$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52c5d0cf-5565-32df-9ebc-bca73c6a0c47.roa File: 52c5d0cf-5565-32df-9ebc-bca73c6a0c47.roa (raw, json) Hash identifier: xYzDwGOmMKhByqrtHr5Dm4rWWuHvxq4v7h+2lthVSHs= Subject key identifier: 48:01:FA:D2:98:03:C1:9A:B1:6C:53:57:B4:D1:CB:DB:E0:56:98:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332E9DC50E648289FACB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52c5d0cf-5565-32df-9ebc-bca73c6a0c47.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2e:9d:c5:0e:64:82:89:fa:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=9ecf4d77-5d0e-4861-967d-82267a8aa8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:d1:c6:9c:cf:c2:f3:5c:90:b5:0f:c9:1b: 48:38:a5:61:4c:f9:00:06:26:4e:24:16:0e:dd:20: df:64:7d:14:1a:24:51:d9:eb:83:91:93:e0:c3:09: 97:67:d9:fb:0f:82:c2:ea:aa:da:93:68:b2:3d:e7: b4:fc:d7:fc:ae:d1:50:d6:c1:6f:c4:34:79:d4:ce: 22:d7:23:99:f7:25:eb:b7:99:02:92:b4:48:65:bf: 92:92:68:5b:7f:0d:ce:2f:54:1a:03:0f:6e:13:dd: 23:2c:aa:67:1d:83:80:1c:89:4d:66:7e:68:36:99: 22:29:c0:3c:78:9d:01:7d:37:67:e0:ed:0b:ef:54: 8b:8b:d9:bf:61:98:e3:12:a8:3c:c5:b5:7d:9f:16: f6:0e:0f:6f:43:be:46:9d:1f:9e:0f:f6:b5:41:b0: bc:bc:70:96:90:32:a3:b5:a6:77:b7:da:0f:be:9c: 98:52:06:23:57:c8:91:5e:11:3b:e7:7f:fb:92:1e: 5d:00:23:6c:02:02:e7:6c:9f:44:d5:3e:b7:b2:07: 34:e1:33:b1:42:94:8f:65:e6:34:e9:dc:c0:12:67: bd:39:3a:32:59:43:a4:44:94:5d:9a:da:2b:71:af: f8:ce:f1:15:b7:3b:de:59:ea:b0:ba:c1:dd:b5:ae: c2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:FA:D2:98:03:C1:9A:B1:6C:53:57:B4:D1:CB:DB:E0:56:98:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52c5d0cf-5565-32df-9ebc-bca73c6a0c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fb:0f:05:eb:45:ba:2f:47:2c:62:18:70:6b:8c:7b:bb:7b: 64:92:ea:72:e2:5d:04:4a:3c:6d:6d:4b:42:ab:9a:d6:50:fc: 80:31:db:52:b8:3b:86:fb:45:dc:a6:15:3f:90:a0:67:66:a6: b4:37:78:7a:3c:88:93:34:32:49:80:b3:77:ef:d8:e1:9d:f7: 23:37:02:f3:05:be:eb:19:5b:10:f0:26:32:34:f8:1e:da:87: bd:47:b4:36:0e:f0:d2:86:27:02:85:38:27:d1:ae:88:76:73: 56:9b:69:0a:f9:c5:8d:ea:71:70:11:8c:92:47:94:d1:26:98: 3a:fe:8e:7d:49:5d:db:44:35:56:98:72:77:3d:94:d5:18:de: 2f:9c:3e:c6:b7:d5:8a:4f:c8:11:cb:64:0d:33:80:db:9d:dd: f8:17:17:15:d9:06:fe:85:75:45:25:d8:4b:e3:b8:4b:ff:04: 18:64:5f:c6:86:69:4b:7e:df:61:4f:4c:b2:ed:60:ed:86:6a: e4:36:34:46:03:3c:fc:c3:61:3e:6c:22:b9:92:e1:ca:87:07: a2:14:bf:35:a0:3f:88:0c:36:d3:62:48:cf:18:b6:19:67:d2: e8:e7:57:e1:ad:f6:03:46:46:fb:35:ed:bc:b7:8a:96:ab:bd: 70:16:84:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy6dxQ5kgon6ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OWVjZjRkNzctNWQwZS00ODYxLTk2N2QtODIyNjdhOGFhOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaXRxpzPwvNckLUPyRtIOKVhTPkABiZOJBYO 3SDfZH0UGiRR2euDkZPgwwmXZ9n7D4LC6qrak2iyPee0/Nf8rtFQ1sFvxDR51M4i 1yOZ9yXrt5kCkrRIZb+Skmhbfw3OL1QaAw9uE90jLKpnHYOAHIlNZn5oNpkiKcA8 eJ0BfTdn4O0L71SLi9m/YZjjEqg8xbV9nxb2Dg9vQ75GnR+eD/a1QbC8vHCWkDKj taZ3t9oPvpyYUgYjV8iRXhE753/7kh5dACNsAgLnbJ9E1T63sgc04TOxQpSPZeY0 6dzAEme9OToyWUOkRJRdmtorca/4zvEVtzveWeqwusHdta7C4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgB+tKYA8GasWxTV7TRy9vgVpiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTJjNWQwY2YtNTU2NS0z MmRmLTllYmMtYmNhNzNjNmEwYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEv7DwXrRbovRyxiGHBrjHu7e2SS6nLiXQRKPG1tS0KrmtZQ/IAx 21K4O4b7RdymFT+QoGdmprQ3eHo8iJM0MkmAs3fv2OGd9yM3AvMFvusZWxDwJjI0 +B7ah71HtDYO8NKGJwKFOCfRroh2c1abaQr5xY3qcXARjJJHlNEmmDr+jn1JXdtE NVaYcnc9lNUY3i+cPsa31YpPyBHLZA0zgNud3fgXFxXZBv6FdUUl2EvjuEv/BBhk X8aGaUt+32FPTLLtYO2GauQ2NEYDPPzDYT5sIrmS4cqHB6IUvzWgP4gMNtNiSM8Y thln0ujnV+Gt9gNGRvs17by3iparvXAWhKk= -----END CERTIFICATE-----Generated at Thu May 23 13:44:57 2024 by rpki-client on console-fra.rpki-client.org