$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02750d3e-aef9-394e-a8c6-89cf4f79c875.roa File: 02750d3e-aef9-394e-a8c6-89cf4f79c875.roa (raw, json) Hash identifier: fS6mlnCE11Du2jp3knuzAZNeYZI7Go+ZADTIufPxPSA= Subject key identifier: E8:84:9D:5F:80:7D:6E:5F:BB:97:55:C4:55:F9:7C:7C:AC:6A:7D:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155105F00BAE02FA30FB4E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02750d3e-aef9-394e-a8c6-89cf4f79c875.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:2600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:10:5f:00:ba:e0:2f:a3:0f:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=b8b97047-da1a-44ed-80a7-26c655c6a581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ad:a6:d6:e9:37:2b:92:4b:a6:54:a4:10:79: c5:a2:c1:64:5a:2d:5d:22:5f:62:aa:6c:95:43:ca: e9:6b:d3:b2:28:e6:41:3a:22:fb:60:59:04:74:8c: 77:32:dd:c4:13:58:34:95:21:45:d6:06:50:66:d4: 3d:bb:0a:fe:2f:a0:90:42:5f:f9:c1:57:c0:55:cc: 7e:24:a7:0f:02:63:1c:70:77:0b:83:b9:00:89:50: c4:e8:14:00:10:f3:44:66:9f:1f:9f:ce:d5:66:68: f5:30:cf:f7:4b:cb:08:ee:e3:04:c8:bf:1e:20:dc: a6:63:f9:c7:6d:61:23:0a:43:e1:73:f5:bb:99:49: 68:96:3a:be:6b:92:3c:34:1e:0e:07:1e:01:9a:ba: 68:1e:9f:6c:e7:6c:2c:de:a3:21:9f:d9:b9:6d:17: a1:c5:f1:a7:2f:cf:5e:0a:7a:e4:25:25:2b:1c:21: af:31:97:7d:14:36:69:67:ce:a3:01:58:dd:fd:77: 77:30:e8:80:14:07:24:1d:4a:e5:53:f8:83:f2:d6: 8d:cf:8e:6d:c4:01:0f:dc:92:9f:2d:09:a3:51:b5: b1:c4:8c:9d:37:69:18:5e:66:75:d5:18:0a:0f:b9: f9:84:bd:9f:af:45:79:e0:2f:ee:97:e1:28:77:2d: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:84:9D:5F:80:7D:6E:5F:BB:97:55:C4:55:F9:7C:7C:AC:6A:7D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02750d3e-aef9-394e-a8c6-89cf4f79c875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6f:a6:80:1f:25:c8:94:12:14:18:71:9c:12:78:c5:ee:96: 6d:c9:90:c0:00:58:21:d8:d7:71:b2:6d:cb:14:ea:64:4c:38: 03:34:55:90:42:b7:c8:a9:c9:86:d2:fe:a6:42:46:58:54:10: 1f:7f:6f:0a:55:8c:a8:7d:5f:9e:c2:49:b3:c5:49:c4:09:ab: 77:76:69:3a:80:b2:94:82:e3:5e:16:09:68:0c:cb:0b:bf:61: f0:6a:92:e8:19:fa:76:0a:d5:2e:7c:42:1e:22:d7:5b:d1:a5: 4b:32:cb:1f:a0:7b:71:c7:14:9d:16:f5:6f:a7:ea:70:4c:fb: 5d:45:ea:25:d8:db:4f:f4:85:4c:66:ad:10:e1:66:1e:92:a5: b3:06:74:3d:01:1d:45:31:90:e9:99:3e:4f:46:54:4f:b5:ea: d9:3c:8a:8a:81:bd:fa:8d:00:f5:cc:ff:71:3e:bf:a1:83:5d: 5f:79:ed:92:b5:4b:00:e7:ad:85:80:e1:12:09:11:e2:5a:8d: d1:31:ab:97:7d:ff:dd:2e:2d:e4:c7:6b:37:9b:f5:da:f9:63: d7:72:4e:eb:8f:91:ff:1d:1f:46:1f:d4:98:1d:01:57:7b:89: ef:3e:17:1f:cf:e7:19:f4:3d:8d:ac:24:08:47:5f:00:49:1f: 53:63:94:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVRBfALrgL6MPtOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YjhiOTcwNDctZGExYS00NGVkLTgwYTctMjZjNjU1YzZhNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q2m1uk3K5JLplSkEHnFosFkWi1dIl9iqmyV Q8rpa9OyKOZBOiL7YFkEdIx3Mt3EE1g0lSFF1gZQZtQ9uwr+L6CQQl/5wVfAVcx+ JKcPAmMccHcLg7kAiVDE6BQAEPNEZp8fn87VZmj1MM/3S8sI7uMEyL8eINymY/nH bWEjCkPhc/W7mUloljq+a5I8NB4OBx4BmrpoHp9s52ws3qMhn9m5bRehxfGnL89e CnrkJSUrHCGvMZd9FDZpZ86jAVjd/Xd3MOiAFAckHUrlU/iD8taNz45txAEP3JKf LQmjUbWxxIydN2kYXmZ11RgKD7n5hL2fr0V54C/ul+Eody3wZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOiEnV+AfW5fu5dVxFX5fHysan3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDI3NTBkM2UtYWVmOS0z OTRlLWE4YzYtODljZjRmNzljODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABW+mgB8lyJQSFBhxnBJ4xe6WbcmQwABYIdjXcbJtyxTqZEw4AzRV kEK3yKnJhtL+pkJGWFQQH39vClWMqH1fnsJJs8VJxAmrd3ZpOoCylILjXhYJaAzL C79h8GqS6Bn6dgrVLnxCHiLXW9GlSzLLH6B7cccUnRb1b6fqcEz7XUXqJdjbT/SF TGatEOFmHpKlswZ0PQEdRTGQ6Zk+T0ZUT7Xq2TyKioG9+o0A9cz/cT6/oYNdX3nt krVLAOethYDhEgkR4lqN0TGrl33/3S4t5MdrN5v12vlj13JO64+R/x0fRh/UmB0B V3uJ7z4XH8/nGfQ9jawkCEdfAEkfU2OUfA== -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:16 2024 by rpki-client on console-ams.rpki-client.org