$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa File: 9391badf-c7c5-3d55-a232-6fd977b29b8d.roa (raw, json) Hash identifier: PK6WjY0Ov6NeMAevhdB6UL+TORjxxfx3eq/T+Qs/GE8= Subject key identifier: 0D:A3:7E:CF:8C:35:F5:8E:AB:41:A8:81:ED:43:63:DB:26:32:EE:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551111E6560334EE4F2880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2607:faf8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:11:11:e6:56:03:34:ee:4f:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=938efbb4-cc8c-4a2e-8afd-2ed9ff8ca04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:0e:c1:ed:86:59:cd:69:18:82:61:9e:87: 1e:ad:44:f1:4c:d6:33:9a:10:fd:f3:c1:16:19:e9: 5b:3d:58:08:2b:04:d8:95:64:58:52:8d:4f:ec:34: 24:dc:8e:96:6e:9a:36:f6:f9:b5:e1:28:ec:30:a6: c9:d1:2c:3d:c2:4d:e4:4c:51:cf:f6:1c:40:74:ff: e9:14:eb:5e:46:d5:55:84:8a:47:76:f8:01:3f:76: ce:c4:78:9a:47:10:28:a0:21:3b:52:54:dd:0a:f9: 02:29:57:fc:40:63:be:41:23:2f:af:ca:d4:c7:7a: 4f:c2:0e:59:0f:f2:b9:d8:82:34:3e:31:89:fb:1b: 99:f3:3c:ee:c5:3d:69:01:3e:e8:11:07:d0:f5:2c: 4c:e6:98:dc:cf:e6:c1:a2:c3:6d:3b:7b:21:c2:5c: b4:88:d4:14:99:1c:d3:3f:1d:1f:ff:06:7c:bc:cf: c1:ce:2b:f0:ee:32:03:70:d6:51:f2:01:db:98:82: cd:4f:67:7b:3d:58:e1:c5:61:f5:2b:d1:9c:c9:0e: 4d:8e:00:6d:eb:5d:6e:b4:a5:50:c4:aa:08:aa:c5: ce:21:92:09:db:8f:4c:4d:5f:09:e0:0e:d6:04:d6: f3:68:11:a5:a2:c9:c8:da:e4:c4:b3:c7:44:37:f0: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A3:7E:CF:8C:35:F5:8E:AB:41:A8:81:ED:43:63:DB:26:32:EE:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:faf8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:91:14:47:37:93:8a:85:f3:e2:8e:f1:bf:66:62:f9:95:0b: 20:02:33:ae:f8:67:96:3b:51:c5:8b:d7:63:8b:0f:84:c7:4c: 66:73:01:de:ff:b3:c2:28:e7:bc:3c:99:1a:ac:9d:9e:2c:cc: c9:3c:39:ce:65:31:1d:07:4d:b2:ef:42:e2:9f:14:29:e7:71: c0:99:3d:90:6b:d0:8e:8b:82:6b:13:20:f4:06:2c:62:9f:5b: 70:f8:51:9d:d3:39:56:b9:9f:47:a9:13:2d:2a:26:08:05:7f: aa:32:f6:fc:97:c0:14:9e:e9:72:41:45:08:b1:3c:52:61:f7: bd:f9:e0:e7:1c:8b:9d:75:cf:f5:be:c6:e9:c0:0a:5a:a9:82: c3:6c:8b:73:09:04:28:6d:05:14:10:90:0e:27:30:d8:a2:2b: 4f:54:3a:c4:f0:b3:72:64:31:5a:3d:ab:00:34:46:54:2d:a0: 99:eb:21:04:b2:8c:8e:3a:a6:af:d6:3c:43:47:92:a8:f2:3a: c0:2a:83:14:6e:70:36:0c:cb:5e:2d:48:4d:ac:65:13:df:0d: cf:a1:b5:15:d6:af:a8:f2:64:66:b2:ef:09:94:9d:35:ce:a5: 7f:28:32:14:5a:9d:42:03:f4:5f:94:72:aa:55:00:36:27:38: 38:ae:b6:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfxVRER5lYDNO5PKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk OTM4ZWZiYjQtY2M4Yy00YTJlLThhZmQtMmVkOWZmOGNhMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaoOwe2GWc1pGIJhnocerUTxTNYzmhD988EW GelbPVgIKwTYlWRYUo1P7DQk3I6Wbpo29vm14SjsMKbJ0Sw9wk3kTFHP9hxAdP/p FOteRtVVhIpHdvgBP3bOxHiaRxAooCE7UlTdCvkCKVf8QGO+QSMvr8rUx3pPwg5Z D/K52II0PjGJ+xuZ8zzuxT1pAT7oEQfQ9SxM5pjcz+bBosNtO3shwly0iNQUmRzT Px0f/wZ8vM/Bzivw7jIDcNZR8gHbmILNT2d7PVjhxWH1K9GcyQ5NjgBt611utKVQ xKoIqsXOIZIJ249MTV8J4A7WBNbzaBGlosnI2uTEs8dEN/DbuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA2jfs+MNfWOq0Goge1DY9smMu58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTM5MWJhZGYtYzdjNS0z ZDU1LWEyMzItNmZkOTc3YjI5YjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAkRRHN5OKhfPijvG/ZmL5lQsgAjOu+GeWO1HFi9djiw+Ex0xmcwHe /7PCKOe8PJkarJ2eLMzJPDnOZTEdB02y70LinxQp53HAmT2Qa9COi4JrEyD0Bixi n1tw+FGd0zlWuZ9HqRMtKiYIBX+qMvb8l8AUnulyQUUIsTxSYfe9+eDnHIuddc/1 vsbpwApaqYLDbItzCQQobQUUEJAOJzDYoitPVDrE8LNyZDFaPasANEZULaCZ6yEE soyOOqav1jxDR5Ko8jrAKoMUbnA2DMteLUhNrGUT3w3PobUV1q+o8mRmsu8JlJ01 zqV/KDIUWp1CA/RflHKqVQA2Jzg4rrba -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:58 2024 by rpki-client on console-ams.rpki-client.org