$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa File: a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa (raw, json) Hash identifier: w9GrAHtp++7HbQi6CIY8SrRiG6SUH8clZahiULDk0yQ= Subject key identifier: 9C:F3:34:E0:9A:EE:FE:5D:B6:D7:60:8C:F9:7B:BD:CA:9F:94:B1:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533332B0BCC78168BAF83BA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:32:b0:bc:c7:81:68:ba:f8:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=95642164-4295-46b1-a3fe-440e156a4b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:12:38:fe:81:5c:f9:5b:83:91:9e:3d:39: b5:00:51:fe:0c:65:ef:f3:1f:52:2a:ba:93:92:d9: 66:a0:64:5c:0c:94:fb:3a:1a:3d:6b:4b:68:27:0b: 43:3c:a8:5f:cb:0a:10:99:73:86:36:cf:f1:fc:22: 3b:db:64:5b:7a:f9:9f:38:03:b6:24:f3:10:99:31: 3b:03:6d:ea:00:71:ed:9e:3e:5a:1d:77:a3:03:16: 44:a8:83:2b:3d:ff:3a:47:7b:cd:c9:2e:ce:b4:08: d6:83:80:61:48:23:5c:ef:c1:a9:72:0e:0a:50:4c: 30:43:4a:aa:34:80:ba:a4:86:61:e1:90:4b:1c:19: c5:de:64:1d:6c:bc:68:c8:38:e8:77:6d:46:00:6b: ab:d7:0d:6b:bb:b1:f8:72:58:b0:60:97:17:d2:29: c4:a0:79:67:7b:5f:e4:5c:29:ad:22:40:e5:6f:5a: 7b:34:9e:b8:7a:79:cb:de:23:ca:3d:12:5a:5e:03: 1e:08:45:c0:ba:0e:ba:e8:73:d1:43:1a:43:0f:9e: 6c:aa:d5:e8:1d:14:d2:be:80:64:46:f8:92:64:cf: ce:b0:b5:d7:ed:71:88:2d:ee:78:e3:eb:40:12:e3: 74:03:be:9b:e3:06:fc:82:00:24:34:c2:31:82:b7: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F3:34:E0:9A:EE:FE:5D:B6:D7:60:8C:F9:7B:BD:CA:9F:94:B1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f0:54:aa:f8:0d:fb:eb:39:a8:4f:ae:c0:84:ec:d8:20:3b: 75:2e:f9:d5:df:d2:05:85:d8:c3:fd:24:ca:4e:87:dc:d8:65: 68:31:62:80:a0:27:41:35:09:07:82:bb:f9:1f:e3:a2:f7:ba: e1:40:85:40:ee:a0:18:61:13:62:b0:fc:72:6f:83:00:a9:40: 15:72:a7:57:f3:a7:51:1a:4f:e9:54:bf:d5:8c:21:73:86:c6: ee:a6:3e:6c:97:24:05:df:93:1b:67:75:a3:53:fa:51:40:d7: 01:4c:fa:ad:53:ea:3d:2d:f9:7a:ad:87:9c:d9:83:92:c7:77: ad:5a:2e:40:a2:a8:0f:26:47:6a:65:10:6a:bb:89:16:9e:c1: bb:77:a4:78:b1:3e:65:1b:0c:38:c2:33:7d:8e:cc:53:79:22: 09:55:53:dc:13:eb:68:50:c7:14:0e:96:47:16:48:d0:c1:9a: 14:9a:99:ff:4c:74:e3:80:1c:8e:47:95:17:27:75:51:52:f8: a4:a4:ea:d9:c2:3e:8c:03:7a:0d:27:3d:e9:3c:91:02:4b:82: 78:48:98:53:d4:ac:97:fb:6b:f6:f8:34:bc:5a:bd:ec:7d:d7: 4c:0e:48:05:99:e1:13:a8:7d:0a:61:26:12:06:77:4c:ac:ef: 75:85:ae:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVTMzKwvMeBaLr4O6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OTU2NDIxNjQtNDI5NS00NmIxLWEzZmUtNDQwZTE1NmE0YjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3gSOP6BXPlbg5GePTm1AFH+DGXv8x9SKrqT ktlmoGRcDJT7Oho9a0toJwtDPKhfywoQmXOGNs/x/CI722RbevmfOAO2JPMQmTE7 A23qAHHtnj5aHXejAxZEqIMrPf86R3vNyS7OtAjWg4BhSCNc78Gpcg4KUEwwQ0qq NIC6pIZh4ZBLHBnF3mQdbLxoyDjod21GAGur1w1ru7H4cliwYJcX0inEoHlne1/k XCmtIkDlb1p7NJ64ennL3iPKPRJaXgMeCEXAug666HPRQxpDD55sqtXoHRTSvoBk RviSZM/OsLXX7XGILe544+tAEuN0A76b4wb8ggAkNMIxgrdfKwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJzzNOCa7v5dttdgjPl7vcqflLENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNhNzBkYzQtMjhjNi0z MWRlLWIxYzUtNGViNGE4NjhkNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJfBUqvgN++s5qE+uwITs2CA7dS751d/SBYXYw/0kyk6H3NhlaDFi gKAnQTUJB4K7+R/jove64UCFQO6gGGETYrD8cm+DAKlAFXKnV/OnURpP6VS/1Ywh c4bG7qY+bJckBd+TG2d1o1P6UUDXAUz6rVPqPS35eq2HnNmDksd3rVouQKKoDyZH amUQaruJFp7Bu3ekeLE+ZRsMOMIzfY7MU3kiCVVT3BPraFDHFA6WRxZI0MGaFJqZ /0x044AcjkeVFyd1UVL4pKTq2cI+jAN6DSc96TyRAkuCeEiYU9Ssl/tr9vg0vFq9 7H3XTA5IBZnhE6h9CmEmEgZ3TKzvdYWu5A== -----END CERTIFICATE-----Generated at Thu May 23 13:45:02 2024 by rpki-client on console-fra.rpki-client.org