$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa File: 3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa (raw, json) Hash identifier: dUaA7JOemP49ikaUiRViEyz63HNh1oFE1IHfHkLdS8c= Subject key identifier: 17:FB:AE:A3:E3:3B:23:46:E3:87:60:2F:76:47:16:53:31:2B:2E:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15510C11EEB777A3B0B2200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:3500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:10:c1:1e:eb:77:7a:3b:0b:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=d5747fa2-2101-48d8-8013-c9f9ac308605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:b3:4f:3d:fd:ac:c7:13:93:62:8d:b6:fd: c3:0d:30:01:2e:3c:da:de:05:df:03:13:c2:5f:0a: 11:27:e3:c7:8f:e6:f8:3f:99:88:c5:da:c6:cc:49: 75:bd:0d:5b:22:fe:76:b2:4a:2d:9a:49:f3:5d:0e: ae:bb:55:d8:4f:78:02:51:c5:e6:39:ac:88:8f:c6: 6b:44:ef:52:f3:84:52:7c:af:ea:5e:72:c5:d1:08: 78:0c:a1:d3:35:0f:f6:c5:23:74:42:7c:7a:92:7a: 84:f1:f4:f1:8a:3d:13:c2:25:7f:ac:93:85:7f:aa: 0e:fa:77:eb:48:26:b9:8e:95:07:55:6d:fe:ba:9b: d2:f8:8c:f3:34:de:f9:66:b5:e4:83:fe:27:67:a4: 36:fa:f7:55:c7:e8:00:65:9e:11:6d:d0:15:c8:c6: 53:3e:df:b8:cc:9e:d4:3e:f4:27:31:1e:61:f7:50: c8:79:71:0b:73:b2:50:60:12:b4:ba:2e:14:22:b0: 55:49:6f:7f:53:b4:ef:69:ef:2b:f1:00:92:2d:e5: 2f:32:9d:40:67:12:60:1b:82:1f:5e:fe:56:b6:cd: 4e:66:22:a2:87:ac:30:cf:01:34:3f:a2:b6:9f:5e: 61:b9:12:51:af:07:ac:26:e5:b6:31:0f:26:6c:13: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:AE:A3:E3:3B:23:46:E3:87:60:2F:76:47:16:53:31:2B:2E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fc68589-6cb8-3512-9d38-5c9324c41c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:66:96:e9:05:4c:29:13:3a:ee:e8:ec:bb:4d:16:22:e8:38: 17:06:14:10:c4:64:cf:84:db:2f:a2:80:b7:b3:9a:f6:b5:46: ef:d4:3f:bb:85:1d:09:8d:44:a3:3a:39:d8:6e:36:67:91:f0: ff:50:5f:9e:1d:6c:41:61:36:e0:fe:23:50:3d:82:70:3e:78: db:1d:8c:5b:45:e8:65:5d:71:c9:3f:f5:47:a5:0a:e3:2b:08: 40:4c:3e:1d:96:64:9c:49:9e:03:4a:5e:67:71:60:08:9b:10: a3:a0:e8:bd:de:9f:61:c6:d0:66:b2:f0:84:bc:de:23:84:29: 02:e5:42:b4:cf:03:a4:ed:22:41:d2:36:e4:af:ef:3b:1c:49: aa:b3:db:cf:cb:1b:10:74:7b:e2:d8:21:d5:7e:39:8e:66:09: e2:44:30:26:e9:05:30:32:50:c1:e1:35:24:dd:9c:0f:39:e5: f7:2a:06:b4:8d:df:fa:ea:d2:28:cd:94:8a:90:63:45:fc:4c: d0:f6:31:f3:3d:f8:26:fe:1f:4a:ce:fc:c7:2c:e3:1d:cd:97: 5a:23:28:81:55:dd:d7:88:74:12:c2:03:33:48:24:b9:62:c9: 98:fd:64:7d:04:03:a3:2a:d5:76:20:01:2f:6f:3e:1f:6e:7c: d9:1e:2f:7d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVRDBHut3ejsLIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZDU3NDdmYTItMjEwMS00OGQ4LTgwMTMtYzlmOWFjMzA4NjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkGzTz39rMcTk2KNtv3DDTABLjza3gXfAxPC XwoRJ+PHj+b4P5mIxdrGzEl1vQ1bIv52skotmknzXQ6uu1XYT3gCUcXmOayIj8Zr RO9S84RSfK/qXnLF0Qh4DKHTNQ/2xSN0Qnx6knqE8fTxij0TwiV/rJOFf6oO+nfr SCa5jpUHVW3+upvS+IzzNN75ZrXkg/4nZ6Q2+vdVx+gAZZ4RbdAVyMZTPt+4zJ7U PvQnMR5h91DIeXELc7JQYBK0ui4UIrBVSW9/U7Tvae8r8QCSLeUvMp1AZxJgG4If Xv5Wts1OZiKih6wwzwE0P6K2n15huRJRrwesJuW2MQ8mbBPEHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBf7rqPjOyNG44dgL3ZHFlMxKy6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ZjNjg1ODktNmNiOC0z NTEyLTlkMzgtNWM5MzI0YzQxYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAg2aW6QVMKRM67ujsu00WIug4FwYUEMRkz4TbL6KAt7Oa9rVG79Q/ u4UdCY1Eozo52G42Z5Hw/1Bfnh1sQWE24P4jUD2CcD542x2MW0XoZV1xyT/1R6UK 4ysIQEw+HZZknEmeA0peZ3FgCJsQo6Dovd6fYcbQZrLwhLzeI4QpAuVCtM8DpO0i QdI25K/vOxxJqrPbz8sbEHR74tgh1X45jmYJ4kQwJukFMDJQweE1JN2cDznl9yoG tI3f+urSKM2UipBjRfxM0PYx8z34Jv4fSs78xyzjHc2XWiMogVXd14h0EsIDM0gk uWLJmP1kfQQDoyrVdiABL28+H2582R4vfQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:58 2024 by rpki-client on console-fra.rpki-client.org