95:0a:7f:8f:7e:3e:49:cd:c3: 8f:9e:69:f3:05:91:4d:fd:f0:40:26:79:0b:9e:16: f4:44:aa:e7:09:e8:48:b9:b7:06:bf:ab:fa:67:3d: fe:49:e8:64:17:db:01:8f:0f:0a:ee:02:4b:1d:2a: b5:e2:ec:1d:2d:78:ad:e3:ec:01:c0:ea:89:d9:fc: d7:60:16:e7:c8:0d:dd:89:68:3a:b9:12:66:86:de: 0c:4c:e2:8b:25:b8:7f:7c:62:ee:aa:18:4e:86:a9: c1:07:42:7d:9b:99:5b:90:af:4a:68:ce:65:8b:1f: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2D:26:8B:0E:34:EA:85:52:C7:96:7B:83:38:1C:64:07:FE:5C:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6a:ea:37:cb:cf:bb:90:9b:88:54:a5:a9:77:c5:99:10:26: ac:f5:20:66:27:c5:9f:68:1a:ce:40:91:bc:b3:0e:ff:5f:ab: b7:b1:a3:71:e5:53:6d:df:66:70:21:21:a5:c9:13:2c:8e:08: 82:83:12:b3:6c:c2:50:bd:9a:9d:7b:98:5e:5f:78:d0:d3:02: 46:b4:7c:0b:e4:3a:4a:a8:25:54:fc:c9:b7:c7:56:c9:87:94: 54:71:e4:af:b8:3e:76:6b:72:53:75:8b:a8:bb:f6:99:69:36: 9a:95:3b:cd:91:9c:c1:a4:fb:44:c3:2f:9f:ba:ba:9c:c3:21: 18:07:c6:e4:38:97:a6:04:60:20:b6:11:46:7c:e1:48:59:00: b5:80:71:66:af:d6:de:f6:68:06:5b:b4:36:88:40:21:de:88: 91:52:43:e5:71:9b:ee:7b:29:b0:07:9a:7d:e7:47:ea:1f:0e: cc:40:45:c2:fd:4c:77:23:13:e7:e0:a7:9b:61:3b:62:2e:50: bc:0d:cd:0a:0e:ee:be:40:b8:0d:e9:a5:07:b8:e4:86:29:1c: 02:c5:19:27:65:15:67:ad:9e:c6:3f:23:08:21:17:12:b2:1d: 83:57:d6:63:59:fc:14:11:e9:80:84:b0:3e:61:9c:79:16:ad: 18:c5:2f:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWXmIWxMKM7+jSW7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDQxOTAxMDAyNVoXDTI0MDcxODAxMDAyNVowLzEtMCsGA1UEAxMk YTFkZWRkOGYtYzc3YS00YmEyLTkxZDUtYzE5NDY1OTZlNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHkWEH8O0120EkBQjArERGl0A3sRWe1mrlhk 9Q3Pm0LP7O6jlRBICLLTnn1lxI4IryHYf+eTqzHPFg6dYlfSyEkjrdvPdLhYYCFr lF5tYA2VSr0R85zIk0KNXL2C9LQm/qy/AvuLKBUQ2/ogU7gPXLnHmkBIi6Yn2UV7 cTuubNBl56Fd76OggCfa8B2VCn+Pfj5JzcOPnmnzBZFN/fBAJnkLnhb0RKrnCehI ubcGv6v6Zz3+SehkF9sBjw8K7gJLHSq14uwdLXit4+wBwOqJ2fzXYBbnyA3diWg6 uRJmht4MTOKLJbh/fGLuqhhOhqnBB0J9m5lbkK9KaM5lix9MXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPotJosONOqFUseWe4M4HGQH/lxAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I3NWQ5YzEtNTUzZi0z MTliLWJhNGEtZjE1MzY4YmFjYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdq6jfLz7uQm4hUpal3xZkQJqz1IGYnxZ9oGs5AkbyzDv9fq7ex o3HlU23fZnAhIaXJEyyOCIKDErNswlC9mp17mF5feNDTAka0fAvkOkqoJVT8ybfH VsmHlFRx5K+4PnZrclN1i6i79plpNpqVO82RnMGk+0TDL5+6upzDIRgHxuQ4l6YE YCC2EUZ84UhZALWAcWav1t72aAZbtDaIQCHeiJFSQ+Vxm+57KbAHmn3nR+ofDsxA RcL9THcjE+fgp5thO2IuULwNzQoO7r5AuA3ppQe45IYpHALFGSdlFWetnsY/Iwgh FxKyHYNX1mNZ/BQR6YCEsD5hnHkWrRjFL+s= -----END CERTIFICATE-----Generated at Thu May 23 19:42:25 2024 by rpki-client on console-fra.rpki-client.org