$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa File: 7812d5a6-8aa4-3831-abe7-befad072a1d3.roa (raw, json) Hash identifier: w1OJ+KdSJihxYdXfUGLQw7dCVdcwVYhTMwShgGpmszo= Subject key identifier: BB:B0:A0:F6:5A:1C:9F:F2:71:61:56:5C:0D:64:98:D3:F0:69:65:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333307CF42E7161FE565D20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:30:7c:f4:2e:71:61:fe:56:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=b67b1f79-0cea-4aa8-84ac-f1eea425895b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:c9:f2:ae:84:a5:56:d8:9b:e0:37:58:24: c8:16:7c:e1:55:31:cc:75:16:07:be:4a:75:8b:4a: 2a:69:b6:b7:8f:b7:ef:4e:5f:41:17:cb:6a:6d:57: a8:70:7f:c7:01:6e:6f:13:5e:64:2b:ae:78:96:7a: 90:4c:5c:d0:d6:e1:4c:a3:81:ee:40:4c:07:4e:ba: 6c:c7:6c:9e:a9:b4:f8:0d:e3:5c:09:0a:a0:f3:39: 3c:8a:6b:5b:06:1b:75:75:2b:b2:5b:5f:ad:45:48: b1:8e:bd:d9:f5:71:c3:fd:42:17:e3:ba:64:fb:e3: b5:6b:5d:41:f4:f0:9c:b9:e7:44:60:05:5f:e3:26: b2:54:a5:67:b5:8b:f9:c7:7a:7d:0d:37:ef:2f:39: 93:ab:56:0c:7c:5b:b9:90:e8:13:c8:2c:1a:58:f9: 54:da:9a:c5:c8:2e:7b:0d:19:ca:7d:bf:7c:e8:b1: 60:b0:81:c7:9d:1e:d8:b3:b2:95:ce:ee:12:d5:48: a8:6d:53:e4:0e:f3:99:b8:9a:34:13:11:8a:6e:e5: fc:ee:a3:d4:65:b1:58:8c:ac:6d:2e:25:6d:75:97: 6f:eb:76:af:92:07:e3:36:01:eb:a7:8b:82:0d:4c: 76:84:45:55:ca:79:5d:77:0d:4a:fb:9a:74:cf:c3: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:A0:F6:5A:1C:9F:F2:71:61:56:5C:0D:64:98:D3:F0:69:65:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:30:4c:cd:63:f4:5d:f3:78:38:45:72:82:3d:f4:5e:0f:22: 7b:e8:e7:cb:0f:86:06:1d:4b:d4:53:16:7f:09:b4:16:ec:9e: d4:0a:75:b6:c6:12:f3:4a:8d:8e:14:00:89:42:ce:74:69:a7: e6:42:05:8c:34:e3:d1:22:e5:29:10:14:62:6e:20:f4:41:28: 73:db:c1:99:5d:5f:72:0f:c5:41:1c:17:eb:43:bb:70:85:33: d7:7e:08:0b:81:66:83:b4:45:de:df:e6:e5:bd:ab:07:2c:ce: 10:e2:cd:57:be:3e:20:54:1b:2a:e2:a1:23:7e:5d:ef:f4:50: 86:c2:7e:c3:02:0d:68:e3:0a:22:19:4f:61:d4:6b:bb:d9:c4: 18:4c:71:4d:86:06:69:97:76:ac:51:e2:a8:fb:46:f4:ff:2a: 81:12:5c:f6:2b:dd:91:00:28:76:84:ba:74:e7:df:07:9b:28: 95:11:78:31:78:68:09:34:96:46:cb:ad:09:f5:a0:9b:8f:53: 52:37:7f:27:c6:86:1d:a1:95:5d:bc:ce:68:da:b1:ca:21:6c: 20:c5:6c:35:4e:3f:90:3c:d9:40:0b:1b:db:52:8b:b0:91:45: 28:f6:2d:0c:00:ab:0b:eb:c0:48:6b:d9:2c:99:dc:ff:b9:f8: 20:62:66:4d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVTMzB89C5xYf5WXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YjY3YjFmNzktMGNlYS00YWE4LTg0YWMtZjFlZWE0MjU4OTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmALJ8q6EpVbYm+A3WCTIFnzhVTHMdRYHvkp1 i0oqaba3j7fvTl9BF8tqbVeocH/HAW5vE15kK654lnqQTFzQ1uFMo4HuQEwHTrps x2yeqbT4DeNcCQqg8zk8imtbBht1dSuyW1+tRUixjr3Z9XHD/UIX47pk++O1a11B 9PCcuedEYAVf4yayVKVntYv5x3p9DTfvLzmTq1YMfFu5kOgTyCwaWPlU2prFyC57 DRnKfb986LFgsIHHnR7Ys7KVzu4S1UiobVPkDvOZuJo0ExGKbuX87qPUZbFYjKxt LiVtdZdv63avkgfjNgHrp4uCDUx2hEVVynlddw1K+5p0z8MtywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLuwoPZaHJ/ycWFWXA1kmNPwaWXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgxMmQ1YTYtOGFhNC0z ODMxLWFiZTctYmVmYWQwNzJhMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATTBMzWP0XfN4OEVygj30Xg8ie+jnyw+GBh1L1FMWfwm0Fuye1Ap1 tsYS80qNjhQAiULOdGmn5kIFjDTj0SLlKRAUYm4g9EEoc9vBmV1fcg/FQRwX60O7 cIUz134IC4Fmg7RF3t/m5b2rByzOEOLNV74+IFQbKuKhI35d7/RQhsJ+wwINaOMK IhlPYdRru9nEGExxTYYGaZd2rFHiqPtG9P8qgRJc9ivdkQAodoS6dOffB5solRF4 MXhoCTSWRsutCfWgm49TUjd/J8aGHaGVXbzOaNqxyiFsIMVsNU4/kDzZQAsb21KL sJFFKPYtDACrC+vASGvZLJnc/7n4IGJmTQ== -----END CERTIFICATE-----Generated at Thu May 23 16:33:44 2024 by rpki-client on console-ams.rpki-client.org