$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf3e5339-68cb-3f88-8180-559c397a01df.roa File: bf3e5339-68cb-3f88-8180-559c397a01df.roa (raw, json) Hash identifier: MQsarG7dgJkXXgUnNhu4+4dB0lGUoKsiYHe6OBzWzA4= Subject key identifier: 8F:E8:53:F4:67:EC:7B:C4:34:42:2A:16:61:9C:01:41:63:C6:3C:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332E2E1199F6C8B6950140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf3e5339-68cb-3f88-8180-559c397a01df.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2e:2e:11:99:f6:c8:b6:95:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=4df13f5d-7f99-4e79-b52f-95b034f24b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6b:d9:b4:4e:6b:3f:05:6c:7e:46:01:a6:9a: 78:bf:0d:a2:80:ae:03:00:98:c2:2c:8e:82:02:dd: 52:a4:bf:bb:53:53:d2:73:9c:e8:9f:cf:9b:2f:2f: c4:99:66:48:69:07:9d:9b:2d:21:1f:f4:34:0a:29: f9:9f:3a:a3:ad:ed:6e:83:61:99:da:c7:0c:03:97: ea:d0:c7:cf:60:20:9e:37:14:f0:22:eb:5c:3f:16: 4c:7d:dc:33:67:78:7b:c1:c5:f4:bb:d8:64:b3:bb: 30:87:d5:a9:00:ec:79:fb:56:e3:e9:89:cb:4b:71: 5a:d3:d2:45:42:52:29:00:e0:c2:9e:df:42:5e:8c: a8:9f:1f:65:19:e8:1a:24:b2:05:37:de:a4:a8:e2: 89:9b:87:5c:c9:c4:3e:d6:be:20:e3:24:d2:15:e4: 4b:d9:f0:6e:6a:40:3d:a5:2d:a6:bb:d2:04:99:b7: d0:a7:69:d1:71:87:d2:2d:bc:cc:6d:7a:6d:4f:cc: 67:e2:8c:65:4e:fa:e5:1e:7a:a3:e3:09:4b:4a:d0: 93:21:8a:fb:38:38:7e:a1:36:b1:07:50:c6:8e:83: 4d:a7:ff:49:a0:fa:5a:15:78:f5:1b:62:ee:24:1d: 19:9a:a2:26:9d:34:59:fc:b2:4d:c1:c8:09:31:52: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:53:F4:67:EC:7B:C4:34:42:2A:16:61:9C:01:41:63:C6:3C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf3e5339-68cb-3f88-8180-559c397a01df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:01:58:dd:90:49:16:5c:c3:97:94:c1:df:b7:7c:0a:27:f0: 36:f5:a0:67:56:11:8c:f3:a2:aa:10:56:b5:2d:f6:0e:b5:62: 1e:4f:60:26:ed:31:87:0f:d1:24:ad:2c:1b:33:76:c8:72:9f: b0:da:97:39:ed:3c:85:56:bc:22:4a:9d:ca:ec:15:b2:e7:da: 26:6a:79:c9:c3:64:3c:7f:aa:b9:86:ce:59:5a:96:1e:3b:20: 84:e4:c3:67:ce:4b:02:4a:ac:66:b0:7d:0b:09:41:b3:9e:53: 59:e3:11:f3:2f:60:cd:78:b5:94:10:ec:4f:fc:b6:24:37:cc: 93:4d:86:d5:90:3b:2c:2e:d1:b3:4d:4c:f2:12:12:f8:bc:32: 1c:c1:d0:7a:c4:ca:11:f8:1f:77:7d:44:a5:b6:8a:ef:13:5e: d4:92:1c:53:1e:32:67:2e:b3:b9:79:cf:68:0a:e6:4f:ac:f9: e6:0e:6f:fe:b2:2e:96:f1:9d:29:c3:98:5d:0c:4e:45:17:62: 0b:8f:af:47:af:7e:3e:cb:ce:f3:96:13:32:59:e7:f3:e5:c3: 95:3f:90:46:e4:98:8f:14:79:64:20:21:e0:ff:1b:03:f0:ba: 24:1d:11:dd:99:eb:8e:e7:bd:31:1d:9e:70:da:22:26:00:ab: 78:2c:4c:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy4uEZn2yLaVAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NGRmMTNmNWQtN2Y5OS00ZTc5LWI1MmYtOTViMDM0ZjI0Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGvZtE5rPwVsfkYBppp4vw2igK4DAJjCLI6C At1SpL+7U1PSc5zon8+bLy/EmWZIaQedmy0hH/Q0Cin5nzqjre1ug2GZ2scMA5fq 0MfPYCCeNxTwIutcPxZMfdwzZ3h7wcX0u9hks7swh9WpAOx5+1bj6YnLS3Fa09JF QlIpAODCnt9CXoyonx9lGegaJLIFN96kqOKJm4dcycQ+1r4g4yTSFeRL2fBuakA9 pS2mu9IEmbfQp2nRcYfSLbzMbXptT8xn4oxlTvrlHnqj4wlLStCTIYr7ODh+oTax B1DGjoNNp/9JoPpaFXj1G2LuJB0ZmqImnTRZ/LJNwcgJMVLBLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/oU/Rn7HvENEIqFmGcAUFjxjzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmYzZTUzMzktNjhjYi0z Zjg4LTgxODAtNTU5YzM5N2EwMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG4BWN2QSRZcw5eUwd+3fAon8Db1oGdWEYzzoqoQVrUt9g61Yh5P YCbtMYcP0SStLBszdshyn7DalzntPIVWvCJKncrsFbLn2iZqecnDZDx/qrmGzlla lh47IITkw2fOSwJKrGawfQsJQbOeU1njEfMvYM14tZQQ7E/8tiQ3zJNNhtWQOywu 0bNNTPISEvi8MhzB0HrEyhH4H3d9RKW2iu8TXtSSHFMeMmcus7l5z2gK5k+s+eYO b/6yLpbxnSnDmF0MTkUXYguPr0evfj7LzvOWEzJZ5/Plw5U/kEbkmI8UeWQgIeD/ GwPwuiQdEd2Z647nvTEdnnDaIiYAq3gsTHg= -----END CERTIFICATE-----Generated at Thu May 23 16:33:55 2024 by rpki-client on console-ams.rpki-client.org