$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61a42dda-84bf-3277-ad48-3b5092bb0c18.roa File: 61a42dda-84bf-3277-ad48-3b5092bb0c18.roa (raw, json) Hash identifier: FhtCLklmmrfQA7B7RqZs/wbYKAk1cUUPrsh0dQ8Fz68= Subject key identifier: 13:C0:BF:1D:57:66:7F:14:8F:C1:46:C5:29:B6:9F:51:76:1C:12:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332ED6B2D8A27D7BA7E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61a42dda-84bf-3277-ad48-3b5092bb0c18.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2e:d6:b2:d8:a2:7d:7b:a7:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=34f7dcb2-ce0b-4f47-96dc-8aa1a67e8c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:53:03:45:99:52:90:07:60:dc:ec:83:10: d2:83:bb:23:13:a0:f1:8e:2b:d7:bf:f2:d0:5d:92: 06:22:91:ce:da:11:76:5b:e5:1a:41:02:7f:c3:c7: 02:64:d5:24:79:44:7a:3a:6e:3a:60:47:fc:d9:8f: 54:6c:03:77:e5:4a:6c:fb:72:dd:a3:7d:73:1a:a5: 26:46:b1:ec:a7:18:03:29:aa:ea:fb:e1:4b:6f:07: 68:2f:3c:ae:67:a3:1f:97:4b:72:2f:90:6f:6e:20: 88:19:68:1c:1a:e9:66:eb:29:7a:43:70:26:5f:a9: 91:2e:67:c7:32:96:79:d3:f0:63:c8:99:7a:09:12: 69:c5:d2:c9:fe:37:01:e2:8f:97:b0:2e:52:1d:26: a1:fd:5b:7b:17:e3:32:12:bd:9c:3a:33:a3:73:93: 66:3d:06:41:ac:86:de:69:f0:d3:85:98:62:3e:96: a1:18:30:1e:b6:c0:77:b6:a4:61:62:f1:46:da:72: d6:84:01:33:0e:ee:e0:96:90:c2:71:48:d8:84:9b: a2:4d:09:ec:00:4b:a6:3b:23:b7:2e:0f:72:8b:07: d1:f6:aa:bf:85:77:db:07:63:41:a1:a2:fc:27:59: db:bd:78:cf:20:8e:c1:be:b4:74:48:0c:f8:97:56: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C0:BF:1D:57:66:7F:14:8F:C1:46:C5:29:B6:9F:51:76:1C:12:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61a42dda-84bf-3277-ad48-3b5092bb0c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7e:b4:93:60:a4:1b:91:03:32:66:4f:fe:9a:59:61:a4:ad: d6:a5:8c:68:45:5e:49:8b:88:17:ba:bb:3e:23:06:c0:7a:15: 0d:32:bc:0b:a8:b5:9c:2a:ec:d8:ef:7a:36:3a:1f:88:ee:52: 98:64:50:b9:f7:65:c8:1e:53:17:45:a2:fa:d7:02:0d:5d:53: ff:ef:a3:9f:76:9f:1a:3a:da:f4:56:33:8c:92:a7:82:d6:5a: ef:21:d8:60:dd:cd:14:26:87:ab:73:54:c0:28:a0:cd:cd:9d: ab:8a:00:9c:f4:d9:c4:10:db:33:4b:79:dd:c9:ed:8d:0a:e4: c8:7c:6a:97:1b:fb:19:c6:55:ab:00:d4:0d:8a:d5:4c:73:96: fb:0c:a1:31:2e:87:4b:6c:b9:39:91:36:40:c2:d8:c5:44:ba: 59:0c:fb:a4:2f:b7:91:94:b0:27:97:50:cc:46:d3:69:7f:b7: b5:6f:b8:43:23:2f:55:39:4b:10:77:25:bf:71:68:fe:53:57: c8:0d:11:63:0f:8e:2f:16:0a:01:d4:7f:3f:61:59:da:35:7b: 3d:48:03:36:02:ff:c7:34:5a:c4:36:eb:c2:32:45:68:ee:61: 7e:aa:38:3e:30:8c:59:74:bf:48:47:15:21:43:b7:d7:c8:c7: 31:0d:0b:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy7WstiifXun4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MzRmN2RjYjItY2UwYi00ZjQ3LTk2ZGMtOGFhMWE2N2U4YzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVpTA0WZUpAHYNzsgxDSg7sjE6DxjivXv/LQ XZIGIpHO2hF2W+UaQQJ/w8cCZNUkeUR6Om46YEf82Y9UbAN35Ups+3Ldo31zGqUm RrHspxgDKarq++FLbwdoLzyuZ6Mfl0tyL5BvbiCIGWgcGulm6yl6Q3AmX6mRLmfH MpZ50/BjyJl6CRJpxdLJ/jcB4o+XsC5SHSah/Vt7F+MyEr2cOjOjc5NmPQZBrIbe afDThZhiPpahGDAetsB3tqRhYvFG2nLWhAEzDu7glpDCcUjYhJuiTQnsAEumOyO3 Lg9yiwfR9qq/hXfbB2NBoaL8J1nbvXjPII7BvrR0SAz4l1bcLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPAvx1XZn8Uj8FGxSm2n1F2HBItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjFhNDJkZGEtODRiZi0z Mjc3LWFkNDgtM2I1MDkyYmIwYzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGN+tJNgpBuRAzJmT/6aWWGkrdaljGhFXkmLiBe6uz4jBsB6FQ0y vAuotZwq7NjvejY6H4juUphkULn3ZcgeUxdFovrXAg1dU//vo592nxo62vRWM4yS p4LWWu8h2GDdzRQmh6tzVMAooM3NnauKAJz02cQQ2zNLed3J7Y0K5Mh8apcb+xnG VasA1A2K1UxzlvsMoTEuh0tsuTmRNkDC2MVEulkM+6Qvt5GUsCeXUMxG02l/t7Vv uEMjL1U5SxB3Jb9xaP5TV8gNEWMPji8WCgHUfz9hWdo1ez1IAzYC/8c0WsQ268Iy RWjuYX6qOD4wjFl0v0hHFSFDt9fIxzENC0w= -----END CERTIFICATE-----Generated at Thu May 23 02:54:04 2024 by rpki-client on console-ams.rpki-client.org