$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa File: ae55df24-7c19-3bfc-87d0-5689589fa0de.roa (raw, json) Hash identifier: iuCOTZVd7mzmlGTIHD+PWFese+FxyEu0s6IAUQlWlDI= Subject key identifier: A5:53:E4:D5:EB:34:B4:B1:8A:79:32:5E:D6:E0:25:89:0A:9D:45:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332DE5F6AE9A8CE9B41000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2d:e5:f6:ae:9a:8c:e9:b4:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=70e5e3e5-df64-4b12-905d-20681ffcab1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7e:bc:6e:b4:f8:e5:0b:9c:8d:72:4f:d9:db: a5:a3:d4:b0:05:7a:03:a6:ef:ca:68:44:9b:3f:7d: 3e:b5:1d:67:92:b7:74:4c:a4:50:63:2d:2b:83:2d: 81:84:a0:eb:09:f7:9e:f2:3f:7d:24:bc:3e:cc:fa: d6:5f:05:d3:d8:4a:5e:b3:b2:9e:3a:be:81:57:d8: ca:22:4e:db:f8:e9:5e:12:cd:cc:77:90:68:8d:cd: d9:72:bb:80:e4:a4:7a:7d:9a:b5:e2:c9:78:51:51: 6a:15:fc:d8:9e:e8:6b:13:78:aa:ae:df:7e:7e:33: de:b0:4e:a5:cc:0a:2a:d8:69:f0:78:4f:a3:3f:7f: 98:d5:87:8f:01:02:62:92:85:1b:a6:7c:17:75:5c: 4b:7f:b6:02:3f:3f:ba:c4:6d:9f:5c:92:89:ed:7e: 87:bb:ae:8b:0d:44:b9:f2:97:b5:c3:d6:4b:74:cc: 18:68:95:12:83:88:6f:af:70:8a:3e:e3:bf:0f:47: e2:e2:05:2b:92:70:7d:e2:97:6a:78:bd:9e:66:21: 05:b5:9d:f4:42:07:a0:8d:05:84:e9:c1:07:07:03: bf:26:fd:ab:3a:0b:f7:3f:25:0b:97:8d:3e:a4:9e: fb:60:29:ba:92:8d:05:67:24:f0:94:09:04:93:53: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:53:E4:D5:EB:34:B4:B1:8A:79:32:5E:D6:E0:25:89:0A:9D:45:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d6:b8:c3:82:5b:ae:23:56:ad:d3:08:86:fb:1d:e8:57:5c: 1a:7a:cd:1b:5e:af:13:a8:f6:7f:aa:96:de:a3:6e:18:80:97: 9f:75:a2:94:c8:34:7a:5e:e7:3a:50:18:0d:56:24:90:c9:5e: cf:13:39:94:bb:4e:e4:72:ab:47:ef:b1:40:9d:ea:5a:f3:a2: ca:af:a0:9c:2b:37:69:47:48:3d:d0:45:de:c7:97:86:c5:2c: 0d:d2:4f:7e:38:d7:c2:f2:b2:07:8a:55:6b:e5:b9:67:8b:3a: 4a:f0:88:ed:eb:d9:51:45:2c:e7:30:83:11:29:9d:3e:ef:72: 54:07:65:4f:4e:dd:c3:41:03:01:4f:bd:89:7f:ae:cc:06:f9: 7d:b9:5d:88:97:f6:62:e4:3d:45:e0:c3:28:95:a5:93:21:2b: 48:73:ce:71:a3:13:06:00:4a:e4:97:af:d5:88:24:01:7b:f1: 57:c4:44:dc:97:2f:39:f4:25:84:4b:71:2a:30:c0:a7:28:0e: 5b:c5:d4:7e:3d:96:c4:22:04:63:0a:de:71:07:40:74:6c:80: 9a:6e:98:08:9f:80:cd:14:21:88:1c:26:68:84:5d:25:e6:94: 52:a4:22:f8:07:74:e2:4d:7c:73:7e:1c:fb:cd:d2:7c:cd:2e: f3:71:1c:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy3l9q6ajOm0EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NzBlNWUzZTUtZGY2NC00YjEyLTkwNWQtMjA2ODFmZmNhYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6368brT45QucjXJP2dulo9SwBXoDpu/KaESb P30+tR1nkrd0TKRQYy0rgy2BhKDrCfee8j99JLw+zPrWXwXT2Epes7KeOr6BV9jK Ik7b+OleEs3Md5Bojc3ZcruA5KR6fZq14sl4UVFqFfzYnuhrE3iqrt9+fjPesE6l zAoq2GnweE+jP3+Y1YePAQJikoUbpnwXdVxLf7YCPz+6xG2fXJKJ7X6Hu66LDUS5 8pe1w9ZLdMwYaJUSg4hvr3CKPuO/D0fi4gUrknB94pdqeL2eZiEFtZ30QgegjQWE 6cEHBwO/Jv2rOgv3PyULl40+pJ77YCm6ko0FZyTwlAkEk1OGqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVT5NXrNLSxinkyXtbgJYkKnUVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1NWRmMjQtN2MxOS0z YmZjLTg3ZDAtNTY4OTU4OWZhMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXWuMOCW64jVq3TCIb7HehXXBp6zRterxOo9n+qlt6jbhiAl591 opTINHpe5zpQGA1WJJDJXs8TOZS7TuRyq0fvsUCd6lrzosqvoJwrN2lHSD3QRd7H l4bFLA3ST34418LysgeKVWvluWeLOkrwiO3r2VFFLOcwgxEpnT7vclQHZU9O3cNB AwFPvYl/rswG+X25XYiX9mLkPUXgwyiVpZMhK0hzznGjEwYASuSXr9WIJAF78VfE RNyXLzn0JYRLcSowwKcoDlvF1H49lsQiBGMK3nEHQHRsgJpumAifgM0UIYgcJmiE XSXmlFKkIvgHdOJNfHN+HPvN0nzNLvNxHA0= -----END CERTIFICATE-----Generated at Thu May 23 20:12:02 2024 by rpki-client on console-ams.rpki-client.org