$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa File: c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa (raw, json) Hash identifier: c0s4rbj0WITWuFV84dNcDMaxfzWK1cFQSUQyWV/wkzs= Subject key identifier: 69:CE:96:EC:5D:2B:2C:C1:86:89:2C:B7:67:04:A3:32:99:0C:9E:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1551098828A3379DFEAC180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:10:98:82:8a:33:79:df:ea:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=d3aa7059-d4b9-44c6-ac4b-373f4504ee30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:50:26:d8:84:27:78:8d:ad:67:72:1a:1a: a4:66:74:e2:a8:a4:d1:ea:a5:aa:da:dc:a4:0f:73: b4:59:7a:b3:85:26:cb:46:18:bc:aa:dd:bd:26:39: 10:23:6a:1c:5b:cd:45:d7:53:c7:d9:52:cc:51:12: fd:ae:f1:7e:28:60:78:07:2c:94:1c:10:bc:08:9d: 06:7f:35:24:73:b7:35:8c:6a:4f:ab:ec:b4:1e:fe: 76:52:72:35:22:b5:57:65:0c:cd:bd:8b:53:70:d7: 88:b7:21:f1:d3:db:38:59:f8:71:f3:56:45:45:a8: 07:da:18:b0:c8:1b:a9:6f:e8:52:5e:89:8a:c8:bc: 5a:b7:fe:7e:56:21:9c:41:9d:82:4e:62:e2:a9:f0: 5e:6b:a2:54:3f:b3:11:47:97:e9:fc:71:bc:f9:66: a2:5b:e8:f7:52:19:42:f2:2f:d4:c3:08:ac:71:76: c7:60:c5:22:9e:1e:7a:09:cb:ff:79:e9:f1:5f:d9: 9c:ca:13:4c:51:26:aa:d8:5b:da:6b:36:70:48:1d: 40:c8:5c:3c:a6:5e:d8:19:77:e8:ea:a0:1a:aa:42: f0:1a:67:d5:22:8c:9c:d3:bd:47:a8:ff:44:4a:40: 77:50:8d:63:04:83:98:d3:6d:4f:92:65:32:f5:89: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CE:96:EC:5D:2B:2C:C1:86:89:2C:B7:67:04:A3:32:99:0C:9E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:46:9c:68:17:7e:5b:2e:c7:44:24:ae:1f:6d:4a:71:2d:06: 0d:dd:fb:0b:b0:a8:50:7b:dc:0a:96:5b:29:ab:50:1e:ae:26: 3f:77:e9:14:e1:53:65:9f:b9:fe:52:19:43:cb:64:39:3d:5a: 19:02:b2:12:61:61:22:a7:89:ec:9a:20:73:1f:56:90:1a:58: f7:cf:15:cd:2a:28:5f:1d:c5:2e:74:86:2b:f4:48:8a:69:d1: ff:a7:23:77:c4:eb:ae:a1:52:09:5b:05:cc:bd:cf:d8:d0:7a: 36:77:af:cc:8d:65:72:ce:dd:e2:e3:9c:d2:1d:17:f3:66:c8: 21:c3:72:e0:4f:ba:36:55:83:51:e9:d4:b8:b1:e6:d5:54:27: f7:e8:11:2a:e0:50:bc:4f:97:7c:a9:6a:4f:e9:d7:7e:93:e5: 41:0a:7e:67:bc:cd:fb:36:41:54:5e:08:85:67:3c:34:fe:28: c0:d5:82:fa:71:bd:11:f6:01:3e:55:b1:69:42:a0:0e:dd:54: a8:bd:af:71:98:36:b1:d5:f4:c9:11:fc:42:6a:df:a5:7b:f3: 1c:02:d7:bb:6a:a5:c8:ac:87:0b:ac:c6:21:53:07:f4:3d:7a: 96:a8:27:22:07:46:f7:46:bb:30:49:54:6e:55:95:60:82:ab: b6:2c:a8:c3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfxVRCYgoozed/qwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk ZDNhYTcwNTktZDRiOS00NGM2LWFjNGItMzczZjQ1MDRlZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlRQJtiEJ3iNrWdyGhqkZnTiqKTR6qWq2tyk D3O0WXqzhSbLRhi8qt29JjkQI2ocW81F11PH2VLMURL9rvF+KGB4ByyUHBC8CJ0G fzUkc7c1jGpPq+y0Hv52UnI1IrVXZQzNvYtTcNeItyHx09s4Wfhx81ZFRagH2hiw yBupb+hSXomKyLxat/5+ViGcQZ2CTmLiqfBea6JUP7MRR5fp/HG8+WaiW+j3UhlC 8i/UwwiscXbHYMUinh56Ccv/eenxX9mcyhNMUSaq2FvaazZwSB1AyFw8pl7YGXfo 6qAaqkLwGmfVIoyc071HqP9ESkB3UI1jBIOY021PkmUy9YkpyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGnOluxdKyzBhokst2cEozKZDJ7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzRkZjExNDQtYzQwZi0z NDM4LWExY2ItYjJmNDE0YTVmZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAC0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARkacaBd+Wy7HRCSuH21KcS0GDd37C7CoUHvcCpZbKatQHq4mP3fp FOFTZZ+5/lIZQ8tkOT1aGQKyEmFhIqeJ7Jogcx9WkBpY988VzSooXx3FLnSGK/RI imnR/6cjd8TrrqFSCVsFzL3P2NB6NnevzI1lcs7d4uOc0h0X82bIIcNy4E+6NlWD UenUuLHm1VQn9+gRKuBQvE+XfKlqT+nXfpPlQQp+Z7zN+zZBVF4IhWc8NP4owNWC +nG9EfYBPlWxaUKgDt1UqL2vcZg2sdX0yRH8QmrfpXvzHALXu2qlyKyHC6zGIVMH 9D16lqgnIgdG90a7MElUblWVYIKrtiyoww== -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:21 2024 by rpki-client on console-fra.rpki-client.org