$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e9b1a66-091d-3f53-887d-2b09200ef885.roa File: 1e9b1a66-091d-3f53-887d-2b09200ef885.roa (raw, json) Hash identifier: HnM9Gy3REw2YetrsRtpV/xOxS0owT2Dl3RHiFp0EVrs= Subject key identifier: 18:0E:3C:CC:F3:2C:AF:FD:0E:4E:F8:2C:93:22:CA:6D:10:64:A8:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550DF0B18FDCC7257C5B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e9b1a66-091d-3f53-887d-2b09200ef885.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0d:f0:b1:8f:dc:c7:25:7c:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=6e4359ac-d005-4c26-9d33-af65da0dc990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:92:d2:61:d1:19:4f:6d:97:c5:1e:a7:91:45: 4f:67:ef:98:a4:bb:74:4a:34:20:62:7f:2f:8f:4e: 6a:70:fc:37:1b:10:35:bc:ec:99:d9:07:44:bd:5c: 78:86:88:f6:cd:22:9f:35:3d:10:e0:28:bf:cc:af: 2b:59:66:6c:2d:4e:11:46:eb:30:6e:2b:93:53:f6: 38:38:67:34:e4:11:9d:cf:dc:22:fc:84:1b:38:46: 44:62:ab:4c:3a:9f:4c:53:c8:d0:14:29:1f:d4:43: 56:a6:2d:d3:91:13:14:76:36:39:6c:d1:a8:11:b3: 51:64:61:d8:0a:d8:f5:2e:ca:e6:36:a4:80:8d:aa: cc:42:6f:c5:a9:06:51:de:27:7e:f6:f3:e1:1a:9b: 46:99:50:ca:a5:60:8e:ba:48:ec:03:0a:ea:a7:ad: 17:16:28:cd:68:79:45:4e:70:f2:35:dc:24:dd:24: 2d:a5:a9:cb:5a:f2:85:26:ca:b0:d8:41:15:c4:8e: 21:a8:3e:39:87:be:0d:81:42:a4:76:b4:1a:29:44: 3b:61:1e:af:04:61:51:16:d0:50:97:0b:85:2c:1f: 08:70:65:44:e1:2b:7c:b9:be:ae:d2:b6:55:00:4f: 8b:a0:16:10:c3:fc:87:4e:5a:51:f9:14:ae:d1:1c: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0E:3C:CC:F3:2C:AF:FD:0E:4E:F8:2C:93:22:CA:6D:10:64:A8:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e9b1a66-091d-3f53-887d-2b09200ef885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e5:43:0d:f9:a4:68:87:13:2c:21:c0:74:60:1b:46:fe:ff: 24:45:f2:41:2b:b1:af:b9:db:c4:ea:d0:4f:f4:73:69:7e:e4: 8c:77:b0:ac:6e:a7:55:63:8f:56:8d:c2:80:86:f4:65:31:9e: 36:d5:bf:02:c2:af:cd:f6:02:9e:03:29:ae:80:20:52:ee:39: 93:f4:0f:75:87:aa:73:75:dc:6c:fd:4e:e6:4d:de:8e:b0:60: 96:f3:b1:c3:58:45:17:f9:88:06:c4:79:1b:8d:78:2c:4a:5d: b0:c1:a2:bc:ff:3d:7c:98:fd:21:8d:a1:b4:68:3d:4d:f3:42: fb:a6:d7:af:a8:e2:22:58:61:89:50:f9:76:58:ff:24:e7:0a: 67:d2:11:43:9e:12:75:08:12:7c:41:43:c1:48:46:e5:4c:7a: 14:7f:00:a3:a1:c1:0f:60:f5:36:2a:6d:61:e6:5e:17:2e:9c: 9d:87:41:f3:60:1e:79:b3:54:5e:f9:3a:90:9a:48:5e:1f:9a: 8c:a6:74:4e:0c:d6:b4:d5:27:04:5c:f3:59:73:1e:e2:3d:92: 10:c4:80:d5:18:13:6f:e7:d9:bf:64:59:55:a1:19:0b:85:ac: 2d:4a:21:f1:27:b5:35:73:b9:7b:f9:cc:3e:f7:b0:44:b6:d5: 22:fe:04:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVQ3wsY/cxyV8WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NmU0MzU5YWMtZDAwNS00YzI2LTlkMzMtYWY2NWRhMGRjOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5LSYdEZT22XxR6nkUVPZ++YpLt0SjQgYn8v j05qcPw3GxA1vOyZ2QdEvVx4hoj2zSKfNT0Q4Ci/zK8rWWZsLU4RRuswbiuTU/Y4 OGc05BGdz9wi/IQbOEZEYqtMOp9MU8jQFCkf1ENWpi3TkRMUdjY5bNGoEbNRZGHY Ctj1LsrmNqSAjarMQm/FqQZR3id+9vPhGptGmVDKpWCOukjsAwrqp60XFijNaHlF TnDyNdwk3SQtpanLWvKFJsqw2EEVxI4hqD45h74NgUKkdrQaKUQ7YR6vBGFRFtBQ lwuFLB8IcGVE4St8ub6u0rZVAE+LoBYQw/yHTlpR+RSu0RwUhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgOPMzzLK/9Dk74LJMiym0QZKiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWU5YjFhNjYtMDkxZC0z ZjUzLTg4N2QtMmIwOTIwMGVmODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3lQw35pGiHEywhwHRgG0b+/yRF8kErsa+528Tq0E/0c2l+5Ix3 sKxup1Vjj1aNwoCG9GUxnjbVvwLCr832Ap4DKa6AIFLuOZP0D3WHqnN13Gz9TuZN 3o6wYJbzscNYRRf5iAbEeRuNeCxKXbDBorz/PXyY/SGNobRoPU3zQvum16+o4iJY YYlQ+XZY/yTnCmfSEUOeEnUIEnxBQ8FIRuVMehR/AKOhwQ9g9TYqbWHmXhcunJ2H QfNgHnmzVF75OpCaSF4fmoymdE4M1rTVJwRc81lzHuI9khDEgNUYE2/n2b9kWVWh GQuFrC1KIfEntTVzuXv5zD73sES21SL+BC4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:52 2024 by rpki-client on console-fra.rpki-client.org