$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa File: 6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa (raw, json) Hash identifier: Y5PF2unCreedl2ad7baDP5XJSa14nsCsL7oeTI7ATXQ= Subject key identifier: CE:8F:CD:AF:2A:40:DB:2D:29:C6:80:9E:26:2B:BE:14:9A:32:92:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333306DC53237480DED3E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:30:6d:c5:32:37:48:0d:ed:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=f9f0bdb3-3ef9-41f6-90d5-c15d45f0cbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:89:af:d7:7f:49:91:8a:6e:fa:67:6f:85: 5f:ab:c8:f9:ac:75:8c:ef:2b:f3:0b:27:02:de:08: 05:23:0b:e7:e4:89:25:43:1a:94:60:60:53:3f:24: ce:8b:0b:04:63:71:8f:38:d4:db:32:25:1e:c1:25: 04:67:43:dc:f9:2a:d0:7d:a0:ff:c1:46:93:ea:9d: 83:97:b2:50:9b:58:53:72:a5:7e:88:3a:7a:ea:fd: 3f:ba:29:db:f9:fa:8d:3c:0d:96:f6:93:73:02:43: 55:7b:e3:03:41:04:13:e6:62:1a:a9:30:4a:0d:34: 83:9c:97:54:c7:60:10:92:ed:30:89:f2:02:09:0e: 80:58:3c:23:e0:19:7f:1c:f2:d4:29:f7:f5:05:6b: 56:81:67:d5:44:1c:4d:62:0c:97:2b:ce:b5:8c:09: 35:9e:b7:f7:18:fd:e8:de:e3:b9:40:99:d1:39:e0: ce:7c:e2:92:1c:dc:11:68:f2:32:42:90:3e:9c:68: b9:42:7e:46:94:88:04:14:9a:f0:5c:4d:07:cc:82: 8c:36:db:19:ac:fe:a3:cd:62:0d:bc:e0:9e:6f:de: 25:27:96:a8:a0:d8:e7:d2:22:f4:5e:26:e9:19:03: d1:e9:8f:d2:71:66:2c:e8:3a:5b:db:40:7b:0d:67: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8F:CD:AF:2A:40:DB:2D:29:C6:80:9E:26:2B:BE:14:9A:32:92:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:18:9f:95:7b:f5:79:c3:ac:dd:9f:52:53:8f:63:3e:05:70: 31:cc:b5:70:79:6f:33:2b:63:e3:b5:d6:11:76:e8:b5:4a:70: 52:26:02:53:9e:a3:b2:92:bc:cd:19:ba:18:47:64:6c:50:e7: df:01:eb:c2:7c:b7:e1:91:a2:af:11:92:ac:84:4c:4e:56:b9: fe:10:15:34:7e:3f:bc:67:ac:bd:a5:31:f8:f3:38:9d:fd:69: 15:30:cb:c4:d1:c8:a6:b6:45:e9:e0:bb:7a:ee:dc:5f:87:17: 3f:d8:b5:d3:17:28:35:7b:9d:14:38:42:64:86:65:78:2a:c4: ea:07:75:94:17:17:07:02:17:58:f5:f7:0f:3d:12:4b:a0:ee: c6:92:14:8d:b3:b6:37:b7:65:dd:d6:e6:ae:97:f0:c4:b6:ad: ee:ae:17:96:91:90:9d:94:94:fb:6a:f0:8d:6d:6e:06:00:19: 4b:cd:9b:a4:2b:68:63:67:aa:52:bb:e6:ca:c1:b4:c1:dc:44: fb:33:7b:0d:a0:fa:6b:15:7b:76:b5:2b:8d:98:70:6b:1f:69: aa:0e:0b:a8:73:ca:49:b6:eb:09:dd:07:ae:f2:4c:1c:73:12: 19:dc:45:d7:32:1c:af:77:7a:3f:00:5c:57:28:49:f8:ea:a8: 5c:d2:a4:2d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVTMzBtxTI3SA3tPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZjlmMGJkYjMtM2VmOS00MWY2LTkwZDUtYzE1ZDQ1ZjBjYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7iJr9d/SZGKbvpnb4Vfq8j5rHWM7yvzCycC 3ggFIwvn5IklQxqUYGBTPyTOiwsEY3GPONTbMiUewSUEZ0Pc+SrQfaD/wUaT6p2D l7JQm1hTcqV+iDp66v0/uinb+fqNPA2W9pNzAkNVe+MDQQQT5mIaqTBKDTSDnJdU x2AQku0wifICCQ6AWDwj4Bl/HPLUKff1BWtWgWfVRBxNYgyXK861jAk1nrf3GP3o 3uO5QJnROeDOfOKSHNwRaPIyQpA+nGi5Qn5GlIgEFJrwXE0HzIKMNtsZrP6jzWIN vOCeb94lJ5aooNjn0iL0XibpGQPR6Y/ScWYs6Dpb20B7DWeyEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM6Pza8qQNstKcaAniYrvhSaMpIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQ0YTk5ZDgtMzk0ZC0z MTExLTk4NWUtYWQyMGI5YzY4ZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAchiflXv1ecOs3Z9SU49jPgVwMcy1cHlvMytj47XWEXbotUpwUiYC U56jspK8zRm6GEdkbFDn3wHrwny34ZGirxGSrIRMTla5/hAVNH4/vGesvaUx+PM4 nf1pFTDLxNHIprZF6eC7eu7cX4cXP9i10xcoNXudFDhCZIZleCrE6gd1lBcXBwIX WPX3Dz0SS6DuxpIUjbO2N7dl3dbmrpfwxLat7q4XlpGQnZSU+2rwjW1uBgAZS82b pCtoY2eqUrvmysG0wdxE+zN7DaD6axV7drUrjZhwax9pqg4LqHPKSbbrCd0HrvJM HHMSGdxF1zIcr3d6PwBcVyhJ+OqoXNKkLQ== -----END CERTIFICATE-----Generated at Thu May 23 16:33:43 2024 by rpki-client on console-ams.rpki-client.org