$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa File: f56e512a-4f4f-3e4f-8537-0609c0041e23.roa (raw, json) Hash identifier: CN6Y2MGdboVigd7E/eXyFhOp+DiY5sxEymyUqXP4t6A= Subject key identifier: C4:D7:25:D5:96:D8:83:EC:BC:EA:14:12:66:CF:22:D0:99:21:ED:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333347D90ABFEB52EAACD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2607:f690::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:34:7d:90:ab:fe:b5:2e:aa:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=a6414b84-7414-4a27-a9f4-33af420c92b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:92:bb:fd:07:7d:22:42:91:58:ed:1a:e6: 1c:f3:42:32:be:a8:3d:ce:42:1b:5c:19:99:61:b8: da:49:44:a7:fd:57:94:95:ea:65:eb:ad:14:75:4e: 65:0e:55:d3:97:1c:ff:83:a5:db:1c:5c:23:51:f2: ff:f9:a0:38:2b:78:1d:25:7a:4a:3e:e9:d7:af:a2: 4b:ae:7e:42:f2:07:f9:b4:d9:9a:d9:5d:a8:ee:4a: f5:30:b7:e2:af:3f:31:a8:5c:28:d3:22:9d:82:aa: 46:79:8b:4d:d1:48:35:fe:05:c8:d3:ad:2c:6d:41: 58:eb:f1:d0:6b:73:58:39:19:b0:d2:9f:2b:e1:7b: 3e:25:26:f5:af:5d:6f:aa:89:79:97:a3:f7:13:5a: 25:a3:88:6e:2f:9f:7b:27:6a:70:13:c6:df:54:cd: e8:d4:92:62:f2:57:a6:f7:d8:85:07:2f:59:03:cf: 7b:ec:3d:f3:5d:1c:b5:02:40:1a:16:cc:e2:56:99: c6:a8:44:34:df:50:85:ed:2a:db:e0:54:09:41:67: cd:4d:a8:4a:91:95:6a:5c:0e:d9:9b:96:2f:07:d5: e6:e3:42:5d:05:1f:63:9d:66:ce:98:5b:bd:76:d9: 29:17:77:83:f8:2f:db:23:22:a3:3e:ce:9c:95:ee: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:25:D5:96:D8:83:EC:BC:EA:14:12:66:CF:22:D0:99:21:ED:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f690::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:17:9d:53:e1:46:98:c0:5e:5d:3f:76:e3:00:f3:52:c5:75: ce:34:2d:b3:88:48:8a:fa:a1:42:44:b7:47:d7:09:32:15:64: 25:38:c9:60:ff:bf:86:c4:d9:3d:c5:95:f1:07:15:92:2d:64: 00:5d:bc:e4:54:79:1a:9d:f7:66:cc:9f:11:33:7a:84:75:4c: 39:04:cb:dd:c3:f0:34:87:64:dd:5a:97:fa:e3:fa:7e:75:cb: 9f:6a:75:81:0f:05:4b:14:ed:74:64:4c:03:aa:ee:bb:b4:da: 15:84:40:62:5a:21:c9:84:b5:aa:47:cc:9e:3e:eb:7b:49:fa: 7a:64:bc:0d:35:25:71:f6:98:70:4f:8d:28:78:f1:e0:39:ba: 71:17:a3:a6:92:a1:b1:7c:f1:d4:be:f9:84:f5:f7:17:d3:49: c7:58:28:a0:70:1b:d3:ac:9c:fe:b9:04:0a:a8:22:0e:a2:d8: 68:48:7f:5a:36:1c:d0:e1:35:6d:55:b5:5b:8d:10:96:b3:5e: ab:e7:0b:ae:36:fb:b2:e2:66:49:a8:dd:ad:d7:8a:79:cc:3e: 61:cc:17:eb:52:71:bf:58:e2:18:1c:88:59:cc:64:2b:ea:bc: 61:90:34:1d:c1:db:0d:e7:14:a7:e5:45:f5:80:92:a1:a4:f1: bc:7e:12:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVTMzR9kKv+tS6qzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YTY0MTRiODQtNzQxNC00YTI3LWE5ZjQtMzNhZjQyMGM5MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcySu/0HfSJCkVjtGuYc80Iyvqg9zkIbXBmZ YbjaSUSn/VeUlepl660UdU5lDlXTlxz/g6XbHFwjUfL/+aA4K3gdJXpKPunXr6JL rn5C8gf5tNma2V2o7kr1MLfirz8xqFwo0yKdgqpGeYtN0Ug1/gXI060sbUFY6/HQ a3NYORmw0p8r4Xs+JSb1r11vqol5l6P3E1olo4huL597J2pwE8bfVM3o1JJi8lem 99iFBy9ZA8977D3zXRy1AkAaFsziVpnGqEQ031CF7Srb4FQJQWfNTahKkZVqXA7Z m5YvB9Xm40JdBR9jnWbOmFu9dtkpF3eD+C/bIyKjPs6cle7/awIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMTXJdWW2IPsvOoUEmbPItCZIe0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU2ZTUxMmEtNGY0Zi0z ZTRmLTg1MzctMDYwOWMwMDQxZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaF51T4UaYwF5dP3bjAPNSxXXONC2ziEiK+qFCRLdH1wkyFWQlOMlg /7+GxNk9xZXxBxWSLWQAXbzkVHkanfdmzJ8RM3qEdUw5BMvdw/A0h2TdWpf64/p+ dcufanWBDwVLFO10ZEwDqu67tNoVhEBiWiHJhLWqR8yePut7Sfp6ZLwNNSVx9phw T40oePHgObpxF6OmkqGxfPHUvvmE9fcX00nHWCigcBvTrJz+uQQKqCIOothoSH9a NhzQ4TVtVbVbjRCWs16r5wuuNvuy4mZJqN2t14p5zD5hzBfrUnG/WOIYHIhZzGQr 6rxhkDQdwdsN5xSn5UX1gJKhpPG8fhIX -----END CERTIFICATE-----Generated at Thu May 23 19:42:38 2024 by rpki-client on console-fra.rpki-client.org