$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa File: 96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa (raw, json) Hash identifier: jEZJmWrtSxr/nvr80CYvgP7tmQGnq8uLbIA5KJo+TYs= Subject key identifier: 97:2F:4C:D4:D7:B1:18:85:A0:08:E4:02:A9:E4:10:63:94:EF:A3:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553F811CB5CAAE05DB0C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3f:81:1c:b5:ca:ae:05:db:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=0c0180a6-5ebe-4028-900d-4b74ca25bc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:91:09:8b:31:c0:d0:ee:70:66:04:c8:db: 08:b3:b0:6d:a7:c6:7c:f8:e9:cb:f0:2c:eb:e1:f0: 54:98:af:ad:6d:a7:2f:da:8c:1e:f9:59:5d:5f:d9: 8e:ff:ca:67:da:6a:d0:31:f6:dc:84:95:51:e7:dc: 35:cd:1c:63:35:ed:87:52:73:78:89:a8:89:f2:c9: ea:f4:24:35:ca:5e:9f:5b:6d:7e:53:cb:18:fd:4b: fb:09:cf:23:96:35:b3:bf:1b:98:b3:08:29:87:57: 00:a6:b2:f2:5e:13:b4:23:02:e3:68:34:53:89:7f: 9a:f0:17:6f:eb:14:3e:2c:1b:b8:cf:f0:ce:35:37: a4:45:30:fb:3f:5c:88:a5:a2:78:1a:9f:91:86:39: a9:82:eb:03:7a:35:5b:e5:af:7c:1d:a1:2b:a6:6d: 96:b3:1f:08:c7:f2:3b:55:84:b9:20:0d:f8:bd:fc: 4b:1d:47:51:6e:33:db:e5:70:7a:7b:3b:ac:de:6b: 35:6f:d8:36:ea:5d:61:cd:5d:5e:4c:10:0a:c3:36: 29:89:a2:8e:01:b2:c2:58:35:a1:c8:a8:53:6c:0d: 65:dd:57:e0:6b:35:10:71:1c:8f:b4:3c:c0:07:64: 01:3d:7c:d9:c7:ce:0f:6f:a8:33:fd:2d:68:69:c2: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2F:4C:D4:D7:B1:18:85:A0:08:E4:02:A9:E4:10:63:94:EF:A3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ef:68:d8:e6:4c:8d:00:d6:f1:e3:28:37:7d:65:ff:ed:ac: 0d:b6:f4:0f:c5:32:48:6a:05:31:5c:8e:5a:59:42:99:79:7c: 59:c2:42:a8:34:18:a1:e0:56:ba:c8:99:ef:46:1a:21:17:69: 12:b7:52:4b:ad:db:bc:e7:74:57:1e:1c:80:bc:dc:55:6c:fd: ec:62:38:eb:c3:d7:89:56:c6:64:bc:ab:a4:55:68:9c:a7:a3: 4f:eb:46:c1:9b:20:14:3b:57:a2:6b:2c:c3:26:0c:5f:6c:e2: ce:f7:7d:53:a2:eb:59:34:2d:21:b6:51:66:10:07:e7:c5:b4: 6a:75:36:f2:20:3d:12:3f:98:fb:d1:8f:7e:4e:67:79:3f:42: 97:22:04:e3:c5:9b:31:55:5e:3d:e7:d9:04:5a:f5:33:e1:94: e7:a8:e2:1c:e6:0e:e6:3f:1b:9d:5f:d3:97:1b:4c:fd:de:74: 56:fb:24:7d:b8:ab:c9:1b:ab:28:b8:e8:e9:77:08:4b:2a:17: 00:15:54:21:82:2a:4b:4b:14:f2:f7:4a:24:bd:16:2c:21:93: b9:4d:3e:f6:69:5c:67:ef:cb:39:d2:10:0f:84:fa:de:1c:d8: 30:a5:13:37:8c:bc:88:0e:91:56:1b:16:43:f1:e2:33:d0:bf: 4f:25:bf:92 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVT+BHLXKrgXbDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MGMwMTgwYTYtNWViZS00MDI4LTkwMGQtNGI3NGNhMjViYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZeRCYsxwNDucGYEyNsIs7Btp8Z8+OnL8Czr 4fBUmK+tbacv2owe+VldX9mO/8pn2mrQMfbchJVR59w1zRxjNe2HUnN4iaiJ8snq 9CQ1yl6fW21+U8sY/Uv7Cc8jljWzvxuYswgph1cAprLyXhO0IwLjaDRTiX+a8Bdv 6xQ+LBu4z/DONTekRTD7P1yIpaJ4Gp+RhjmpgusDejVb5a98HaErpm2Wsx8Ix/I7 VYS5IA34vfxLHUdRbjPb5XB6ezus3ms1b9g26l1hzV1eTBAKwzYpiaKOAbLCWDWh yKhTbA1l3VfgazUQcRyPtDzAB2QBPXzZx84Pb6gz/S1oacKx/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJcvTNTXsRiFoAjkAqnkEGOU76OuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTZiM2Q4NGQtYmRhYy0z MGY3LTgwYzQtOTYzZWMzNWQ1YjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZ+9o2OZMjQDW8eMoN31l/+2sDbb0D8UySGoFMVyOWllCmXl8WcJC qDQYoeBWusiZ70YaIRdpErdSS63bvOd0Vx4cgLzcVWz97GI468PXiVbGZLyrpFVo nKejT+tGwZsgFDtXomsswyYMX2zizvd9U6LrWTQtIbZRZhAH58W0anU28iA9Ej+Y +9GPfk5neT9ClyIE48WbMVVePefZBFr1M+GU56jiHOYO5j8bnV/TlxtM/d50Vvsk fbiryRurKLjo6XcISyoXABVUIYIqS0sU8vdKJL0WLCGTuU0+9mlcZ+/LOdIQD4T6 3hzYMKUTN4y8iA6RVhsWQ/HiM9C/TyW/kg== -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:00 2024 by rpki-client on console-ams.rpki-client.org