$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa File: b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa (raw, json) Hash identifier: kR09Pz6+AZbF6w4muKIx9RYze0IZcxZoM6daNUDngVc= Subject key identifier: CD:3D:E7:38:1A:87:2F:B9:50:FB:76:EB:0A:6B:C0:F9:86:F9:60:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332DA1A7FD4C5F42454020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2d:a1:a7:fd:4c:5f:42:45:40:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=b89f1cd8-ee44-4a1d-94ad-66ba9c820514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:52:41:30:ad:3d:30:f4:8f:de:c7:08:8c: 4e:03:a7:00:52:76:b7:af:f5:c4:42:c8:a7:88:ba: 0c:19:7e:73:49:8d:95:68:a8:3f:24:b6:b7:69:46: a3:4b:37:08:e3:a3:03:57:ab:c5:8c:b2:f6:d1:61: 70:40:12:b0:89:98:e0:de:5f:48:ac:b8:4a:29:9e: a7:47:76:5c:c4:46:54:b0:f5:8a:22:0b:09:04:0b: cc:00:d2:3d:54:94:79:b1:54:1e:9c:df:fe:87:3a: 93:8b:85:4f:a8:25:c7:5f:65:22:d5:54:1b:2f:2c: b9:c2:76:12:16:e0:47:fc:bc:a7:95:b0:eb:91:bf: 23:5f:d6:53:b0:0f:80:f3:ab:21:89:d6:89:a8:b0: 75:48:bf:15:45:6a:d2:4b:17:b2:92:d4:70:3d:67: 86:ef:09:0f:93:f7:e3:c3:75:62:ed:29:99:11:ad: 77:f1:f3:bb:e8:51:7f:01:85:c8:4d:af:97:d5:26: ba:6b:f1:0d:20:7e:c0:fe:25:d3:0b:28:ad:89:54: 9a:bd:a8:ef:e1:85:25:0f:43:d6:08:0b:cf:43:cf: f7:d6:57:af:13:ed:f6:de:48:d1:8e:5a:9d:5f:1d: 8b:a1:23:ce:aa:09:7b:78:93:b6:80:15:05:1c:6b: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3D:E7:38:1A:87:2F:B9:50:FB:76:EB:0A:6B:C0:F9:86:F9:60:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:da:11:fe:31:d5:5e:b4:d3:33:1a:cf:23:4c:c0:86:9c:83: 6c:8e:b3:ab:a0:5e:a6:8d:dd:b1:b0:9a:0e:fd:47:7f:25:ac: e2:6a:d2:99:41:b8:57:3e:57:a4:d6:64:bd:db:b9:90:1d:5e: 0e:de:86:8e:ce:65:8c:da:cb:d3:df:e7:4c:9d:e8:72:66:6a: 6c:4b:55:24:57:1f:10:58:f4:dc:96:0c:60:e9:f2:b7:af:9c: 12:bf:2d:ad:6e:b0:a5:02:86:4e:f6:29:32:81:6a:d0:44:0b: 8b:3c:20:27:ab:0a:ad:8c:0d:1d:0d:fc:ea:1b:b0:ab:ba:95: ca:8a:ac:02:12:6d:4b:b9:e3:b2:bf:7a:59:88:64:e2:e0:1d: ce:ea:bc:2d:43:65:0e:60:80:b0:57:ba:41:e3:79:07:cd:e3: 54:0c:d9:19:16:84:e2:a8:fa:83:7a:82:d1:ca:94:ea:1d:72: 32:3f:4e:1f:c2:ee:4e:80:e7:b4:ff:7c:6a:f0:34:ba:d3:d5: 1b:d6:f7:db:9b:31:ae:11:ba:0d:be:59:0d:6b:66:17:f5:b2: 4e:16:a4:d6:e9:38:03:a9:68:96:ce:2c:a8:24:9e:f8:8b:73: 4a:bd:76:2e:f6:00:8d:e6:3a:b6:89:07:a8:e6:d7:8a:9d:a0: 7a:c1:4f:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy2hp/1MX0JFQCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk Yjg5ZjFjZDgtZWU0NC00YTFkLTk0YWQtNjZiYTljODIwNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHlSQTCtPTD0j97HCIxOA6cAUna3r/XEQsin iLoMGX5zSY2VaKg/JLa3aUajSzcI46MDV6vFjLL20WFwQBKwiZjg3l9IrLhKKZ6n R3ZcxEZUsPWKIgsJBAvMANI9VJR5sVQenN/+hzqTi4VPqCXHX2Ui1VQbLyy5wnYS FuBH/LynlbDrkb8jX9ZTsA+A86shidaJqLB1SL8VRWrSSxeyktRwPWeG7wkPk/fj w3Vi7SmZEa138fO76FF/AYXITa+X1Sa6a/ENIH7A/iXTCyitiVSavajv4YUlD0PW CAvPQ8/31levE+323kjRjlqdXx2LoSPOqgl7eJO2gBUFHGschwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM095zgahy+5UPt26wprwPmG+WDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjM3MTZmMzYtOWQ1MS0z YTQ4LWJjMWEtYTZiNWY3ZTI4NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzaEf4x1V600zMazyNMwIacg2yOs6ugXqaN3bGwmg79R38lrOJq 0plBuFc+V6TWZL3buZAdXg7eho7OZYzay9Pf50yd6HJmamxLVSRXHxBY9NyWDGDp 8revnBK/La1usKUChk72KTKBatBEC4s8ICerCq2MDR0N/OobsKu6lcqKrAISbUu5 47K/elmIZOLgHc7qvC1DZQ5ggLBXukHjeQfN41QM2RkWhOKo+oN6gtHKlOodcjI/ Th/C7k6A57T/fGrwNLrT1RvW99ubMa4Rug2+WQ1rZhf1sk4WpNbpOAOpaJbOLKgk nviLc0q9di72AI3mOraJB6jm14qdoHrBT5k= -----END CERTIFICATE-----Generated at Sat May 18 01:40:39 2024 by rpki-client on console-fra.rpki-client.org