$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa File: 219bc4aa-8142-3f5e-a469-4a615b68d218.roa (raw, json) Hash identifier: QD2t0N8mF+1J7Kru68eom+nbw/B7Xn3CYcrU60fx+gg= Subject key identifier: 43:1F:ED:B6:2B:51:20:9C:AB:6F:55:76:C9:F2:EC:FF:8F:FD:BA:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551050666DB555C9153580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:10:50:66:6d:b5:55:c9:15:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=fd3eed4c-b058-4411-8807-82b621ffd18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:4a:e8:f0:04:46:56:75:fc:5e:0f:30:1b: 12:e1:e1:1d:fd:ee:21:8d:80:86:c3:a1:70:aa:11: 5c:67:90:c5:69:12:89:84:8c:09:63:9d:5b:2a:b0: ac:89:ed:6a:be:6e:07:a4:2a:92:45:45:41:8a:04: 06:67:2a:24:83:af:02:9a:a9:81:39:ad:7d:81:47: 52:73:81:a8:3a:ba:06:93:d0:ad:76:6f:d6:28:b7: d5:69:2e:33:54:ee:3b:70:64:a3:80:b5:92:77:75: 23:4f:95:d0:48:a0:89:35:d1:05:e1:bb:b9:f1:ee: 59:1f:62:63:0e:47:2f:aa:9d:f2:ae:2f:f6:54:63: 54:5c:78:47:fd:42:23:95:fe:f7:91:60:95:cd:7f: 14:bc:16:2f:4f:d0:49:66:5f:50:28:2e:15:63:f1: 2e:38:4c:74:dc:16:9b:1a:c2:dd:26:a9:c9:80:ae: ae:8c:08:ff:82:25:8a:86:ba:c0:cd:f3:39:b4:f9: 84:0e:db:ef:6d:63:7c:08:b3:e4:6b:d9:21:bd:b2: a0:77:cf:19:b7:5c:01:5e:4f:79:f4:d5:f4:a8:bc: 14:f3:04:ea:ee:76:d8:5a:57:7d:9f:e5:31:21:4f: b0:37:3b:25:75:9f:2d:dd:a0:ff:3e:56:b6:53:a3: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1F:ED:B6:2B:51:20:9C:AB:6F:55:76:C9:F2:EC:FF:8F:FD:BA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:11:d4:28:40:aa:3d:06:24:d5:3f:af:83:85:c4:44:c3:89: 28:43:9f:82:5e:dc:aa:e5:3e:ca:73:e5:e0:30:3d:fa:09:0a: 3c:e2:b5:60:e6:8c:f7:90:fd:3c:8e:75:8a:82:af:95:e3:b4: ab:f1:13:f4:67:5d:82:27:7f:f2:8b:c1:5d:c8:75:67:bd:8d: c9:b8:b6:11:2e:1b:b3:47:18:07:30:81:f9:12:8b:db:d6:d0: 6c:08:5e:7c:fa:f1:61:28:93:5a:1c:56:e1:41:19:eb:62:9c: 34:25:3f:a2:5c:cb:34:41:e9:af:57:42:ef:ba:5c:92:49:ed: 0c:5c:9a:ef:eb:a2:f0:b4:4b:0a:6d:36:c7:4d:ed:b8:08:b9: 88:dc:ed:66:6c:55:5d:ca:79:6d:1c:af:7c:de:60:d9:f6:5b: 4e:22:18:8d:4c:d5:bd:8d:ec:f6:92:e7:62:43:b6:7d:48:0b: e6:2e:5f:a4:d8:c2:ba:dd:89:a4:23:6f:85:aa:a8:d8:eb:87: 26:8c:88:a8:fe:be:0e:9b:15:be:70:48:7f:42:2f:9f:f5:fd: e2:59:df:62:65:91:ed:be:e2:b9:f8:a4:e1:9b:25:0a:81:b5: a3:63:a0:0a:cb:c8:04:0a:fa:32:17:02:0c:da:35:05:c3:e4: 7e:29:e5:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVRBQZm21VckVNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZmQzZWVkNGMtYjA1OC00NDExLTg4MDctODJiNjIxZmZkMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8pK6PAERlZ1/F4PMBsS4eEd/e4hjYCGw6Fw qhFcZ5DFaRKJhIwJY51bKrCsie1qvm4HpCqSRUVBigQGZyokg68CmqmBOa19gUdS c4GoOroGk9Ctdm/WKLfVaS4zVO47cGSjgLWSd3UjT5XQSKCJNdEF4bu58e5ZH2Jj Dkcvqp3yri/2VGNUXHhH/UIjlf73kWCVzX8UvBYvT9BJZl9QKC4VY/EuOEx03Bab GsLdJqnJgK6ujAj/giWKhrrAzfM5tPmEDtvvbWN8CLPka9khvbKgd88Zt1wBXk95 9NX0qLwU8wTq7nbYWld9n+UxIU+wNzsldZ8t3aD/Pla2U6NW6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEMf7bYrUSCcq29Vdsny7P+P/bqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE5YmM0YWEtODE0Mi0z ZjVlLWE0NjktNGE2MTViNjhkMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAahHUKECqPQYk1T+vg4XERMOJKEOfgl7cquU+ynPl4DA9+gkKPOK1 YOaM95D9PI51ioKvleO0q/ET9Gddgid/8ovBXch1Z72Nybi2ES4bs0cYBzCB+RKL 29bQbAhefPrxYSiTWhxW4UEZ62KcNCU/olzLNEHpr1dC77pckkntDFya7+ui8LRL Cm02x03tuAi5iNztZmxVXcp5bRyvfN5g2fZbTiIYjUzVvY3s9pLnYkO2fUgL5i5f pNjCut2JpCNvhaqo2OuHJoyIqP6+DpsVvnBIf0Ivn/X94lnfYmWR7b7iufik4Zsl CoG1o2OgCsvIBAr6MhcCDNo1BcPkfinlSg== -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:35 2024 by rpki-client on console-ams.rpki-client.org