$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa File: 87e9af17-b83d-3cfb-b718-f367a270a589.roa (raw, json) Hash identifier: bIGCJ2OUZ/X0RsKl73X6SlAmZDsb+leWjfHSlqp1jtI= Subject key identifier: 16:CF:16:3D:C6:3B:9C:03:7B:73:36:5B:19:B9:E9:31:42:27:0B:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553D8A9213598C3A7D1100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3d:8a:92:13:59:8c:3a:7d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=be25d4c4-71fa-4cad-83c5-fc358f81800e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:bc:0a:2b:06:83:21:b1:a5:36:1d:c3:d4: ad:7a:0a:2f:4e:cc:e3:48:36:6b:00:1b:e4:b3:d0: ee:3b:e4:58:4b:a6:73:51:8a:78:59:16:e4:4c:46: 33:61:d5:73:26:cd:69:09:70:df:3d:1a:2b:4a:64: a0:13:10:e7:23:ee:6c:2f:b3:bf:27:d1:a7:25:d8: 04:65:b7:b0:45:8a:23:8a:cd:36:06:5b:a2:81:53: f9:8e:05:9b:0e:cf:d8:8b:78:42:14:fe:31:48:4c: 2a:e0:fe:22:3f:bc:fd:27:41:84:b8:35:5e:2b:87: c0:af:91:62:46:d5:2b:99:5e:95:3c:93:b1:90:9f: c2:3b:5d:98:97:f9:ca:98:75:24:a9:40:3c:3e:ad: bb:90:58:20:25:ce:48:84:68:0f:65:37:7b:a9:60: 32:cd:60:c8:54:06:96:d9:4a:34:51:78:05:e9:52: 74:59:a0:dc:6f:45:1e:a7:bd:a7:72:17:38:87:1f: e0:41:73:5d:96:b6:28:1e:fe:41:c6:ad:83:c9:49: e1:07:f5:02:f8:9c:a6:57:85:db:38:3c:43:e6:2d: 4d:6a:d4:c8:3e:33:6b:b6:19:f6:91:20:4c:b9:d6: ec:8f:60:8c:bd:0a:39:8c:35:c7:b2:c5:0b:8d:13: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:16:3D:C6:3B:9C:03:7B:73:36:5B:19:B9:E9:31:42:27:0B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5a:c4:ec:84:78:52:6e:da:91:ad:f2:d5:f6:c4:39:7f:af: 2a:69:89:69:27:54:81:17:f7:a5:2d:dd:b2:fa:ab:58:d1:9d: ac:27:9c:35:4f:63:5b:55:87:a9:2d:bf:90:71:6b:89:33:9f: 0d:6b:71:49:d5:8d:b3:41:50:5f:70:9c:04:16:65:f4:e2:f5: 9c:7a:94:e6:62:ad:5b:c5:5e:88:c5:31:fb:42:05:98:a6:47: 3a:68:93:dd:51:c4:fb:cc:a4:16:eb:e8:1b:cc:3b:ec:57:33: 76:bc:69:78:a9:1d:15:16:d2:6d:68:8c:0c:b3:98:da:f8:81: 6b:9c:b4:39:f9:64:f3:fc:9e:38:5a:a0:38:3a:bd:dc:08:b8: 0e:26:8e:85:b9:69:d8:56:67:6d:2e:20:af:80:40:6f:91:e4: 11:44:bb:8a:66:8a:7d:5d:2b:ee:9d:d7:7b:54:b5:ff:41:bc: 45:a7:60:64:09:ec:fc:ec:88:c6:3f:f5:40:72:84:e8:61:23: 6b:03:85:6b:53:0f:b0:ad:80:be:d0:26:03:0e:91:86:f2:a3: 73:4c:a3:07:67:27:80:0d:37:29:d4:5d:7d:1a:59:79:a5:a5: 6e:76:d3:7c:db:5e:71:be:c2:1f:31:b0:5c:c4:8a:e8:73:aa: e9:83:e9:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVT2KkhNZjDp9EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YmUyNWQ0YzQtNzFmYS00Y2FkLTgzYzUtZmMzNThmODE4MDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYC8CisGgyGxpTYdw9StegovTszjSDZrABvk s9DuO+RYS6ZzUYp4WRbkTEYzYdVzJs1pCXDfPRorSmSgExDnI+5sL7O/J9GnJdgE ZbewRYojis02BluigVP5jgWbDs/Yi3hCFP4xSEwq4P4iP7z9J0GEuDVeK4fAr5Fi RtUrmV6VPJOxkJ/CO12Yl/nKmHUkqUA8Pq27kFggJc5IhGgPZTd7qWAyzWDIVAaW 2Uo0UXgF6VJ0WaDcb0Uep72nchc4hx/gQXNdlrYoHv5Bxq2DyUnhB/UC+JymV4Xb ODxD5i1NatTIPjNrthn2kSBMudbsj2CMvQo5jDXHssULjRMS8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbPFj3GO5wDe3M2Wxm56TFCJwvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlOWFmMTctYjgzZC0z Y2ZiLWI3MTgtZjM2N2EyNzBhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJaxOyEeFJu2pGt8tX2xDl/ryppiWknVIEX96Ut3bL6q1jRnawn nDVPY1tVh6ktv5Bxa4kznw1rcUnVjbNBUF9wnAQWZfTi9Zx6lOZirVvFXojFMftC BZimRzpok91RxPvMpBbr6BvMO+xXM3a8aXipHRUW0m1ojAyzmNr4gWuctDn5ZPP8 njhaoDg6vdwIuA4mjoW5adhWZ20uIK+AQG+R5BFEu4pmin1dK+6d13tUtf9BvEWn YGQJ7PzsiMY/9UByhOhhI2sDhWtTD7CtgL7QJgMOkYbyo3NMowdnJ4ANNynUXX0a WXmlpW5203zbXnG+wh8xsFzEiuhzqumD6Xs= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:18 2024 by rpki-client on console-fra.rpki-client.org