$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa File: ae55df24-7c19-3bfc-87d0-5689589fa0de.roa (raw, json) Hash identifier: G3DNkhWk5TtQELxBeR5WIUnab34r2iSBDxWqbhLCM38= Subject key identifier: 1D:1B:7B:B3:82:34:3F:6A:17:FB:9E:50:F1:57:9C:26:23:8C:A8:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553D7F35678878BADC9800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3d:7f:35:67:88:78:ba:dc:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=3578257b-e50c-49fe-8f9f-d4be71e06658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:a0:74:39:cb:9d:14:d2:b8:8b:d1:33:fb: fd:6b:d8:93:77:5c:ab:57:43:d3:12:35:d9:af:56: 01:08:4c:22:17:75:98:83:6b:6d:41:a4:2f:77:ba: 82:d2:04:b3:06:3c:28:80:ac:61:6b:01:de:b2:cb: 1f:84:11:78:03:8a:89:5c:41:61:cb:79:67:d9:6a: 51:75:17:f9:e2:76:f4:f6:2b:1c:dd:ee:21:ff:12: 01:34:01:7e:65:69:ed:b6:52:9c:c8:25:25:95:67: e5:6a:28:35:31:a6:05:15:be:8d:c2:8c:d8:26:89: 5b:30:32:35:1d:e6:36:5e:5f:1a:d9:1c:67:c8:cf: c7:6a:67:81:e2:2c:30:e3:b0:48:44:09:b3:af:e6: ac:eb:89:ff:94:b7:1f:3d:c5:46:73:36:22:df:3f: d0:5b:55:d5:7c:c1:7c:50:02:11:76:02:27:01:29: d7:e3:ab:5d:ed:51:dd:c0:f2:fa:bf:ab:c6:3b:c0: 64:51:97:37:85:4e:8f:25:e2:36:ad:32:ad:7b:8a: bf:34:fc:2b:52:1c:f7:6d:1b:d2:e3:c1:f9:37:1d: e6:5a:04:45:00:8a:67:e3:f9:f0:d8:c7:06:d3:55: 1f:9e:3d:f9:10:b7:75:62:e3:39:61:8f:ee:5b:b9: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1B:7B:B3:82:34:3F:6A:17:FB:9E:50:F1:57:9C:26:23:8C:A8:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b4:3a:eb:83:6e:1f:ca:56:49:ca:79:f0:8a:e7:b0:0f:bc: cb:16:a2:cc:61:56:20:7c:a5:4c:44:88:d1:3c:6c:c4:6a:dd: 59:93:2d:bc:37:13:d0:99:66:c3:65:be:c8:f4:6d:21:19:75: 2c:e1:1d:bd:03:1c:62:30:be:7c:72:89:d3:bb:65:e0:28:86: 35:43:d2:ba:b4:9e:1b:b0:7d:6e:46:3f:7c:e8:b5:b4:99:71: 69:03:24:cf:7a:0f:d2:26:47:37:cf:e6:74:e9:c5:cc:9c:95: a2:32:62:9e:3d:7a:d5:79:a5:3c:29:4a:b6:61:a8:58:f0:a7: 93:2f:5b:f1:08:d9:25:dc:d0:a7:1f:e2:64:03:0c:4c:d6:c0: dc:af:cb:d5:87:6e:fc:a2:38:d4:b5:44:60:c7:84:ee:d7:33: 64:c2:d0:a2:06:5b:9b:2f:54:0e:df:f3:71:56:e0:49:15:d3: 15:8a:4c:b4:77:10:a1:38:de:7f:7f:0e:fa:dd:11:71:bd:97: 34:76:56:03:d8:4f:37:c5:59:00:d7:e9:56:20:cb:14:a7:8a: fb:9f:ae:cd:c2:f4:6d:b3:41:9f:15:fc:83:63:de:61:3d:8b: f9:dd:ef:72:b5:0d:4e:1d:f7:26:04:59:8f:33:56:a6:a5:13: 06:db:7f:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVT1/NWeIeLrcmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MzU3ODI1N2ItZTUwYy00OWZlLThmOWYtZDRiZTcxZTA2NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHCgdDnLnRTSuIvRM/v9a9iTd1yrV0PTEjXZ r1YBCEwiF3WYg2ttQaQvd7qC0gSzBjwogKxhawHesssfhBF4A4qJXEFhy3ln2WpR dRf54nb09isc3e4h/xIBNAF+ZWnttlKcyCUllWflaig1MaYFFb6NwozYJolbMDI1 HeY2Xl8a2RxnyM/HameB4iww47BIRAmzr+as64n/lLcfPcVGczYi3z/QW1XVfMF8 UAIRdgInASnX46td7VHdwPL6v6vGO8BkUZc3hU6PJeI2rTKte4q/NPwrUhz3bRvS 48H5Nx3mWgRFAIpn4/nw2McG01Ufnj35ELd1YuM5YY/uW7lBCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB0be7OCND9qF/ueUPFXnCYjjKhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1NWRmMjQtN2MxOS0z YmZjLTg3ZDAtNTY4OTU4OWZhMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABq0OuuDbh/KVknKefCK57APvMsWosxhViB8pUxEiNE8bMRq3VmT Lbw3E9CZZsNlvsj0bSEZdSzhHb0DHGIwvnxyidO7ZeAohjVD0rq0nhuwfW5GP3zo tbSZcWkDJM96D9ImRzfP5nTpxcyclaIyYp49etV5pTwpSrZhqFjwp5MvW/EI2SXc 0Kcf4mQDDEzWwNyvy9WHbvyiONS1RGDHhO7XM2TC0KIGW5svVA7f83FW4EkV0xWK TLR3EKE43n9/DvrdEXG9lzR2VgPYTzfFWQDX6VYgyxSnivufrs3C9G2zQZ8V/INj 3mE9i/nd73K1DU4d9yYEWY8zVqalEwbbf0c= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:26 2024 by rpki-client on console-fra.rpki-client.org