$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa File: 2f666b21-6a8f-3cad-9fc0-f60d06304712.roa (raw, json) Hash identifier: m94HSJolE7shK/3ROR1Nkr7Tx2Ga1MIfNrRi+YHqqms= Subject key identifier: 71:CE:46:20:C8:47:C8:BE:06:28:30:AE:FB:A4:AB:DC:FF:1C:A4:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553F3A170A95E2609DFB40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:2500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3f:3a:17:0a:95:e2:60:9d:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=1f3c1e4c-f0a4-48bd-81f2-ec5473db7f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fe:42:3e:32:68:47:c4:a4:fb:5c:a2:4a:7e: 32:fd:cb:e1:62:0d:26:9d:90:39:a3:16:d7:0b:4d: 0c:4d:d0:cf:b9:51:44:93:96:2b:56:84:d8:6e:91: d8:89:d1:d0:90:ae:d9:1f:08:4a:6d:6c:cf:50:34: a1:92:16:19:b2:70:11:19:e6:66:95:ff:04:0f:29: 73:39:77:27:14:31:55:de:55:34:98:f6:d3:9d:f5: 50:f0:ce:39:f3:97:0b:a8:e1:82:cd:fe:dc:b8:9e: 38:1a:92:31:18:90:0d:cc:f3:3e:a1:11:07:b9:c2: f2:0c:41:96:9c:32:37:c8:aa:a5:94:57:f7:b5:16: c3:0e:8d:2f:f5:d9:bf:f5:4d:cb:d7:17:ef:02:58: 05:dd:1c:ae:62:2a:66:b3:74:47:5c:b7:43:f4:20: 3f:ea:dd:a1:77:70:9c:e1:8b:8d:5b:e6:f5:35:53: 09:09:ab:08:9a:95:e1:e8:1d:28:be:7e:8b:59:0c: 56:e1:bf:53:1a:2b:5f:c9:e5:56:65:65:4a:6f:da: 57:7a:3f:91:d8:52:db:45:60:cb:c8:cc:e2:95:fe: 36:e8:e8:7f:6b:ef:49:82:94:33:6b:18:57:c8:5a: 7c:6f:40:08:2b:80:50:1b:5c:86:d6:53:65:c8:0e: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:46:20:C8:47:C8:BE:06:28:30:AE:FB:A4:AB:DC:FF:1C:A4:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b9:85:f2:23:eb:d4:1b:74:8c:21:85:1b:18:3e:57:58:ca: de:7d:a8:ec:ae:d8:1a:dc:c6:e5:5b:ec:0a:e0:80:45:29:a9: 5c:e5:16:ae:48:a2:b5:33:42:84:53:fc:83:0a:2f:9b:66:d7: 5f:2e:d6:c7:c1:09:84:4c:d0:39:16:6a:ef:b1:cc:3d:de:bc: 3f:5f:48:94:a1:f7:86:6e:d1:13:30:e0:d9:d5:8d:5a:e6:0a: e2:64:6b:b3:3c:49:3d:33:a4:17:3b:e6:07:24:cb:39:54:00: 9f:47:cf:ab:5b:d0:10:47:28:4a:df:82:ad:83:3d:a0:e5:92: 12:a3:8a:f3:4c:53:79:ce:02:ee:2c:91:8a:ad:f1:51:b5:3d: a0:d4:19:33:3c:d2:1c:62:48:df:3e:5a:86:8b:66:eb:b0:60: ba:ec:65:05:92:b0:54:e8:07:58:ef:3c:94:2c:d8:74:a9:b9: 50:54:e2:c5:27:ca:e6:69:3c:ae:ff:39:df:61:b9:30:e0:b6: 4d:97:04:25:83:5a:2c:67:f6:42:90:d3:0b:de:54:64:8f:32: 7a:34:9a:e4:94:17:f9:28:fb:59:53:7d:ea:c6:b5:18:2f:c5: c1:fb:c5:83:c5:b3:11:e7:c6:56:56:42:58:54:8d:d0:7a:1d: 1c:01:af:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVT86FwqV4mCd+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MWYzYzFlNGMtZjBhNC00OGJkLTgxZjItZWM1NDczZGI3ZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v5CPjJoR8Sk+1yiSn4y/cvhYg0mnZA5oxbX C00MTdDPuVFEk5YrVoTYbpHYidHQkK7ZHwhKbWzPUDShkhYZsnARGeZmlf8EDylz OXcnFDFV3lU0mPbTnfVQ8M4585cLqOGCzf7cuJ44GpIxGJANzPM+oREHucLyDEGW nDI3yKqllFf3tRbDDo0v9dm/9U3L1xfvAlgF3RyuYipms3RHXLdD9CA/6t2hd3Cc 4YuNW+b1NVMJCasImpXh6B0ovn6LWQxW4b9TGitfyeVWZWVKb9pXej+R2FLbRWDL yMzilf426Oh/a+9JgpQzaxhXyFp8b0AIK4BQG1yG1lNlyA5M6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHHORiDIR8i+Bigwrvukq9z/HKTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY2NjZiMjEtNmE4Zi0z Y2FkLTlmYzAtZjYwZDA2MzA0NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcLmF8iPr1Bt0jCGFGxg+V1jK3n2o7K7YGtzG5VvsCuCARSmpXOUW rkiitTNChFP8gwovm2bXXy7Wx8EJhEzQORZq77HMPd68P19IlKH3hm7REzDg2dWN WuYK4mRrszxJPTOkFzvmByTLOVQAn0fPq1vQEEcoSt+CrYM9oOWSEqOK80xTec4C 7iyRiq3xUbU9oNQZMzzSHGJI3z5ahotm67BguuxlBZKwVOgHWO88lCzYdKm5UFTi xSfK5mk8rv8532G5MOC2TZcEJYNaLGf2QpDTC95UZI8yejSa5JQX+Sj7WVN96sa1 GC/FwfvFg8WzEefGVlZCWFSN0HodHAGvgA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:55 2024 by rpki-client on console-fra.rpki-client.org