$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa File: 0e7207dc-82a9-38cc-b3f8-463397db34e2.roa (raw, json) Hash identifier: S21NSKFRZ2EsCEY3tgo++8fXLUfuaRNwjTkMfoLluS0= Subject key identifier: CF:5E:2F:ED:DD:C5:7F:26:70:57:1F:56:35:83:73:F5:DD:76:0E:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553FCFB7BDBA4F9A1877C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2607:4f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3f:cf:b7:bd:ba:4f:9a:18:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=63d0c8cf-c7ab-4fc7-a42c-5a975b2f1976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:48:e3:cc:93:23:88:7b:5d:0e:b3:6f:71: 4d:a6:ea:f3:2a:0a:6e:4f:e4:42:2d:41:38:76:65: 6b:1f:cf:f5:67:02:a5:90:2c:0b:64:3e:91:5f:76: 3d:9e:df:64:12:1d:72:c4:64:ea:c2:4d:df:fc:15: ff:4d:62:ac:2f:fb:8e:f2:f1:09:b7:11:72:28:f3: 96:0f:bd:f8:c7:2f:6e:36:da:a7:49:68:de:89:b0: 88:d4:2b:6a:ca:70:e7:ae:7c:46:33:19:ea:d3:70: 22:7e:8c:22:f8:00:3c:d4:d3:5b:72:5d:b6:38:15: 1c:34:5d:60:9e:26:6f:5c:aa:59:b8:f3:00:62:db: fb:9f:f1:05:14:7e:cb:d7:49:e9:b5:03:09:98:a4: 37:1c:3b:c2:0a:59:10:f4:e2:3a:76:6a:f7:fd:3a: 3a:df:ee:d0:f4:46:c0:6e:3c:dc:32:82:75:2e:10: 56:f7:e9:23:43:80:ac:23:4e:30:02:bf:4d:8e:66: 80:35:dd:31:6f:e2:18:31:ab:1d:c8:e0:a1:37:0a: 79:82:c9:bf:a7:a9:ca:a7:9c:2a:df:2a:30:be:65: 29:42:b2:32:02:64:bd:70:ec:00:a0:fb:b3:ce:63: 24:86:8b:51:ea:10:b2:24:96:84:fc:08:61:9c:21: 2c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5E:2F:ED:DD:C5:7F:26:70:57:1F:56:35:83:73:F5:DD:76:0E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fe:41:00:e9:1c:76:2b:09:b9:24:b6:f2:57:d6:86:20:10: 5c:13:8a:ea:63:b6:c4:78:64:c2:a5:40:d5:b0:83:bb:0c:e3: fb:55:2d:27:d4:90:05:c0:3b:4f:b8:bd:bb:47:56:18:b5:20: c2:89:26:aa:4e:4d:81:d4:dc:0e:4b:ec:f8:29:43:67:07:75: 22:c0:5a:36:7b:1f:33:b3:63:63:56:29:1e:31:f8:04:95:bf: b0:d0:4a:06:2f:c9:be:2c:d3:72:0a:6b:b6:49:ea:35:bb:ac: fc:89:e5:af:fb:cf:80:da:5e:27:c9:c6:62:69:d0:20:cd:f0: 8a:13:85:d3:eb:0e:74:d6:bf:cc:d7:95:61:f2:57:56:56:6e: 39:96:04:da:b2:81:ae:f0:b9:b2:41:fb:5c:95:94:88:92:0a: 06:f6:49:f1:3e:46:21:89:32:84:98:8a:b2:57:43:2d:15:91: 12:d1:24:f2:b6:c0:13:f4:81:38:49:44:d8:76:48:6b:ec:f1: 3d:6d:8a:67:79:8e:58:98:8d:0d:b9:10:60:ce:6c:2f:fe:06: af:48:11:27:81:05:77:04:43:f6:de:51:92:cb:15:19:16:be: 93:88:7f:40:f6:27:23:5f:d5:b2:77:a0:d1:96:39:b7:00:2b: 7f:3f:1a:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfxVT/Pt726T5oYd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NjNkMGM4Y2YtYzdhYi00ZmM3LWE0MmMtNWE5NzViMmYxOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxtI48yTI4h7XQ6zb3FNpurzKgpuT+RCLUE4 dmVrH8/1ZwKlkCwLZD6RX3Y9nt9kEh1yxGTqwk3f/BX/TWKsL/uO8vEJtxFyKPOW D734xy9uNtqnSWjeibCI1CtqynDnrnxGMxnq03Aifowi+AA81NNbcl22OBUcNF1g niZvXKpZuPMAYtv7n/EFFH7L10nptQMJmKQ3HDvCClkQ9OI6dmr3/To63+7Q9EbA bjzcMoJ1LhBW9+kjQ4CsI04wAr9NjmaANd0xb+IYMasdyOChNwp5gsm/p6nKp5wq 3yowvmUpQrIyAmS9cOwAoPuzzmMkhotR6hCyJJaE/AhhnCEsewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9eL+3dxX8mcFcfVjWDc/Xddg6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGU3MjA3ZGMtODJhOS0z OGNjLWIzZjgtNDYzMzk3ZGIzNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdPgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAt/kEA6Rx2Kwm5JLbyV9aGIBBcE4rqY7bEeGTCpUDVsIO7DOP7VS0n 1JAFwDtPuL27R1YYtSDCiSaqTk2B1NwOS+z4KUNnB3UiwFo2ex8zs2NjVikeMfgE lb+w0EoGL8m+LNNyCmu2Seo1u6z8ieWv+8+A2l4nycZiadAgzfCKE4XT6w501r/M 15Vh8ldWVm45lgTasoGu8LmyQftclZSIkgoG9knxPkYhiTKEmIqyV0MtFZES0STy tsAT9IE4SUTYdkhr7PE9bYpneY5YmI0NuRBgzmwv/gavSBEngQV3BEP23lGSyxUZ Fr6TiH9A9icjX9Wyd6DRljm3ACt/Pxp/ -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:49 2024 by rpki-client on console-fra.rpki-client.org