$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa File: b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa (raw, json) Hash identifier: h/1lz8zwlDfek1+6v8khOX6K2ZGeAvbaNKiR5NlE3QQ= Subject key identifier: 91:B7:8A:2D:BA:B9:BE:77:B1:33:C8:02:25:49:B9:00:9D:AF:C1:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333345D9178527B66F11A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2607:f490::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:34:5d:91:78:52:7b:66:f1:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=587571aa-e77c-4f80-89f5-fa4ff9c6a5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:c9:4f:88:f0:9a:02:ee:94:2e:28:1f:72: 03:4a:c4:0b:15:85:8f:3c:5c:d0:5a:77:a4:7b:b6: 66:cc:24:79:ba:30:e4:24:b9:fe:e0:3e:e2:3a:76: 20:d3:81:b7:f6:5e:7c:0c:8e:fa:c7:c9:64:ae:a9: 37:e6:6e:6b:30:7e:39:c2:0a:e2:8d:80:60:77:11: 67:00:9f:72:b2:f4:96:0c:e2:8c:3e:b7:ba:be:90: b0:af:c8:7e:c8:91:ad:51:b1:cf:db:3c:d6:0b:96: a3:09:14:f3:d5:91:d1:3a:de:1a:25:f5:f6:79:53: 22:ac:a6:8f:df:d4:46:4d:88:7e:85:00:79:ea:81: 0a:6a:cb:4d:ad:e8:3a:d3:44:c2:81:7d:4e:17:33: 98:ae:18:50:50:75:7d:4e:46:e7:39:97:6a:a4:78: 66:61:03:90:ee:3b:9f:e0:f5:fe:79:24:4a:60:06: 78:1e:53:a5:04:73:18:98:e3:7b:9f:f1:f1:2e:c7: c4:18:8b:8c:0d:c4:60:4b:aa:4c:c1:c9:26:32:34: 20:d5:b2:d3:4d:ec:cc:57:1e:cc:4c:83:87:8e:58: a6:e2:1b:59:98:39:4a:72:e9:84:5a:11:ee:ba:33: 13:81:d3:62:d4:d2:b1:57:e8:e1:91:77:f6:72:0d: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:8A:2D:BA:B9:BE:77:B1:33:C8:02:25:49:B9:00:9D:AF:C1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f490::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e7:53:29:d3:c8:6e:0a:0d:aa:fa:a7:47:1f:bf:1c:5e:88: a2:c1:85:7e:05:e9:6d:09:f0:8a:ca:6c:33:e1:1e:b5:dc:4e: e1:fd:50:e7:a5:c6:cd:41:93:ae:12:7f:ad:01:4c:2c:e1:26: ab:f1:16:fb:80:7a:e0:1a:ef:d5:0b:8d:dd:2f:e3:8d:65:4a: ec:c3:18:d4:38:b9:a0:ff:58:cd:5c:c2:bf:d5:40:7d:19:5b: 15:a8:64:ea:b7:1b:0e:44:f5:fb:06:f4:0a:aa:70:59:54:c9: ab:84:4e:e8:e2:9d:11:01:a0:d4:8e:48:9d:2c:b9:47:ed:87: f3:8d:ec:3e:22:fd:52:9a:32:57:74:8b:60:16:e4:72:4a:d3: 66:4f:32:96:4e:76:3a:82:37:0c:5a:ea:8d:c5:ff:cb:46:9b: de:58:1e:c8:49:9b:55:b5:c9:d1:c2:14:e3:45:11:c5:93:78: 7c:45:bb:00:be:a9:4e:c0:c3:87:4b:c5:71:b6:bc:63:6e:f3: b9:1b:03:6f:3e:1b:78:30:48:57:77:7f:d3:ae:db:bb:6a:62: 8f:45:c8:d7:ea:06:fd:d0:dd:d8:b7:fb:d0:3b:d9:94:c2:69: 63:e3:93:a9:ed:15:d6:9e:89:5f:6e:31:44:f8:25:0b:da:a1: c0:71:93:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVTMzRdkXhSe2bxGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NTg3NTcxYWEtZTc3Yy00ZjgwLTg5ZjUtZmE0ZmY5YzZhNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9DJT4jwmgLulC4oH3IDSsQLFYWPPFzQWnek e7ZmzCR5ujDkJLn+4D7iOnYg04G39l58DI76x8lkrqk35m5rMH45wgrijYBgdxFn AJ9ysvSWDOKMPre6vpCwr8h+yJGtUbHP2zzWC5ajCRTz1ZHROt4aJfX2eVMirKaP 39RGTYh+hQB56oEKastNreg600TCgX1OFzOYrhhQUHV9TkbnOZdqpHhmYQOQ7juf 4PX+eSRKYAZ4HlOlBHMYmON7n/HxLsfEGIuMDcRgS6pMwckmMjQg1bLTTezMVx7M TIOHjlim4htZmDlKcumEWhHuujMTgdNi1NKxV+jhkXf2cg1S2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJG3ii26ub53sTPIAiVJuQCdr8HyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjhlNjNkMmQtZDM4Yi0z ZjcwLWE3YTktMTk4NDRhNzdiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAR51Mp08huCg2q+qdHH78cXoiiwYV+BeltCfCKymwz4R613E7h/VDn pcbNQZOuEn+tAUws4Sar8Rb7gHrgGu/VC43dL+ONZUrswxjUOLmg/1jNXMK/1UB9 GVsVqGTqtxsORPX7BvQKqnBZVMmrhE7o4p0RAaDUjkidLLlH7Yfzjew+Iv1SmjJX dItgFuRyStNmTzKWTnY6gjcMWuqNxf/LRpveWB7ISZtVtcnRwhTjRRHFk3h8RbsA vqlOwMOHS8VxtrxjbvO5GwNvPht4MEhXd3/Trtu7amKPRcjX6gb90N3Yt/vQO9mU wmlj45Op7RXWnolfbjFE+CUL2qHAcZOP -----END CERTIFICATE-----Generated at Thu May 23 01:44:20 2024 by rpki-client on console-fra.rpki-client.org