$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa File: 6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa (raw, json) Hash identifier: rAXGEPe/rILJ1PHOclZS7KSL2vi9SK8twNv1mLVKN/I= Subject key identifier: 01:21:5F:9E:C5:C4:A3:A5:23:1D:46:C0:AC:68:E5:6B:60:8C:E9:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550E7E2A4EA11C700A0EA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0e:7e:2a:4e:a1:1c:70:0a:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=d301025d-75eb-4553-8eb8-fbe42047d6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:ff:61:26:cc:6e:e1:01:07:46:c7:f8:45: 63:ae:9b:2b:9f:9b:8e:8b:a6:fc:a8:ac:2b:97:b3: 09:b4:de:ca:24:77:46:81:9f:4a:cd:53:77:5f:1c: 72:d3:6a:10:70:3a:df:32:6d:66:dc:14:09:8b:b7: 2c:de:6e:a6:30:f9:df:21:8a:36:e7:6d:f0:7c:9b: 61:53:da:da:d1:85:d5:2b:35:9d:a0:e1:57:ec:a3: 8c:f3:1b:4c:48:76:07:38:76:96:af:a6:be:a6:1c: 6c:1c:eb:59:7a:66:39:a2:7d:f1:52:9b:96:b1:bc: 5b:b8:8d:17:a8:f8:1f:45:05:7c:c0:ea:c5:52:85: 38:35:cb:d9:a2:c3:61:39:72:68:e7:06:b5:a8:22: 12:52:1c:7f:44:39:e0:95:af:8d:36:88:0d:a2:40: c5:cd:b6:64:43:2b:8e:91:04:10:ad:5d:4d:fc:89: 0d:66:bd:9e:a4:d3:c3:c6:ca:85:a7:1b:29:d8:9c: d0:c5:88:25:f5:36:f0:72:fe:8f:80:74:2c:4f:00: 02:54:ee:b2:7d:6b:df:d1:72:a2:5b:34:5d:6b:d2: 72:93:73:c8:57:42:fe:77:bd:7c:44:38:5e:4e:9e: 2a:53:fc:7f:19:be:fc:25:3a:5f:db:e5:b8:ca:a5: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:21:5F:9E:C5:C4:A3:A5:23:1D:46:C0:AC:68:E5:6B:60:8C:E9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c7:7f:a4:05:5c:06:7e:fc:74:03:f0:45:22:f5:65:a8:ae: 09:c0:2d:af:89:c7:3c:4d:fc:88:08:6e:ed:8f:2b:43:c5:72: e7:2d:12:59:28:6d:5f:ae:3c:df:f5:4b:f4:52:bc:68:2c:13: 4a:a0:5e:36:06:67:06:5e:f2:a2:5e:38:ac:4c:07:64:2e:14: a3:b6:9b:5c:87:e2:3b:5c:11:f4:aa:15:d8:c5:af:c4:c5:e9: 11:73:5e:30:38:5d:d4:60:e3:1d:e0:1a:13:ec:ae:fd:5c:80: f7:73:7c:ea:26:13:f4:20:74:a2:23:33:ff:c1:84:ef:ed:09: dc:6f:8e:ee:86:3a:8f:43:0c:53:2f:2c:82:23:12:40:73:10: b6:10:09:7d:ac:86:f6:9a:ff:9c:49:dc:0e:c8:76:1a:fe:d5: 8b:02:85:f8:51:da:6e:f1:0c:1e:01:31:b2:f4:18:3a:a0:80: f3:54:25:7c:3a:97:3d:e6:03:e7:cf:61:8b:21:d0:c4:9a:f1: 4a:3c:80:77:d1:3a:5b:01:a2:c3:24:a6:16:9b:47:c7:15:66: fd:1e:ba:d4:c4:c2:4b:25:74:43:86:50:09:75:69:b5:b0:d5: da:b2:3d:db:9c:7e:d4:a7:11:08:9c:74:45:10:41:bf:c1:12: 52:a3:87:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVQ5+Kk6hHHAKDqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZDMwMTAyNWQtNzVlYi00NTUzLThlYjgtZmJlNDIwNDdkNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBj/YSbMbuEBB0bH+EVjrpsrn5uOi6b8qKwr l7MJtN7KJHdGgZ9KzVN3Xxxy02oQcDrfMm1m3BQJi7cs3m6mMPnfIYo2523wfJth U9ra0YXVKzWdoOFX7KOM8xtMSHYHOHaWr6a+phxsHOtZemY5on3xUpuWsbxbuI0X qPgfRQV8wOrFUoU4NcvZosNhOXJo5wa1qCISUhx/RDngla+NNogNokDFzbZkQyuO kQQQrV1N/IkNZr2epNPDxsqFpxsp2JzQxYgl9Tbwcv6PgHQsTwACVO6yfWvf0XKi WzRda9Jyk3PIV0L+d718RDheTp4qU/x/Gb78JTpf2+W4yqU3zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEhX57FxKOlIx1GwKxo5WtgjOk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmM2ZGMxZmMtNzg4Mi0z NDkwLWFmYTEtNmUxM2JjYzlkNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjHf6QFXAZ+/HQD8EUi9WWorgnALa+JxzxN/IgIbu2PK0PFcuct ElkobV+uPN/1S/RSvGgsE0qgXjYGZwZe8qJeOKxMB2QuFKO2m1yH4jtcEfSqFdjF r8TF6RFzXjA4XdRg4x3gGhPsrv1cgPdzfOomE/QgdKIjM//BhO/tCdxvju6GOo9D DFMvLIIjEkBzELYQCX2shvaa/5xJ3A7Idhr+1YsChfhR2m7xDB4BMbL0GDqggPNU JXw6lz3mA+fPYYsh0MSa8Uo8gHfROlsBosMkphabR8cVZv0eutTEwksldEOGUAl1 abWw1dqyPducftSnEQicdEUQQb/BElKjh3c= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:47 2024 by rpki-client on console-ams.rpki-client.org