$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa File: 99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa (raw, json) Hash identifier: /aspj1o139Sx5Oz0wZaHKulUMABs2peRfJbLjs0FtwI= Subject key identifier: 28:4B:8A:EA:81:0A:B6:08:B2:EA:F6:9B:25:71:00:A5:2C:73:57:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550DB850A5EF0E19A48B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0d:b8:50:a5:ef:0e:19:a4:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=1792e4bb-e729-402d-b471-aaa2fde9cef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:96:3f:e5:7f:e4:6e:0a:e9:45:16:01:4c: 69:56:1c:3b:f8:54:00:98:aa:a0:03:c4:d1:91:26: 9c:3f:08:ca:37:4c:56:f9:7c:85:05:84:89:77:2e: cc:fb:e3:9e:9f:de:50:8d:23:fe:4c:7c:3f:03:65: 33:a8:90:18:b7:a5:46:b2:52:8e:9b:4d:7d:27:71: 36:6c:95:7c:bf:f6:87:59:f2:51:b9:e1:d9:5a:89: 6a:50:4a:90:a7:2f:a3:7c:6b:28:a8:89:89:d7:32: 2d:72:10:e5:93:06:02:ae:02:59:67:1b:f7:9f:db: 27:93:27:e6:fd:9e:b9:07:e7:4a:c3:93:c9:29:a4: 6d:9b:6e:1c:a9:dc:69:f3:e9:99:d0:55:a0:78:ec: 8a:cc:14:f0:7f:d1:05:4e:74:2c:b3:d2:30:44:50: ec:1d:62:64:e9:87:b9:c7:ae:ae:bd:57:c4:83:8f: 8f:da:26:94:74:f6:b9:ec:0f:f3:85:1e:85:4b:ef: 0b:14:81:54:6b:9e:6a:0c:81:59:13:e9:fe:2e:5d: 8b:77:f5:89:04:f3:03:4d:2d:fd:23:8e:f5:8d:27: 71:8f:eb:fc:a8:79:31:f5:b9:3d:a9:37:39:e3:82: 85:07:49:e5:53:0e:d9:d5:31:05:2d:6c:98:e9:32: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4B:8A:EA:81:0A:B6:08:B2:EA:F6:9B:25:71:00:A5:2C:73:57:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99c64ca3-e624-3e4d-8d76-36fdc5b12898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d8:46:06:fe:e8:b1:78:6e:6b:ad:65:09:19:f0:a7:d4:d3: 27:b9:e6:3b:6b:64:a5:d5:f0:76:7f:a3:a1:cc:d6:e6:6d:86: 05:68:53:5f:59:85:93:c3:55:5c:e1:6e:27:35:b4:28:0d:3c: c1:25:ec:d5:f3:65:d0:46:44:50:03:2b:59:a5:15:59:8b:90: 3f:f2:e7:45:e0:c2:31:64:77:4e:46:8d:d1:28:24:a9:b4:5a: c6:8c:89:3a:26:92:66:f0:30:8d:70:9f:fb:23:ec:9b:e5:38: 16:4a:3f:8c:38:41:1e:bf:35:31:a2:ac:08:68:c6:33:b0:09: 29:05:63:28:63:64:fe:64:45:e8:17:74:6d:23:9e:84:dc:f4: be:36:c5:e5:44:ec:90:a5:8f:7f:32:d4:05:5e:e6:00:a9:fa: 24:cb:84:77:14:07:26:1a:1a:16:f7:12:d9:55:2c:62:38:98: 0d:e4:49:c8:77:77:74:45:c9:a6:96:04:dd:79:3b:e9:87:da: 76:8f:bd:fd:e2:03:d8:d2:ca:77:21:63:62:f5:8f:0a:4c:70: 43:78:80:d8:6d:0d:28:a1:bd:47:a9:95:42:b2:ec:45:f3:ef: 51:11:2d:15:f4:79:ba:80:35:ee:dd:5d:38:01:1f:89:51:6e: c8:cd:39:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVQ24UKXvDhmki4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MTc5MmU0YmItZTcyOS00MDJkLWI0NzEtYWFhMmZkZTljZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oaWP+V/5G4K6UUWAUxpVhw7+FQAmKqgA8TR kSacPwjKN0xW+XyFBYSJdy7M++Oen95QjSP+THw/A2UzqJAYt6VGslKOm019J3E2 bJV8v/aHWfJRueHZWolqUEqQpy+jfGsoqImJ1zItchDlkwYCrgJZZxv3n9snkyfm /Z65B+dKw5PJKaRtm24cqdxp8+mZ0FWgeOyKzBTwf9EFTnQss9IwRFDsHWJk6Ye5 x66uvVfEg4+P2iaUdPa57A/zhR6FS+8LFIFUa55qDIFZE+n+Ll2Ld/WJBPMDTS39 I471jSdxj+v8qHkx9bk9qTc544KFB0nlUw7Z1TEFLWyY6TKjZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChLiuqBCrYIsur2myVxAKUsc1fXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTljNjRjYTMtZTYyNC0z ZTRkLThkNzYtMzZmZGM1YjEyODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTYRgb+6LF4bmutZQkZ8KfU0ye55jtrZKXV8HZ/o6HM1uZthgVo U19ZhZPDVVzhbic1tCgNPMEl7NXzZdBGRFADK1mlFVmLkD/y50XgwjFkd05GjdEo JKm0WsaMiTomkmbwMI1wn/sj7JvlOBZKP4w4QR6/NTGirAhoxjOwCSkFYyhjZP5k RegXdG0jnoTc9L42xeVE7JClj38y1AVe5gCp+iTLhHcUByYaGhb3EtlVLGI4mA3k Sch3d3RFyaaWBN15O+mH2naPvf3iA9jSynchY2L1jwpMcEN4gNhtDSihvUeplUKy 7EXz71ERLRX0ebqANe7dXTgBH4lRbsjNOUc= -----END CERTIFICATE-----Generated at Mon Nov 25 03:12:45 2024 by rpki-client on console-ams.rpki-client.org