$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa File: 84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa (raw, json) Hash identifier: Eb5Xgxw1RUuIt2Os+d4Z8234YGv01t5SmMWgpu7v1jY= Subject key identifier: C0:5A:7A:1E:6C:A6:81:0C:D5:64:69:55:57:F9:9F:AC:FA:FB:86:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553FF976AF1D3D63C7BF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2607:fbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3f:f9:76:af:1d:3d:63:c7:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=ba60e7d0-8d4f-4ee6-a8bd-c02e48c0ad8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:00:53:0f:0f:bb:f3:f8:21:1e:6d:41:25: a3:fc:06:bf:e8:8b:9a:0c:0d:20:ac:66:43:26:e9: c2:39:9d:77:6e:e5:91:66:c5:15:38:84:f1:bd:f7: ca:6e:f5:83:ec:8b:6b:f9:34:ac:4f:a7:97:35:cb: aa:fc:1c:a9:a8:03:b9:5e:77:e1:9c:bd:23:28:1f: f6:b7:4e:6b:e8:ae:a3:41:1f:40:2c:63:2e:a4:4a: 60:b7:90:4c:87:c6:0d:67:22:f7:2d:a7:ba:5a:38: e9:0b:a8:c4:42:01:9e:ff:8b:1e:33:a3:0c:73:27: c4:07:6e:49:68:19:f5:78:fb:97:8e:bd:1f:d3:29: 14:12:40:fb:6a:6f:d3:f1:aa:09:95:12:fc:9f:7b: 94:66:6c:41:c1:be:07:55:d2:28:a1:78:68:38:4c: 0a:5d:cb:ec:6f:02:4b:83:72:dc:40:3c:49:26:9e: c6:f1:a7:c9:8c:f0:89:44:58:c8:e3:1f:eb:2e:dd: 91:72:8f:31:5c:43:8a:cd:82:86:b3:28:97:7d:31: 8c:fe:33:24:d7:35:5d:55:b8:52:e9:af:d8:b1:45: a3:48:22:6b:59:05:51:26:c0:72:fc:d2:73:3d:19: c7:46:b7:21:8f:e5:a8:f8:41:ae:39:3b:82:a6:25: 91:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5A:7A:1E:6C:A6:81:0C:D5:64:69:55:57:F9:9F:AC:FA:FB:86:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fbc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:47:ae:a5:1e:e0:a9:04:7b:40:3a:ac:44:95:f5:b4:d0:72: 01:a2:32:0a:32:b4:ad:78:67:a1:b8:62:26:88:d4:f4:95:31: bf:dc:5f:af:f0:1a:29:d6:8f:f3:91:a5:93:e0:de:42:e7:9a: d7:9a:d8:ef:e4:e8:01:3d:2f:2e:68:06:33:05:e8:f7:7a:00: 38:9e:e3:f0:0a:e9:a6:be:22:c0:6c:52:21:ea:fa:4a:59:0f: 9a:0a:c3:64:e6:3c:7c:11:26:a4:3f:63:c7:b3:58:ae:33:74: 74:cc:47:2d:63:ee:51:db:de:12:75:b1:c0:d9:50:ff:1b:28: fb:1f:6b:72:f6:e3:00:f2:9c:a8:02:67:af:ee:a7:7b:e7:cd: e0:c0:e2:c1:ee:68:ce:32:3f:77:0a:9b:64:90:78:ee:21:66: ef:a4:77:96:5c:ca:80:69:82:16:59:75:00:e5:ea:ff:1c:62: a8:af:1b:70:2f:2d:5a:9f:15:19:b1:df:8e:19:bc:ed:9c:85: db:98:d1:ad:5a:76:43:86:8f:a3:e4:93:72:83:86:6a:05:a6: 74:d3:5a:3c:09:68:f5:23:12:03:25:ee:0b:49:70:c1:05:05: 49:95:2a:29:82:65:1d:38:e0:ed:2f:9a:62:98:8e:fe:52:0b: f3:c5:cb:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfxVT/5dq8dPWPHv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YmE2MGU3ZDAtOGQ0Zi00ZWU2LWE4YmQtYzAyZTQ4YzBhZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xsAUw8Pu/P4IR5tQSWj/Aa/6IuaDA0grGZD JunCOZ13buWRZsUVOITxvffKbvWD7Itr+TSsT6eXNcuq/BypqAO5XnfhnL0jKB/2 t05r6K6jQR9ALGMupEpgt5BMh8YNZyL3Lae6WjjpC6jEQgGe/4seM6MMcyfEB25J aBn1ePuXjr0f0ykUEkD7am/T8aoJlRL8n3uUZmxBwb4HVdIooXhoOEwKXcvsbwJL g3LcQDxJJp7G8afJjPCJRFjI4x/rLt2Rco8xXEOKzYKGsyiXfTGM/jMk1zVdVbhS 6a/YsUWjSCJrWQVRJsBy/NJzPRnHRrchj+Wo+EGuOTuCpiWR2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMBaeh5spoEM1WRpVVf5n6z6+4ZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRjYWUxMDQtNzZkOC0z ZWQwLTllYTMtNWYxOWQxM2FkZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSR66lHuCpBHtAOqxElfW00HIBojIKMrSteGehuGImiNT0lTG/3F+v 8Bop1o/zkaWT4N5C55rXmtjv5OgBPS8uaAYzBej3egA4nuPwCummviLAbFIh6vpK WQ+aCsNk5jx8ESakP2PHs1iuM3R0zEctY+5R294SdbHA2VD/Gyj7H2ty9uMA8pyo Amev7qd7583gwOLB7mjOMj93CptkkHjuIWbvpHeWXMqAaYIWWXUA5er/HGKorxtw Ly1anxUZsd+OGbztnIXbmNGtWnZDho+j5JNyg4ZqBaZ001o8CWj1IxIDJe4LSXDB BQVJlSopgmUdOODtL5pimI7+Ugvzxctb -----END CERTIFICATE-----Generated at Mon Nov 25 03:12:37 2024 by rpki-client on console-ams.rpki-client.org