$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5c09b23-dd4d-32e5-b2d7-adc44eeca1ca.roa File: a5c09b23-dd4d-32e5-b2d7-adc44eeca1ca.roa (raw, json) Hash identifier: u1etpltCZj/aes3niG48fOeQwZDj/kiOf8gV4MoxUGM= Subject key identifier: 1E:35:4A:32:59:84:7D:B3:9E:65:D3:81:73:A2:17:82:BB:B9:D6:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550D50C248959CDA7697C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5c09b23-dd4d-32e5-b2d7-adc44eeca1ca.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0d:50:c2:48:95:9c:da:76:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=1ac6a85d-2541-402c-a45c-f445622afd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:fe:db:e8:a7:b8:14:25:c4:66:bf:00:b5: af:c6:24:45:28:0b:a0:6c:8b:4b:ea:9d:c8:45:01: ab:e2:f6:fe:3c:21:3e:0e:30:f4:f4:a2:81:a9:49: 81:2c:2c:37:bb:83:cc:26:2e:8a:ef:fd:50:ff:51: dc:84:d4:9d:01:73:45:72:4a:6b:47:30:84:2e:de: 8a:53:74:70:2c:6b:ef:21:7e:28:9b:09:c8:e7:81: fa:59:24:44:33:0a:f2:63:08:3e:99:7d:f3:fb:8a: ff:77:26:e9:2f:02:f1:1e:53:03:26:cd:6c:ce:eb: 2f:c1:c9:c7:0b:09:eb:b6:e5:42:ee:51:00:fb:21: 3e:50:87:79:bb:db:02:19:9d:a2:f3:56:cf:2e:39: 60:76:b7:ca:d0:ec:0a:65:1c:d2:8d:56:d3:a2:bc: 5f:6a:6e:8e:4f:79:b2:07:56:84:40:06:2f:81:d4: 13:03:00:1c:2a:e8:fb:58:4e:45:e8:e1:34:63:b1: 4c:f8:e0:a5:cb:d4:40:d0:3e:7e:7d:db:ac:84:17: ab:64:7e:ba:2a:d9:92:4b:7e:a6:8a:51:80:c1:27: 91:06:00:4e:0a:fb:ee:a1:a2:f3:05:fd:d9:a7:2c: c6:36:f1:fa:f6:16:01:6f:1c:cb:26:0a:5a:ed:6a: 8e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:35:4A:32:59:84:7D:B3:9E:65:D3:81:73:A2:17:82:BB:B9:D6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5c09b23-dd4d-32e5-b2d7-adc44eeca1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:30:0d:e9:56:d9:1a:ea:f3:b3:98:99:ae:73:f0:59:d3:15: dd:61:89:dd:78:b5:97:f8:2b:3f:08:98:7b:fe:ee:15:46:0c: c5:16:76:cb:55:5b:84:0e:2b:29:83:68:ac:2c:29:11:43:69: ac:99:a6:76:d6:27:fa:48:09:25:8f:94:e9:ee:1e:3c:77:cc: 5d:21:ae:4c:ca:ba:5f:7f:f6:cd:20:bc:c1:6e:81:ba:c2:bf: 80:6b:b0:15:95:c7:bc:2a:be:55:55:75:2c:b0:49:39:f4:a2: b8:bb:f9:c7:9c:4c:08:d2:f7:49:96:6b:d2:a3:c2:c4:77:64: 39:5f:83:87:30:63:17:46:6a:b2:15:bc:9e:38:5e:03:26:b5: eb:d4:b9:f2:70:e5:f7:1c:e1:05:8d:ed:30:28:76:1e:52:3d: 53:f6:d4:b8:e6:91:bd:dd:8c:5b:b2:f1:6f:5e:8d:8b:30:91: f7:96:f5:42:51:46:1c:bd:04:89:d0:0b:50:fa:39:bc:42:8c: ba:7c:77:db:e5:c0:0c:b6:66:ef:cc:d9:a4:03:65:ec:52:89: 9c:b3:56:4f:8e:24:83:d5:cb:c8:40:d2:2e:87:13:40:fb:7b: c5:d7:d0:76:53:93:ee:8e:0c:35:71:38:5b:4a:69:1b:f8:40: 52:49:8b:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVQ1QwkiVnNp2l8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MWFjNmE4NWQtMjU0MS00MDJjLWE0NWMtZjQ0NTYyMmFmZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQP+2+inuBQlxGa/ALWvxiRFKAugbItL6p3I RQGr4vb+PCE+DjD09KKBqUmBLCw3u4PMJi6K7/1Q/1HchNSdAXNFckprRzCELt6K U3RwLGvvIX4omwnI54H6WSREMwryYwg+mX3z+4r/dybpLwLxHlMDJs1szusvwcnH CwnrtuVC7lEA+yE+UId5u9sCGZ2i81bPLjlgdrfK0OwKZRzSjVbTorxfam6OT3my B1aEQAYvgdQTAwAcKuj7WE5F6OE0Y7FM+OCly9RA0D5+fdushBerZH66KtmSS36m ilGAwSeRBgBOCvvuoaLzBf3ZpyzGNvH69hYBbxzLJgpa7WqOhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB41SjJZhH2znmXTgXOiF4K7udZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTVjMDliMjMtZGQ0ZC0z MmU1LWIyZDctYWRjNDRlZWNhMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFUwDelW2Rrq87OYma5z8FnTFd1hid14tZf4Kz8ImHv+7hVGDMUW dstVW4QOKymDaKwsKRFDaayZpnbWJ/pICSWPlOnuHjx3zF0hrkzKul9/9s0gvMFu gbrCv4BrsBWVx7wqvlVVdSywSTn0ori7+cecTAjS90mWa9KjwsR3ZDlfg4cwYxdG arIVvJ44XgMmtevUufJw5fcc4QWN7TAodh5SPVP21Ljmkb3djFuy8W9ejYswkfeW 9UJRRhy9BInQC1D6ObxCjLp8d9vlwAy2Zu/M2aQDZexSiZyzVk+OJIPVy8hA0i6H E0D7e8XX0HZTk+6ODDVxOFtKaRv4QFJJi8k= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:24 2024 by rpki-client on console-fra.rpki-client.org