$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa File: 1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa (raw, json) Hash identifier: rQ9CKXYnGsMU6Da/H352lE2NiNIJeRaspK+MUzExtcM= Subject key identifier: C4:C9:1F:F3:BB:8C:3D:02:3D:81:7F:76:64:60:91:F8:8D:E0:5B:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553DC6BFC7AAEFDD086E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3d:c6:bf:c7:aa:ef:dd:08:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=aa38a0ae-fec3-404c-b7c9-459ba2906920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:56:7d:38:a7:a7:94:90:d2:a1:7e:df:c1: 98:63:3d:c4:95:87:eb:6f:56:3e:e4:00:be:8e:54: da:26:12:e0:40:d4:1d:34:02:94:64:10:22:7e:b3: 0b:3c:fa:29:73:97:b7:f5:cd:0c:8c:f6:8f:26:06: bf:3b:1c:4e:e7:c3:f8:ef:b5:5d:8a:46:7a:fb:93: 80:ea:61:cb:17:36:a9:c5:af:b6:29:99:c6:ff:28: ce:89:bf:01:29:78:32:95:c0:2f:38:31:f3:0e:c8: c8:c9:f5:c4:4b:85:d6:b6:ad:2a:2b:c8:8b:b4:0c: 05:c5:38:42:d2:3a:9c:5d:ba:c5:00:4d:91:3a:29: 8a:65:68:51:34:24:af:1d:0b:46:bf:eb:07:e4:26: f2:64:ef:75:d0:5f:dd:65:7d:28:05:54:16:17:13: f7:6d:6e:c3:1f:4e:28:a8:59:4a:40:45:12:7b:28: 07:0f:d0:86:4c:5c:16:ac:4f:2e:4f:4a:46:cf:60: 9f:20:f7:28:76:96:48:a0:d6:16:4a:a7:c1:9d:07: 75:28:e0:0b:9b:ac:4e:40:25:5d:c4:32:a0:d3:f1: 68:06:33:6c:fe:07:91:de:e9:ee:61:8d:1f:72:b4: b6:6f:f3:93:6c:6e:7a:33:36:c0:cd:f6:0a:aa:59: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:1F:F3:BB:8C:3D:02:3D:81:7F:76:64:60:91:F8:8D:E0:5B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1df91eca-4b8a-3ab3-899b-db4c98bc5833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:bc:96:6e:15:df:be:10:c7:ef:a0:04:ac:73:d2:b9:32:e3: 10:46:8b:06:fa:b8:c4:a3:a3:cf:68:73:6d:36:4e:ca:d8:74: cb:6c:04:97:35:43:87:15:42:f5:5b:28:90:4a:51:6a:a5:71: 42:43:8c:eb:0b:d8:de:0d:8e:29:2c:19:2d:c6:da:cd:4c:a5: 33:d2:62:a6:82:b7:84:23:2d:b1:31:d0:54:bb:70:12:76:b1: 44:09:30:bd:d3:11:ee:78:2c:9b:b3:b5:ef:97:8c:37:99:ae: 51:5a:1f:08:3e:1d:af:56:95:1e:e4:6e:50:cc:20:ac:5d:4f: 73:ad:90:b5:79:72:97:52:52:95:94:8c:7a:fe:cf:c0:b1:22: 28:b9:a2:30:35:d2:f6:44:0f:64:d1:66:1b:0f:0a:7c:00:2e: 8f:e8:80:95:1f:91:91:81:29:6e:dc:c5:d0:99:3b:d8:8c:7f: e7:81:53:a6:8b:1d:db:26:fb:5e:d8:97:16:27:49:0c:44:8c: dc:bf:9c:7f:ce:06:3e:d1:41:ca:6f:19:a2:de:8a:fd:0f:d9: 95:25:10:e3:7e:de:b8:f6:a6:5b:6e:a4:28:27:a5:5e:f7:80: 42:d0:67:d2:a3:7f:17:b4:85:09:54:36:53:8c:82:51:6d:f5: eb:34:cc:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVT3Gv8eq790IboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YWEzOGEwYWUtZmVjMy00MDRjLWI3YzktNDU5YmEyOTA2OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLpWfTinp5SQ0qF+38GYYz3ElYfrb1Y+5AC+ jlTaJhLgQNQdNAKUZBAifrMLPPopc5e39c0MjPaPJga/OxxO58P477VdikZ6+5OA 6mHLFzapxa+2KZnG/yjOib8BKXgylcAvODHzDsjIyfXES4XWtq0qK8iLtAwFxThC 0jqcXbrFAE2ROimKZWhRNCSvHQtGv+sH5CbyZO910F/dZX0oBVQWFxP3bW7DH04o qFlKQEUSeygHD9CGTFwWrE8uT0pGz2CfIPcodpZIoNYWSqfBnQd1KOALm6xOQCVd xDKg0/FoBjNs/geR3unuYY0fcrS2b/OTbG56MzbAzfYKqllZqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTJH/O7jD0CPYF/dmRgkfiN4FvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRmOTFlY2EtNGI4YS0z YWIzLTg5OWItZGI0Yzk4YmM1ODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI+8lm4V374Qx++gBKxz0rky4xBGiwb6uMSjo89oc202TsrYdMts BJc1Q4cVQvVbKJBKUWqlcUJDjOsL2N4NjiksGS3G2s1MpTPSYqaCt4QjLbEx0FS7 cBJ2sUQJML3TEe54LJuzte+XjDeZrlFaHwg+Ha9WlR7kblDMIKxdT3OtkLV5cpdS UpWUjHr+z8CxIii5ojA10vZED2TRZhsPCnwALo/ogJUfkZGBKW7cxdCZO9iMf+eB U6aLHdsm+17YlxYnSQxEjNy/nH/OBj7RQcpvGaLeiv0P2ZUlEON+3rj2pltupCgn pV73gELQZ9Kjfxe0hQlUNlOMglFt9es0zL8= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:52 2024 by rpki-client on console-fra.rpki-client.org