$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63aa370b-f5bf-3016-ba56-088f5753240b.roa File: 63aa370b-f5bf-3016-ba56-088f5753240b.roa (raw, json) Hash identifier: 6Mwr7sCWTcIHfFa/28ySgbej4JHl7cUeqkEp3kWEr58= Subject key identifier: B6:47:04:3C:81:26:8A:1F:17:76:E7:BD:A9:E4:41:8D:F5:80:A4:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553D1C8405F4DD6685F0E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63aa370b-f5bf-3016-ba56-088f5753240b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3d:1c:84:05:f4:dd:66:85:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=b5829056-8ae2-46e1-a143-7df2b1f567fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:01:a8:c2:c3:d0:1f:c1:47:9e:d2:93:3a: 09:b7:4e:a4:18:b1:e9:64:f4:0c:0a:99:66:ef:db: 2f:d6:65:99:10:ef:6b:82:9b:6a:44:1f:11:da:d8: 1c:08:1e:9b:02:35:14:78:86:43:b2:bb:64:4a:29: 89:c2:e0:b5:54:51:40:04:f7:ad:3c:d9:c8:7e:68: 58:88:ea:0c:6f:5a:21:ab:f2:17:5b:44:39:8d:fa: 04:e8:69:21:47:63:26:1d:da:b6:45:27:6b:ce:27: cd:d5:94:6c:10:3f:29:e8:01:3d:c0:32:4b:fb:e9: d3:f4:94:ca:7b:64:56:5d:a7:96:47:67:79:8e:48: 05:a6:a7:5f:ce:a5:7a:c1:09:bb:c0:a1:6a:a5:c5: 26:4e:28:39:e1:90:c8:62:b1:67:48:ce:74:b6:6e: ea:f6:a9:15:dc:3f:df:ef:4e:b7:44:cf:c3:37:8b: b0:8b:92:1f:69:ac:71:cf:a3:58:d2:53:d6:6d:3c: f0:38:fb:0f:00:8a:39:f5:bc:05:f3:44:9e:90:44: f3:d6:15:60:35:cb:78:bd:df:ed:af:d6:ec:ab:43: 50:e8:c6:c8:64:4c:15:46:87:f1:bb:fe:59:54:31: ce:2e:18:b9:a9:32:92:de:cc:e1:5f:a1:84:60:19: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:47:04:3C:81:26:8A:1F:17:76:E7:BD:A9:E4:41:8D:F5:80:A4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63aa370b-f5bf-3016-ba56-088f5753240b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:45:eb:45:ea:2c:ed:92:8d:09:67:0b:b2:56:65:b2:d4:b4: 41:71:30:ad:e4:bc:cd:77:b1:a2:e2:ba:50:87:0c:ec:f5:37: 79:5e:5e:e2:3e:ab:2d:ea:e4:21:75:73:d5:83:88:ca:c0:cd: 2a:e3:a6:00:7c:9e:2c:6a:cf:df:d1:e9:94:af:dd:a7:93:df: 9f:4e:b1:51:5a:35:80:07:e1:df:67:d7:36:be:7d:b8:77:9b: 4b:0e:b3:b2:15:44:2c:3b:0e:cb:56:91:6c:b0:78:d0:69:d8: 78:2c:f5:b6:4e:09:00:8b:de:8d:10:f2:fb:a3:3d:b6:94:e1: 5f:14:e2:98:0e:fb:da:74:eb:5b:e5:e6:b4:c6:79:55:b1:25: 2b:5c:dd:8d:c6:46:89:f9:6a:4e:bb:78:ab:34:4c:fa:ea:6f: da:24:4f:7f:f8:18:fc:6c:9d:47:5b:bc:2d:d6:1f:f5:ca:6a: 32:7e:51:b4:1f:5f:c4:60:3e:a7:c6:72:fa:7c:ef:77:8b:ef: d6:51:79:41:6b:c5:6e:5a:3c:59:26:94:6a:db:0b:7f:16:4c: 7f:58:52:5b:d3:80:a8:45:f7:27:fb:68:90:28:d4:9d:3d:cc: e8:c8:27:0c:23:67:51:aa:ac:4e:5c:fb:01:20:20:18:3d:40: ea:ca:39:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVT0chAX03WaF8OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YjU4MjkwNTYtOGFlMi00NmUxLWExNDMtN2RmMmIxZjU2N2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveIBqMLD0B/BR57SkzoJt06kGLHpZPQMCplm 79sv1mWZEO9rgptqRB8R2tgcCB6bAjUUeIZDsrtkSimJwuC1VFFABPetPNnIfmhY iOoMb1ohq/IXW0Q5jfoE6GkhR2MmHdq2RSdrzifN1ZRsED8p6AE9wDJL++nT9JTK e2RWXaeWR2d5jkgFpqdfzqV6wQm7wKFqpcUmTig54ZDIYrFnSM50tm7q9qkV3D/f 7063RM/DN4uwi5Ifaaxxz6NY0lPWbTzwOPsPAIo59bwF80SekETz1hVgNct4vd/t r9bsq0NQ6MbIZEwVRofxu/5ZVDHOLhi5qTKS3szhX6GEYBk33wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZHBDyBJoofF3bnvankQY31gKSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjNhYTM3MGItZjViZi0z MDE2LWJhNTYtMDg4ZjU3NTMyNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBF60XqLO2SjQlnC7JWZbLUtEFxMK3kvM13saLiulCHDOz1N3le XuI+qy3q5CF1c9WDiMrAzSrjpgB8nixqz9/R6ZSv3aeT359OsVFaNYAH4d9n1za+ fbh3m0sOs7IVRCw7DstWkWyweNBp2Hgs9bZOCQCL3o0Q8vujPbaU4V8U4pgO+9p0 61vl5rTGeVWxJStc3Y3GRon5ak67eKs0TPrqb9okT3/4GPxsnUdbvC3WH/XKajJ+ UbQfX8RgPqfGcvp873eL79ZReUFrxW5aPFkmlGrbC38WTH9YUlvTgKhF9yf7aJAo 1J09zOjIJwwjZ1GqrE5c+wEgIBg9QOrKOew= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:46 2024 by rpki-client on console-ams.rpki-client.org