$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63aa370b-f5bf-3016-ba56-088f5753240b.roa File: 63aa370b-f5bf-3016-ba56-088f5753240b.roa (raw, json) Hash identifier: RzACUzfh0JpjKVawjJEyinLqCxylvl/RquyXJklscxw= Subject key identifier: 60:08:AC:AC:1D:CF:80:04:F3:FC:96:A1:F7:6C:17:28:43:CB:1C:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332C79B4A17CA09E459980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63aa370b-f5bf-3016-ba56-088f5753240b.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2c:79:b4:a1:7c:a0:9e:45:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=0316dcef-ef9a-4af3-bd01-76bc3cca907f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:0f:6a:43:73:1a:28:a8:e4:97:44:56:c1: 4d:c1:3f:42:c8:48:7c:6f:e3:08:03:b2:e4:cd:13: f0:f7:ef:63:51:12:1a:e7:ab:07:8e:3e:c3:e4:47: 2f:37:a5:19:fd:1c:e1:3b:0d:bd:e7:df:5b:8a:5c: 59:d3:f1:d1:f7:5f:3f:02:18:97:95:20:96:25:a3: 2f:4f:b1:6a:f5:bc:61:b6:b0:c7:1d:ca:98:8c:7b: ea:af:3b:93:ca:d1:a7:12:a9:d4:97:fb:55:6f:5a: 82:bf:a9:16:91:bc:53:bf:49:b3:fa:f3:12:53:fa: ee:be:38:f0:f0:9a:d4:5f:1e:97:0a:3a:6f:50:71: c0:be:d0:c7:88:5f:44:25:d3:b5:ab:66:30:4b:89: 29:b7:9a:b5:bc:a3:be:a6:f3:48:7d:8a:f3:6f:36: e4:df:66:b0:6d:99:10:1f:75:a5:56:9b:37:80:92: 93:9b:f8:6d:e1:81:14:bc:ab:91:0b:06:59:68:46: 63:ed:1e:c9:95:c3:97:eb:3a:af:80:ec:8b:cb:63: 5d:81:b6:73:0b:4d:24:1b:76:da:7f:5b:56:51:e3: 63:b7:9c:a8:ac:7b:08:bd:46:6e:0c:30:62:08:b2: 91:7c:a0:1d:fb:b1:13:1e:98:04:1d:54:d6:9b:58: fe:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:AC:AC:1D:CF:80:04:F3:FC:96:A1:F7:6C:17:28:43:CB:1C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63aa370b-f5bf-3016-ba56-088f5753240b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:eb:7c:c2:14:42:7b:f9:5f:9d:e1:f0:07:14:4a:30:6a:f6: 62:c7:10:a8:71:04:23:95:ed:01:a9:43:5f:a8:d4:4b:6d:f5: 2e:01:81:41:46:14:b6:02:33:4c:a4:fa:29:e0:c6:9e:20:06: e0:5c:2d:29:9d:e5:5a:69:e5:4f:80:4b:34:90:4f:0d:2b:0e: 1b:cf:05:23:60:e3:ea:2b:3e:a7:72:39:31:74:c1:23:eb:7a: 23:19:0f:dc:7b:97:95:f7:da:f9:a1:74:e9:ed:60:05:68:c8: e9:f4:da:0e:b1:2b:d0:0f:f6:b7:33:8f:e6:e1:b5:98:74:48: e0:93:76:81:2d:1a:14:20:1e:4a:d7:50:14:e3:72:a9:25:06: a0:98:b6:3d:0e:62:05:e3:76:a8:21:2e:fa:0c:84:d9:a5:9c: 94:5f:2e:b9:95:5c:03:8a:18:cd:e8:cc:81:d8:4a:42:dc:8a: 25:f9:51:84:c9:c6:f9:60:b3:59:12:55:88:b6:7b:ff:a1:15: b2:43:2f:73:ad:cb:4a:d3:22:37:31:99:24:f8:4d:f3:9d:c3: 30:2d:0c:d7:8e:15:a9:88:20:da:13:b4:45:b0:74:d1:df:a5: 89:b2:fa:1e:6d:93:18:75:38:9e:28:7a:46:be:22:eb:1f:77: 9b:a0:e9:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMyx5tKF8oJ5FmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MDMxNmRjZWYtZWY5YS00YWYzLWJkMDEtNzZiYzNjY2E5MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+wPakNzGiio5JdEVsFNwT9CyEh8b+MIA7Lk zRPw9+9jURIa56sHjj7D5EcvN6UZ/RzhOw29599bilxZ0/HR918/AhiXlSCWJaMv T7Fq9bxhtrDHHcqYjHvqrzuTytGnEqnUl/tVb1qCv6kWkbxTv0mz+vMSU/ruvjjw 8JrUXx6XCjpvUHHAvtDHiF9EJdO1q2YwS4kpt5q1vKO+pvNIfYrzbzbk32awbZkQ H3WlVps3gJKTm/ht4YEUvKuRCwZZaEZj7R7JlcOX6zqvgOyLy2NdgbZzC00kG3ba f1tWUeNjt5yorHsIvUZuDDBiCLKRfKAd+7ETHpgEHVTWm1j+ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAIrKwdz4AE8/yWofdsFyhDyxxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjNhYTM3MGItZjViZi0z MDE2LWJhNTYtMDg4ZjU3NTMyNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIHrfMIUQnv5X53h8AcUSjBq9mLHEKhxBCOV7QGpQ1+o1Ett9S4B gUFGFLYCM0yk+ingxp4gBuBcLSmd5Vpp5U+ASzSQTw0rDhvPBSNg4+orPqdyOTF0 wSPreiMZD9x7l5X32vmhdOntYAVoyOn02g6xK9AP9rczj+bhtZh0SOCTdoEtGhQg HkrXUBTjcqklBqCYtj0OYgXjdqghLvoMhNmlnJRfLrmVXAOKGM3ozIHYSkLciiX5 UYTJxvlgs1kSVYi2e/+hFbJDL3Oty0rTIjcxmST4TfOdwzAtDNeOFamIINoTtEWw dNHfpYmy+h5tkxh1OJ4oeka+Iusfd5ug6V0= -----END CERTIFICATE-----Generated at Thu May 23 02:54:04 2024 by rpki-client on console-ams.rpki-client.org