$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa File: 1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa (raw, json) Hash identifier: BEzqTphdl/YCn7TsR9p72e2W82Nfy8LMDovvZAyyiOg= Subject key identifier: 23:67:9E:C2:40:26:98:72:C0:8F:3F:15:90:6F:FC:6A:27:36:DB:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553333001E7DE49EF4C35AC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:30:01:e7:de:49:ef:4c:35:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=9f498c0f-142c-467e-8565-59170748964e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:08:0f:06:c5:7d:fe:7f:18:1d:9a:bd:47: 9b:9c:cf:7c:fe:cd:c5:e2:1b:b2:c4:c8:07:8c:e3: fd:47:0e:63:1c:86:ac:01:54:12:42:9e:b9:74:7d: 39:30:e9:85:c0:af:00:a0:88:ef:6f:31:1b:42:2a: 63:54:89:ac:22:b6:c0:99:b5:b9:05:5b:82:44:8c: c0:33:6c:81:b4:d3:1d:69:07:25:f8:64:c3:4e:5b: 05:14:94:8a:a5:89:ff:91:d0:6d:ca:75:87:8b:8b: 39:5c:fc:79:17:67:14:32:70:37:ad:ae:16:04:ea: ac:18:0d:20:8a:dc:75:fd:8d:c6:73:69:d9:5a:a5: 32:ec:fd:13:35:86:3e:0f:32:de:0a:3b:26:24:ae: af:45:8d:09:d0:14:95:33:cd:27:7a:35:fa:c3:b0: 72:8b:e9:11:0a:93:32:ff:7b:f9:d8:93:f4:dc:0a: ad:f8:4b:9c:3c:47:2a:98:c8:4f:a9:b2:03:34:54: bf:79:f3:17:1b:6a:d0:58:c7:ef:ca:fa:f7:d8:33: fb:1b:10:35:76:01:1c:8e:db:81:7b:8f:ab:c2:e8: 5c:b4:6d:3c:c1:ec:86:60:03:23:7c:79:9d:d4:17: bb:35:0b:ba:aa:25:a3:75:e7:88:91:a2:29:4c:70: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:67:9E:C2:40:26:98:72:C0:8F:3F:15:90:6F:FC:6A:27:36:DB:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a38d675-53aa-3ced-8a5e-ca4de1e39db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:4b:df:c1:9c:39:00:80:c6:4c:65:b7:a3:f7:41:ca:80:9e: ec:8f:d5:d1:06:7d:af:10:b2:75:01:35:11:29:8a:51:b7:c8: c2:57:d9:e5:08:6b:68:dc:d9:24:96:4d:f7:73:e4:8d:a2:f3: d2:09:4f:19:a4:e3:9f:d0:57:b0:f4:e3:31:45:a8:ee:11:83: e6:1b:4f:cd:36:2e:59:e6:b2:b7:9e:bc:59:51:f8:ff:f7:12: f2:be:6b:2e:d4:59:ad:f0:3a:a8:05:99:ba:5b:da:fd:99:a6: 42:90:96:49:77:2c:3f:d6:5d:de:e3:0b:12:5a:ae:e3:11:0c: 36:17:d2:09:74:44:0c:07:26:8d:2f:20:46:6a:cc:da:66:ae: 23:c2:bb:30:65:9a:a3:56:bb:cb:61:11:62:5f:97:49:60:74: cc:5e:99:1a:a5:36:3c:4a:bc:cc:9e:79:39:cc:3e:6a:a5:81: fc:b7:aa:00:9f:de:0f:0f:dd:e9:fc:07:75:cd:a3:24:e2:4b: 83:b4:4f:57:66:9c:98:a1:8a:3e:dd:34:66:c4:b2:e2:5f:b3: f9:40:fe:ff:64:47:7e:56:ec:0e:35:37:b9:c4:c5:da:5c:93: bb:6f:88:f6:35:3f:99:87:47:a9:78:29:62:a5:08:e3:8c:cd: 03:50:96:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMzAB595J70w1rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OWY0OThjMGYtMTQyYy00NjdlLTg1NjUtNTkxNzA3NDg5NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJcIDwbFff5/GB2avUebnM98/s3F4huyxMgH jOP9Rw5jHIasAVQSQp65dH05MOmFwK8AoIjvbzEbQipjVImsIrbAmbW5BVuCRIzA M2yBtNMdaQcl+GTDTlsFFJSKpYn/kdBtynWHi4s5XPx5F2cUMnA3ra4WBOqsGA0g itx1/Y3Gc2nZWqUy7P0TNYY+DzLeCjsmJK6vRY0J0BSVM80nejX6w7Byi+kRCpMy /3v52JP03Aqt+EucPEcqmMhPqbIDNFS/efMXG2rQWMfvyvr32DP7GxA1dgEcjtuB e4+rwuhctG08weyGYAMjfHmd1Be7NQu6qiWjdeeIkaIpTHDb2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNnnsJAJphywI8/FZBv/GonNts7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEzOGQ2NzUtNTNhYS0z Y2VkLThhNWUtY2E0ZGUxZTM5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAVL38GcOQCAxkxlt6P3QcqAnuyP1dEGfa8QsnUBNREpilG3yMJX 2eUIa2jc2SSWTfdz5I2i89IJTxmk45/QV7D04zFFqO4Rg+YbT802LlnmsreevFlR +P/3EvK+ay7UWa3wOqgFmbpb2v2ZpkKQlkl3LD/WXd7jCxJaruMRDDYX0gl0RAwH Jo0vIEZqzNpmriPCuzBlmqNWu8thEWJfl0lgdMxemRqlNjxKvMyeeTnMPmqlgfy3 qgCf3g8P3en8B3XNoyTiS4O0T1dmnJihij7dNGbEsuJfs/lA/v9kR35W7A41N7nE xdpck7tviPY1P5mHR6l4KWKlCOOMzQNQlhE= -----END CERTIFICATE-----Generated at Thu May 23 02:53:54 2024 by rpki-client on console-ams.rpki-client.org