$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771d8ec7-7a84-384b-afc5-f3adb4d230de.roa File: 771d8ec7-7a84-384b-afc5-f3adb4d230de.roa (raw, json) Hash identifier: hric7Y3vSNLolecX3OGlmGTJCcAo5bU1bv1zm/FBGM4= Subject key identifier: 68:0C:C5:28:4F:2D:B5:0B:3B:8A:37:A9:CE:39:3E:0A:A2:59:61:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858454F02BB104BDEC523C41E4E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771d8ec7-7a84-384b-afc5-f3adb4d230de.roa Signing time: Sun 24 Mar 2024 01:00:24 +0000 ROA not before: Sun 24 Mar 2024 01:00:24 +0000 ROA not after: Sat 22 Jun 2024 01:00:24 +0000 asID: 7029 IP address blocks: 2604:cb00:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4f:02:bb:10:4b:de:c5:23:c4:1e:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 24 01:00:24 2024 GMT Not After : Jun 22 01:00:24 2024 GMT Subject: CN=c1832ac7-5511-4ee5-b945-c507154ff2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:70:56:19:85:ae:43:3b:9d:83:d7:3d:9f: 3a:7a:fc:3c:c9:14:5f:91:95:27:0c:84:9f:a4:7a: e5:c9:9c:80:72:7a:4e:45:e3:83:e1:85:33:5f:c6: 17:41:33:fd:ea:e4:63:19:ad:de:24:be:ec:f2:92: 82:87:65:2e:5f:fd:b2:40:29:44:2e:2c:08:3a:83: 42:36:ab:97:c8:6a:6e:a7:c6:24:ce:b4:27:dd:7a: 01:3f:87:1b:d9:30:c2:03:7e:2c:dd:bc:bc:4b:27: e7:9d:68:fc:0d:be:f3:81:9e:b9:62:e2:22:82:ac: 43:a9:06:25:14:95:a6:e3:b8:cf:04:00:6c:ea:bd: cc:b4:2e:4d:9d:33:73:ab:1a:8a:a2:b5:bf:e0:0d: 81:24:8a:24:59:43:c0:44:74:05:77:1d:ab:ce:10: 19:45:00:6f:39:2c:90:24:cb:ed:a6:c8:3a:3a:a7: 02:87:a5:40:1e:40:b1:11:98:41:7f:28:e1:9d:cf: 84:b7:56:6b:27:a6:41:1e:48:5a:0d:a4:6c:64:5b: 04:58:8b:72:0e:be:f6:c9:34:83:80:df:00:ec:52: eb:ef:f4:d1:75:0a:51:cd:d1:8b:5b:99:c1:c0:e3: 98:7f:cf:4d:40:10:16:92:c2:cd:86:5f:0d:7f:2f: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:C5:28:4F:2D:B5:0B:3B:8A:37:A9:CE:39:3E:0A:A2:59:61:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/771d8ec7-7a84-384b-afc5-f3adb4d230de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f4:87:f7:d0:c5:47:e9:09:ea:f7:06:0f:7f:af:4b:af:3c: 4b:b3:cc:e8:57:16:19:49:c4:da:00:82:ce:21:99:24:ac:c3: d5:ca:6a:ab:e9:d6:96:43:9b:35:e5:9b:b2:a9:59:13:0a:d3: 87:f3:43:2b:60:68:7c:df:b1:c0:e9:35:91:77:f6:c5:d5:38: 5c:f8:af:e2:e2:44:c9:ad:20:70:e9:fe:3a:dc:fa:b3:40:18: f9:92:be:02:e2:89:8b:27:46:35:55:36:4b:f2:15:7a:69:34: fe:fc:45:dd:b8:57:bb:64:84:be:6b:a5:aa:14:30:83:7c:80: 53:00:ea:7b:71:8c:dd:93:97:bb:a7:78:13:cf:06:03:66:ae: f9:d1:6d:7b:47:da:29:4f:8d:c3:b5:c5:40:47:1d:00:28:4d: 52:09:03:66:15:4c:c0:08:c2:09:93:00:fd:4a:6f:72:6f:0e: 48:7a:27:90:bd:e6:2d:7f:99:72:c3:12:9b:4e:a9:55:b6:28: a2:49:65:65:e9:d7:43:9e:af:54:63:56:ac:1c:b0:ef:e0:83: 8c:f9:47:9e:dc:b6:80:88:27:1c:f5:26:f7:fa:38:c9:ea:de: 18:14:36:cc:e5:00:f2:5c:a1:85:70:e5:cf:20:dd:38:48:ce: 9b:57:4c:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVPArsQS97FI8QeToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNDAxMDAyNFoXDTI0MDYyMjAxMDAyNFowLzEtMCsGA1UEAxMk YzE4MzJhYzctNTUxMS00ZWU1LWI5NDUtYzUwNzE1NGZmMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMhwVhmFrkM7nYPXPZ86evw8yRRfkZUnDISf pHrlyZyAcnpOReOD4YUzX8YXQTP96uRjGa3eJL7s8pKCh2UuX/2yQClELiwIOoNC NquXyGpup8YkzrQn3XoBP4cb2TDCA34s3by8SyfnnWj8Db7zgZ65YuIigqxDqQYl FJWm47jPBABs6r3MtC5NnTNzqxqKorW/4A2BJIokWUPARHQFdx2rzhAZRQBvOSyQ JMvtpsg6OqcCh6VAHkCxEZhBfyjhnc+Et1ZrJ6ZBHkhaDaRsZFsEWItyDr72yTSD gN8A7FLr7/TRdQpRzdGLW5nBwOOYf89NQBAWksLNhl8Nfy9AnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGgMxShPLbULO4o3qc45PgqiWWEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzcxZDhlYzctN2E4NC0z ODRiLWFmYzUtZjNhZGI0ZDIzMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH30h/fQxUfpCer3Bg9/r0uvPEuzzOhXFhlJxNoAgs4hmSSsw9XK aqvp1pZDmzXlm7KpWRMK04fzQytgaHzfscDpNZF39sXVOFz4r+LiRMmtIHDp/jrc +rNAGPmSvgLiiYsnRjVVNkvyFXppNP78Rd24V7tkhL5rpaoUMIN8gFMA6ntxjN2T l7uneBPPBgNmrvnRbXtH2ilPjcO1xUBHHQAoTVIJA2YVTMAIwgmTAP1Kb3JvDkh6 J5C95i1/mXLDEptOqVW2KKJJZWXp10Oer1RjVqwcsO/gg4z5R57ctoCIJxz1Jvf6 OMnq3hgUNszlAPJcoYVw5c8g3ThIzptXTOI= -----END CERTIFICATE-----Generated at Thu May 23 02:54:11 2024 by rpki-client on console-ams.rpki-client.org