$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa File: c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa (raw, json) Hash identifier: avkJpamPSqfSwRqnGi/6lWrm+OPqpTNgsAuuHG1P9lk= Subject key identifier: A4:67:87:B5:00:0F:4B:1C:F8:C8:38:87:29:B1:44:CD:F9:58:6B:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333334C51C531CA247687E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:33:4c:51:c5:31:ca:24:76:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=a60cb317-225e-4709-9af1-17fb53fa2cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c1:5e:85:9b:0c:2b:47:18:52:ef:b1:5a:58: b6:c5:d9:75:ed:7d:03:59:67:f9:77:c4:32:6f:91: 29:6d:ef:71:83:c0:78:b8:cc:30:89:e6:53:6a:f2: 09:f9:a4:9a:3a:78:32:f9:2d:0e:7e:73:37:1c:f3: b0:57:8e:47:df:d9:06:69:54:01:e1:eb:6e:cb:ae: 60:76:7f:c4:5f:ca:3a:ab:09:de:a1:20:38:9c:c7: d0:b7:91:59:aa:c9:a8:6f:95:b9:47:f3:55:1e:b5: 6d:a3:ad:1c:b0:5c:ff:16:97:d1:36:3b:4e:42:7b: c8:09:f5:7c:cc:f3:f8:04:c8:99:01:23:b3:3c:fe: c4:a2:b1:77:5b:5c:82:0c:fd:1f:66:52:e8:2d:5e: 28:00:2e:3b:c8:16:05:c6:c5:4c:7c:b3:b0:63:a9: ad:a7:4e:dd:d5:47:71:c9:12:c8:d1:ac:43:9b:d6: fc:50:88:94:5a:e2:82:84:47:4a:f1:ed:09:35:14: bb:31:0d:34:71:8c:3d:ad:d7:75:aa:b4:0c:0f:30: ea:31:d0:c1:b6:c7:f3:70:0b:8f:5f:7d:6e:6e:e8: ff:bf:1b:56:85:59:9c:41:e7:23:54:34:c5:ff:66: 4e:de:a3:0c:d5:8d:2c:93:2f:04:26:9b:dd:e2:2e: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:67:87:B5:00:0F:4B:1C:F8:C8:38:87:29:B1:44:CD:F9:58:6B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:53:0f:86:f6:a1:af:8c:77:50:2c:48:be:b9:b7:6f:70:6b: 19:fc:8b:86:e5:aa:d9:bf:c0:b6:09:33:0c:bc:6b:f3:0b:e6: 7e:9d:7a:ec:e3:76:1c:ac:07:6a:b2:5c:94:0f:46:38:0b:1b: b8:69:31:b7:9b:2f:a3:77:5a:30:ee:e0:e4:10:6f:aa:c8:41: ee:00:8f:a3:72:4a:50:bd:02:d0:73:5b:92:d0:98:bc:b1:4d: e4:79:93:7a:5e:63:d3:de:33:47:19:c5:99:8d:81:b5:0b:db: d4:fe:41:82:b2:b5:33:5c:9f:d0:b8:4b:24:b1:c5:d4:e3:96: 47:82:26:ec:e8:2b:43:f9:77:99:df:69:81:e9:8d:7b:a5:e8: e6:e9:ed:ff:33:ed:19:ff:85:85:04:13:34:b6:b1:68:5a:ac: e9:ff:94:40:bc:8c:9c:95:31:ac:38:c6:88:e2:8d:f4:44:2f: a1:4e:f0:35:20:4a:ab:02:df:98:4e:1f:b5:10:cb:82:8b:4a: be:f6:63:3f:e7:ef:d4:81:cb:d4:c8:e5:c1:5d:f7:78:e6:b7: 88:a7:02:ff:57:e1:77:38:c6:86:76:8a:d1:10:4d:9e:af:b5: 00:2f:f1:30:7e:db:7f:17:af:da:00:2e:a3:cf:d2:01:39:f6: 66:f9:4f:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVTMzNMUcUxyiR2h+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YTYwY2IzMTctMjI1ZS00NzA5LTlhZjEtMTdmYjUzZmEyY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8FehZsMK0cYUu+xWli2xdl17X0DWWf5d8Qy b5Epbe9xg8B4uMwwieZTavIJ+aSaOngy+S0OfnM3HPOwV45H39kGaVQB4etuy65g dn/EX8o6qwneoSA4nMfQt5FZqsmob5W5R/NVHrVto60csFz/FpfRNjtOQnvICfV8 zPP4BMiZASOzPP7EorF3W1yCDP0fZlLoLV4oAC47yBYFxsVMfLOwY6mtp07d1Udx yRLI0axDm9b8UIiUWuKChEdK8e0JNRS7MQ00cYw9rdd1qrQMDzDqMdDBtsfzcAuP X31ubuj/vxtWhVmcQecjVDTF/2ZO3qMM1Y0sky8EJpvd4i71MwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKRnh7UAD0sc+Mg4hymxRM35WGvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzRkZjExNDQtYzQwZi0z NDM4LWExY2ItYjJmNDE0YTVmZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAC0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKlMPhvahr4x3UCxIvrm3b3BrGfyLhuWq2b/AtgkzDLxr8wvmfp16 7ON2HKwHarJclA9GOAsbuGkxt5svo3daMO7g5BBvqshB7gCPo3JKUL0C0HNbktCY vLFN5HmTel5j094zRxnFmY2BtQvb1P5BgrK1M1yf0LhLJLHF1OOWR4Im7OgrQ/l3 md9pgemNe6Xo5unt/zPtGf+FhQQTNLaxaFqs6f+UQLyMnJUxrDjGiOKN9EQvoU7w NSBKqwLfmE4ftRDLgotKvvZjP+fv1IHL1MjlwV33eOa3iKcC/1fhdzjGhnaK0RBN nq+1AC/xMH7bfxev2gAuo8/SATn2ZvlPsQ== -----END CERTIFICATE-----Generated at Fri May 24 02:52:37 2024 by rpki-client on console-ams.rpki-client.org