$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa File: 89cdf212-8681-3edc-9906-86e614e29de0.roa (raw, json) Hash identifier: 0wSxjgz2tFrXp/8U53RnwjuKebxYbHjqLl9gCgS9Kjs= Subject key identifier: B2:6D:72:77:E5:84:D2:09:24:6C:1C:10:E3:BC:9A:17:61:25:40:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332E78E94EE777854D7580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2e:78:e9:4e:e7:77:85:4d:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=c5b2b464-dfdd-4b63-8aa8-d73c70a2168d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:8d:8d:a3:39:60:85:d9:3a:d4:b4:d0:c8: f2:5e:18:e8:68:a1:90:90:93:0f:25:24:54:af:90: 33:ca:94:9d:6d:55:d8:f8:81:77:64:cd:7a:ff:51: 49:2d:22:4b:c4:40:fd:50:97:bb:1d:6c:6f:56:32: 41:43:46:cf:52:67:de:c2:63:ac:e4:0e:b3:5b:25: 4c:13:e5:eb:c3:ec:5d:ad:2a:d4:64:3a:c3:80:3a: 43:81:1c:24:6b:67:50:5b:22:bb:30:a5:67:6b:9e: 84:12:c4:63:83:12:a6:4b:d0:7b:9f:82:64:65:39: a5:6a:ac:54:31:d5:d6:8e:71:0f:53:01:86:af:59: b8:29:a6:41:ec:b0:12:30:d0:da:51:3d:56:eb:74: 4c:c6:d2:b6:ce:a9:9d:2d:26:5c:a9:ae:f1:d6:58: a5:a1:74:8f:4e:40:0e:85:90:54:95:de:52:5d:e3: d9:95:f3:40:32:b8:7f:91:cf:50:56:d0:8c:b9:fd: 35:ae:d9:07:bd:58:7b:e7:e8:69:eb:74:12:e8:38: 9b:2a:83:ff:13:70:f8:63:ae:e9:81:54:5c:35:66: bc:58:5a:d2:ba:e4:a6:dd:49:83:c1:22:24:86:df: 93:41:22:8b:14:79:79:66:7a:25:38:3d:4a:6a:bf: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:72:77:E5:84:D2:09:24:6C:1C:10:E3:BC:9A:17:61:25:40:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:20:11:97:bc:7b:9a:a5:4f:40:0c:be:f3:a5:f9:14:ed:89: cf:41:06:1f:dc:a1:0c:d3:2e:bc:83:9d:23:96:20:f7:ba:00: 87:31:7c:78:ce:c0:51:85:04:92:74:05:f2:b1:4d:14:39:af: 3f:9a:87:77:c1:e1:45:e8:26:80:85:a4:30:21:a1:58:d1:fc: 32:1a:94:a6:18:71:ea:8d:e4:f6:76:d6:ab:c9:8f:e8:e0:17: 57:ed:4c:a5:0d:02:a6:9e:1e:20:40:4e:1b:26:b0:59:2b:74: 3c:81:83:12:ef:95:93:81:7f:ac:08:a3:21:bf:cf:62:e1:63: 2c:e9:03:49:5d:92:8c:e7:99:e6:ab:bd:0a:2a:9f:e7:9a:4d: 6e:c5:49:00:b5:65:a1:2d:42:28:46:61:8a:67:f1:3b:64:cc: 8f:d5:0b:12:0f:aa:3c:32:92:98:74:6a:fc:c3:52:8e:49:ba: d4:a6:e7:0c:6e:d0:de:fb:56:05:2b:5e:f1:6e:27:89:f8:f2: 38:ee:36:2b:d5:ea:de:95:2e:a7:50:a8:82:69:d6:31:e2:d0: 9c:a1:e6:98:fc:83:60:a7:ca:55:5d:6a:db:7c:2e:d9:9c:fe: 9a:0d:fd:c9:48:4d:e1:9f:ee:4f:c6:fd:3e:76:67:ad:d4:83: d6:8d:ff:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy546U7nd4VNdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YzViMmI0NjQtZGZkZC00YjYzLThhYTgtZDczYzcwYTIxNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq+NjaM5YIXZOtS00MjyXhjoaKGQkJMPJSRU r5AzypSdbVXY+IF3ZM16/1FJLSJLxED9UJe7HWxvVjJBQ0bPUmfewmOs5A6zWyVM E+Xrw+xdrSrUZDrDgDpDgRwka2dQWyK7MKVna56EEsRjgxKmS9B7n4JkZTmlaqxU MdXWjnEPUwGGr1m4KaZB7LASMNDaUT1W63RMxtK2zqmdLSZcqa7x1liloXSPTkAO hZBUld5SXePZlfNAMrh/kc9QVtCMuf01rtkHvVh75+hp63QS6DibKoP/E3D4Y67p gVRcNWa8WFrSuuSm3UmDwSIkht+TQSKLFHl5ZnolOD1Kar8mDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLJtcnflhNIJJGwcEOO8mhdhJUDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODljZGYyMTItODY4MS0z ZWRjLTk5MDYtODZlNjE0ZTI5ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJEgEZe8e5qlT0AMvvOl+RTtic9BBh/coQzTLryDnSOWIPe6AIcx fHjOwFGFBJJ0BfKxTRQ5rz+ah3fB4UXoJoCFpDAhoVjR/DIalKYYceqN5PZ21qvJ j+jgF1ftTKUNAqaeHiBAThsmsFkrdDyBgxLvlZOBf6wIoyG/z2LhYyzpA0ldkozn mearvQoqn+eaTW7FSQC1ZaEtQihGYYpn8TtkzI/VCxIPqjwykph0avzDUo5JutSm 5wxu0N77VgUrXvFuJ4n48jjuNivV6t6VLqdQqIJp1jHi0Jyh5pj8g2CnylVdatt8 Ltmc/poN/clITeGf7k/G/T52Z63Ug9aN/5g= -----END CERTIFICATE-----Generated at Thu May 23 13:45:01 2024 by rpki-client on console-fra.rpki-client.org