$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa File: a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa (raw, json) Hash identifier: trtuuGUV9afELz9EG8j33DJ/+/Z4aA4hxQp3Dsr0rWA= Subject key identifier: D2:C7:C3:C9:38:65:4A:9F:38:A9:A5:DB:1F:4A:08:F8:8B:FA:C1:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332EC9A39A2431CDC3E650 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2e:c9:a3:9a:24:31:cd:c3:e6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=13ed652d-218a-4061-8422-d705b7a2e100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:40:d4:9a:68:d0:68:f6:93:c1:5d:45:c6: 30:f7:b0:42:ba:e3:95:9f:33:57:7d:0a:a5:03:af: 55:08:3f:97:74:0f:af:12:5a:62:64:d5:c4:13:8f: ee:64:54:96:80:26:bc:55:7d:38:e5:51:41:83:c2: d1:8d:15:85:25:06:0d:f5:de:dd:0a:eb:27:db:c7: c0:fa:75:b3:35:34:80:00:c6:9f:1f:03:93:a1:d6: d8:62:06:e4:63:9d:6d:da:2f:5f:b2:d9:87:eb:31: ac:fa:57:4e:3a:c7:ce:ba:97:86:fd:78:04:b0:f7: 5c:57:fb:ec:2c:ae:11:85:db:ba:b2:24:7f:11:72: c7:ca:35:d7:e7:74:64:5a:79:6a:7d:5f:9d:7e:fe: 95:68:41:30:ae:3d:b6:e9:f9:37:b3:0e:57:87:ed: 79:35:96:43:4f:27:2c:a1:66:dd:f0:a3:88:17:01: 95:d3:9c:44:a9:61:cf:c3:46:47:c6:15:b7:42:54: 0c:e8:66:90:ef:99:82:14:48:48:75:83:c5:49:2f: a3:6d:76:1b:39:95:03:98:05:3e:88:82:58:17:02: 67:af:4f:12:c5:d8:fa:25:92:c3:39:d4:63:88:10: 44:f4:f7:e4:ae:21:2f:1e:25:74:ed:c8:6d:4b:c9: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C7:C3:C9:38:65:4A:9F:38:A9:A5:DB:1F:4A:08:F8:8B:FA:C1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1b:52:d3:5f:8d:10:b4:7a:b1:6a:4f:21:26:7f:1e:14:f5: 71:c4:81:27:7a:30:11:a8:46:07:a2:82:39:b8:18:c0:18:29: 6f:11:ba:ef:36:6e:eb:b5:c0:9d:c3:90:45:0b:b9:8c:8e:16: 9c:76:a3:2d:0f:a7:9d:ae:3f:a0:c4:a6:fc:83:fd:3b:11:aa: 4d:22:ec:a1:7e:96:ba:a9:ce:f6:aa:9c:4c:11:a3:f5:73:1a: 73:67:24:cd:b2:57:06:fd:1d:d7:0e:53:67:b3:cd:85:8a:fc: 77:fe:f8:ac:6b:de:ea:f0:7c:87:2b:60:85:3c:e1:e5:01:c9: 33:b3:ec:4f:dc:3d:9c:86:c4:3f:d2:af:e2:a6:9a:83:13:a8: cb:19:86:58:be:f2:68:c8:14:16:8a:06:cd:4b:c6:e5:1d:42: c3:78:8a:82:bb:75:47:15:53:aa:8b:11:c0:06:10:fa:4f:fd: 0c:a7:a7:2c:4e:71:0d:c5:f7:78:64:32:25:84:f2:ad:79:e5: 48:41:a8:3c:9b:6d:53:b7:61:a7:bc:53:68:c4:99:1f:cc:4c: d7:26:af:e8:67:8f:6c:e0:a9:f9:33:e1:78:4b:e9:f3:b3:12: 3e:48:fb:d0:29:71:ad:42:d7:a6:06:ad:e3:4e:1a:e9:92:8f: f8:46:41:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy7Jo5okMc3D5lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk MTNlZDY1MmQtMjE4YS00MDYxLTg0MjItZDcwNWI3YTJlMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kZA1Jpo0Gj2k8FdRcYw97BCuuOVnzNXfQql A69VCD+XdA+vElpiZNXEE4/uZFSWgCa8VX045VFBg8LRjRWFJQYN9d7dCusn28fA +nWzNTSAAMafHwOTodbYYgbkY51t2i9fstmH6zGs+ldOOsfOupeG/XgEsPdcV/vs LK4Rhdu6siR/EXLHyjXX53RkWnlqfV+dfv6VaEEwrj226fk3sw5Xh+15NZZDTycs oWbd8KOIFwGV05xEqWHPw0ZHxhW3QlQM6GaQ75mCFEhIdYPFSS+jbXYbOZUDmAU+ iIJYFwJnr08Sxdj6JZLDOdRjiBBE9PfkriEvHiV07chtS8lRnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNLHw8k4ZUqfOKml2x9KCPiL+sFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNjNzlmMjgtZmE4YS0z MjY3LWE2ZjAtZDEwOTlkNjA0YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsbUtNfjRC0erFqTyEmfx4U9XHEgSd6MBGoRgeigjm4GMAYKW8R uu82buu1wJ3DkEULuYyOFpx2oy0Pp52uP6DEpvyD/TsRqk0i7KF+lrqpzvaqnEwR o/VzGnNnJM2yVwb9HdcOU2ezzYWK/Hf++Kxr3urwfIcrYIU84eUByTOz7E/cPZyG xD/Sr+KmmoMTqMsZhli+8mjIFBaKBs1LxuUdQsN4ioK7dUcVU6qLEcAGEPpP/Qyn pyxOcQ3F93hkMiWE8q155UhBqDybbVO3Yae8U2jEmR/MTNcmr+hnj2zgqfkz4XhL 6fOzEj5I+9Apca1C16YGreNOGumSj/hGQVY= -----END CERTIFICATE-----Generated at Sat May 18 01:54:38 2024 by rpki-client on console-ams.rpki-client.org