$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa File: 9b1728fc-c881-33c6-a899-014e97c3f766.roa (raw, json) Hash identifier: CiKAtqu8e/nrrsXAiPr8xZEEoka+eSH3M3SQOAApqtM= Subject key identifier: 8E:A4:1A:AB:72:A7:92:67:37:E9:DE:EA:85:28:48:35:47:C4:09:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553EDB39FFE2F330C6F240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3e:db:39:ff:e2:f3:30:c6:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=eeeeda5c-3cbb-4e14-ba81-2fb9a3449b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:6b:cf:e8:df:e1:bc:5e:06:c0:36:a1:37: 98:29:ea:44:2f:96:a4:1c:5a:03:96:b3:97:4c:d6: a4:48:aa:0e:3b:6c:fc:7a:4f:f9:76:80:ee:bf:ca: 96:59:8f:3e:21:bd:e1:bd:30:49:ba:ee:b8:3b:0e: 4b:10:74:5a:16:e4:a3:d1:2d:12:ec:0b:cb:3e:b1: 61:fc:12:83:5b:2b:12:3f:a3:7e:ec:1a:13:b3:98: f6:35:f0:4c:9e:d0:11:89:7b:8b:ab:6f:ae:db:99: 75:b0:33:6d:d5:22:2c:39:ad:ae:40:d4:17:59:eb: 28:0d:48:25:c4:5e:de:a2:94:68:16:0f:84:94:b1: 20:98:70:ce:e3:4a:62:90:d1:be:98:6c:7d:a0:16: af:22:ec:4c:d8:8a:19:55:25:41:b1:cb:10:87:c9: 06:b3:d4:24:bf:34:12:f1:61:7e:52:08:af:ea:f1: f9:ce:b4:fe:38:92:a1:8b:6f:5e:cd:fa:69:df:87: 3f:ad:f5:7b:f9:aa:ab:75:35:d0:9d:ee:76:0f:e1: 26:e9:fd:f8:d8:d7:af:77:33:cc:21:0c:d3:88:e8: b9:ff:12:1b:ef:81:3f:d1:f3:50:40:9d:d9:de:df: 5e:74:a1:f8:1f:b5:52:ed:3c:1a:4c:05:c5:76:3d: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A4:1A:AB:72:A7:92:67:37:E9:DE:EA:85:28:48:35:47:C4:09:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b1728fc-c881-33c6-a899-014e97c3f766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:69:02:06:42:eb:d9:5b:e2:ca:5d:18:c3:3f:a6:eb:e5:14: f3:16:54:6a:71:7e:84:07:ef:d2:d9:4c:b4:e1:91:43:dc:c0: 7f:1e:5c:7c:ec:ce:a9:08:d2:18:16:41:24:9d:cf:f1:33:77: 3e:71:59:11:64:f7:01:2d:a4:a7:f6:1a:6d:05:56:b6:38:59: af:36:ff:07:3b:e3:73:c0:1d:50:4f:54:f6:1c:c4:ca:26:54: 9c:9d:9f:5e:d3:38:63:74:2d:11:66:21:8c:99:2c:13:1d:be: 5d:b3:67:b2:22:9d:0e:8e:a1:3d:1a:59:cf:03:f8:0d:d9:5a: a0:56:8d:01:e5:45:57:f2:ac:44:8a:13:33:84:81:17:8b:db: ca:fd:51:5d:f3:80:1b:4a:d2:eb:54:fa:ab:cc:09:f7:a5:d5: de:f7:89:11:a9:f1:e6:96:43:82:6e:58:9d:99:28:b3:e0:c9: de:c5:77:56:a4:de:fb:a4:97:b3:48:bd:5f:0d:ca:de:df:de: 92:c4:c6:70:f4:83:dd:35:90:a6:f4:b5:e2:68:ff:1e:21:bb: c0:6c:2c:ad:55:8f:6a:4f:b5:05:61:7a:4a:81:dc:36:a9:bf: 13:4a:39:9a:a4:41:80:a1:b7:c7:0f:ce:d7:c2:77:d1:67:26: 4c:3c:c0:a4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVT7bOf/i8zDG8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZWVlZWRhNWMtM2NiYi00ZTE0LWJhODEtMmZiOWEzNDQ5YjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYJrz+jf4bxeBsA2oTeYKepEL5akHFoDlrOX TNakSKoOO2z8ek/5doDuv8qWWY8+Ib3hvTBJuu64Ow5LEHRaFuSj0S0S7AvLPrFh /BKDWysSP6N+7BoTs5j2NfBMntARiXuLq2+u25l1sDNt1SIsOa2uQNQXWesoDUgl xF7eopRoFg+ElLEgmHDO40pikNG+mGx9oBavIuxM2IoZVSVBscsQh8kGs9QkvzQS 8WF+Ugiv6vH5zrT+OJKhi29ezfpp34c/rfV7+aqrdTXQne52D+Em6f342NevdzPM IQzTiOi5/xIb74E/0fNQQJ3Z3t9edKH4H7VS7TwaTAXFdj1oBQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI6kGqtyp5JnN+ne6oUoSDVHxAnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWIxNzI4ZmMtYzg4MS0z M2M2LWE4OTktMDE0ZTk3YzNmNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGGkCBkLr2Vviyl0Ywz+m6+UU8xZUanF+hAfv0tlMtOGRQ9zAfx5c fOzOqQjSGBZBJJ3P8TN3PnFZEWT3AS2kp/YabQVWtjhZrzb/Bzvjc8AdUE9U9hzE yiZUnJ2fXtM4Y3QtEWYhjJksEx2+XbNnsiKdDo6hPRpZzwP4DdlaoFaNAeVFV/Ks RIoTM4SBF4vbyv1RXfOAG0rS61T6q8wJ96XV3veJEanx5pZDgm5YnZkos+DJ3sV3 VqTe+6SXs0i9Xw3K3t/eksTGcPSD3TWQpvS14mj/HiG7wGwsrVWPak+1BWF6SoHc Nqm/E0o5mqRBgKG3xw/O18J30WcmTDzApA== -----END CERTIFICATE-----Generated at Mon Nov 25 03:12:45 2024 by rpki-client on console-ams.rpki-client.org