$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db12432c-3674-33c9-bd35-c3d974af8cd3.roa File: db12432c-3674-33c9-bd35-c3d974af8cd3.roa (raw, json) Hash identifier: QsIX2SFTWrP0SXNgN/lIBzxHRQFcX3e/DQ6E8NbMWeQ= Subject key identifier: D4:F4:73:D2:0B:E5:6A:73:71:98:14:B7:DC:6F:93:18:E3:5A:2B:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533339DAAE67DC94D512CE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db12432c-3674-33c9-bd35-c3d974af8cd3.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 26793 IP address blocks: 2600:5002:1806::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:39:da:ae:67:dc:94:d5:12:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=47d0e521-e4ac-4f1a-aa98-67e30d6cbc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:ff:4e:80:2c:07:a0:f3:f0:57:94:c9:db: fc:16:2e:b0:9d:c4:e4:5b:a7:bc:c3:46:fa:21:25: 06:8e:17:61:8d:45:46:8d:63:df:de:18:e8:27:62: c8:e9:50:43:44:3c:5a:34:5f:7a:b6:28:bf:fc:85: 84:49:96:2e:ad:d4:50:21:ca:10:a4:13:96:9a:de: 9a:42:e8:ad:09:e9:43:a7:f9:81:f7:f3:95:05:10: 0b:44:b2:30:ad:5f:6f:24:1b:54:73:b5:18:4d:1c: bc:17:ba:b6:71:71:5b:04:b7:62:d2:9a:56:9e:47: 98:a4:2d:32:18:d5:87:8a:7d:39:ca:82:b2:b2:5c: ae:bc:e3:fd:a4:7e:71:cc:87:5e:48:c1:dd:53:02: b5:60:0f:fd:ab:d8:2e:b6:ff:64:1b:ba:d7:8f:8e: e5:86:9d:df:69:64:74:be:bd:d8:bf:26:55:20:f0: 19:04:4b:50:d1:52:39:a8:2f:e1:b0:ec:03:41:4b: 45:0a:66:c9:f0:91:99:0d:8b:40:ba:4d:58:96:56: 01:3f:69:de:3a:94:e1:7e:9c:3a:e1:c9:2b:f2:23: bc:b5:47:96:b5:3a:b7:86:cf:98:7d:50:b9:b5:9f: 77:78:05:1e:97:ad:b8:76:26:a8:8c:2c:59:28:c3: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F4:73:D2:0B:E5:6A:73:71:98:14:B7:DC:6F:93:18:E3:5A:2B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db12432c-3674-33c9-bd35-c3d974af8cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:5002:1806::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7c:9b:80:46:cf:15:88:21:8a:ee:14:27:6e:28:7a:3f:97: fa:e2:3f:2a:3d:d7:d8:17:ba:68:8d:82:2b:87:90:45:66:37: b4:5c:6d:f5:5c:79:4b:fa:28:be:e6:73:60:27:0e:e3:dc:42: 09:ca:cb:2f:50:28:19:05:af:3f:12:ef:d7:2a:3c:c4:9e:d2: ac:eb:61:5b:a0:a0:e0:6a:21:1c:c8:f6:2a:0b:11:cc:88:e3: 14:f6:cd:20:35:b5:a4:d0:a4:aa:d8:a5:0e:de:d4:e3:4c:56: a0:83:c4:f0:33:f8:ed:7d:b3:dc:62:77:67:47:16:03:88:60: 32:4b:ec:35:17:46:dd:05:33:e3:9a:e6:26:9e:1f:43:0c:e0: f9:e0:a0:ea:40:7d:61:9c:e8:bd:16:36:c1:5d:8c:58:c0:ab: 71:b5:35:de:4f:39:54:2c:43:cd:6b:5d:99:dd:54:89:79:a6: 42:d9:79:3a:12:9e:98:dd:3c:98:7d:40:96:b1:40:d6:8e:dd: 46:54:22:4d:31:77:f6:5c:0c:18:c0:76:67:a6:21:4c:15:ec: b8:fb:4e:02:b8:21:4a:98:1f:fe:88:1d:38:c6:5a:26:f2:26: 50:be:81:39:f8:cd:1b:f4:cb:aa:a8:5d:2c:41:f9:a2:a4:af: a5:bc:29:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMznarmfclNUSzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NDdkMGU1MjEtZTRhYy00ZjFhLWFhOTgtNjdlMzBkNmNiYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBz/ToAsB6Dz8FeUydv8Fi6wncTkW6e8w0b6 ISUGjhdhjUVGjWPf3hjoJ2LI6VBDRDxaNF96tii//IWESZYurdRQIcoQpBOWmt6a QuitCelDp/mB9/OVBRALRLIwrV9vJBtUc7UYTRy8F7q2cXFbBLdi0ppWnkeYpC0y GNWHin05yoKyslyuvOP9pH5xzIdeSMHdUwK1YA/9q9gutv9kG7rXj47lhp3faWR0 vr3YvyZVIPAZBEtQ0VI5qC/hsOwDQUtFCmbJ8JGZDYtAuk1YllYBP2neOpThfpw6 4ckr8iO8tUeWtTq3hs+YfVC5tZ93eAUel624diaojCxZKMOTAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNT0c9IL5WpzcZgUt9xvkxjjWivQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIxMjQzMmMtMzY3NC0z M2M5LWJkMzUtYzNkOTc0YWY4Y2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBQAhgG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAER8m4BGzxWIIYruFCduKHo/l/riPyo919gXumiNgiuHkEVmN7Rc bfVceUv6KL7mc2AnDuPcQgnKyy9QKBkFrz8S79cqPMSe0qzrYVugoOBqIRzI9ioL EcyI4xT2zSA1taTQpKrYpQ7e1ONMVqCDxPAz+O19s9xid2dHFgOIYDJL7DUXRt0F M+Oa5iaeH0MM4PngoOpAfWGc6L0WNsFdjFjAq3G1Nd5POVQsQ81rXZndVIl5pkLZ eToSnpjdPJh9QJaxQNaO3UZUIk0xd/ZcDBjAdmemIUwV7Lj7TgK4IUqYH/6IHTjG WibyJlC+gTn4zRv0y6qoXSxB+aKkr6W8KVE= -----END CERTIFICATE-----Generated at Fri May 24 02:52:40 2024 by rpki-client on console-ams.rpki-client.org