$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7278735-d49a-3caf-bb86-c2c35085ff27.roa File: c7278735-d49a-3caf-bb86-c2c35085ff27.roa (raw, json) Hash identifier: CePXvQ+QiJpnxXX2NJlKSvXKoH2W22Ahkap8SnrbAG8= Subject key identifier: 1B:F6:B0:61:BB:12:97:C3:CA:F7:C2:C1:F9:C1:1A:D1:1C:B4:14:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1553DA26D881380BFEAE500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7278735-d49a-3caf-bb86-c2c35085ff27.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:3d:a2:6d:88:13:80:bf:ea:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=4a73d869-3a5f-420e-8fc5-69d5c273d780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:f2:d8:df:c0:b3:09:ed:64:64:ad:ce:c1: d8:dd:53:c1:89:13:d6:d1:13:51:5b:c1:5e:41:ac: 89:8a:73:a4:0d:40:18:af:0a:40:a9:18:17:1d:45: 5a:d1:76:e4:28:17:57:27:e7:5a:99:5b:bb:53:9c: 2b:30:72:8b:2f:a7:ed:55:c9:9f:77:ba:d6:e5:e8: 69:c6:cd:51:ac:30:ab:23:3c:ff:65:0d:8e:9f:e6: ba:e0:df:70:d0:42:8a:7b:2c:0e:7d:17:b4:16:bf: 02:77:db:c8:66:af:cb:2d:58:75:33:a8:b0:23:5e: 7f:2f:6d:4a:e5:b2:30:44:11:0a:22:54:71:5e:c8: 7c:62:b2:a6:70:47:35:c1:c9:86:1b:9b:88:7c:95: 00:9d:b1:1c:a9:ea:53:c2:b2:f1:01:91:41:41:b6: e5:a4:54:6e:2b:f1:be:99:82:b1:5b:72:a0:23:c8: 1a:ba:7c:c0:11:dc:44:51:32:db:7c:1b:00:8c:49: 24:53:2e:0c:08:97:73:8a:57:56:26:06:cb:57:e4: 5b:72:f9:ff:e7:be:9f:14:1a:36:e4:f6:53:38:5b: 7d:db:8e:ba:7d:66:89:c4:e8:e2:80:a1:1a:44:a3: 32:a5:3d:06:d7:87:af:cd:65:10:24:8d:52:52:d1: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F6:B0:61:BB:12:97:C3:CA:F7:C2:C1:F9:C1:1A:D1:1C:B4:14:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7278735-d49a-3caf-bb86-c2c35085ff27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:44:df:87:93:85:f1:14:a4:3b:f9:b6:f9:44:10:60:10:09: de:b4:17:4e:02:2b:73:b1:9c:51:36:59:2b:ea:26:1e:2f:52: 89:8e:bc:0f:cb:fb:80:5a:57:f8:08:ff:6f:af:5f:93:4b:87: 84:36:78:92:5b:06:57:1c:70:9b:67:fe:e4:bb:7f:2f:ae:ef: 12:8e:23:9d:0c:43:53:88:19:d2:a1:90:73:d5:61:e1:a3:e0: ec:37:13:d6:72:72:55:1e:e2:4b:0f:c1:4c:db:cd:c2:58:a0: f2:b4:dd:e4:0b:55:ad:d5:bf:ad:83:6c:44:30:63:7e:7a:d3: 48:83:61:2d:87:53:77:c3:c4:22:83:d2:43:31:ab:82:07:36: 6b:fb:89:81:f6:34:0c:a8:c5:b6:d9:55:c8:92:a9:14:8d:98: 05:9c:4b:24:89:84:35:38:c4:75:0f:9e:4a:d0:1f:6f:48:98: 86:e5:16:3c:4e:b1:a9:4e:50:32:77:b5:3a:1d:76:fa:da:45: 0d:00:2d:0d:96:38:82:83:ca:b4:e2:63:5f:70:90:18:6d:a2: 64:e5:7b:7b:bf:70:b9:e5:ec:37:4f:14:cc:a8:ec:8b:d0:e7: e6:1f:48:c9:be:1b:36:83:4e:93:59:75:30:6a:5b:26:b8:1d: a0:54:8d:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVT2ibYgTgL/q5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NGE3M2Q4NjktM2E1Zi00MjBlLThmYzUtNjlkNWMyNzNkNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Ly2N/AswntZGStzsHY3VPBiRPW0RNRW8Fe QayJinOkDUAYrwpAqRgXHUVa0XbkKBdXJ+damVu7U5wrMHKLL6ftVcmfd7rW5ehp xs1RrDCrIzz/ZQ2On+a64N9w0EKKeywOfRe0Fr8Cd9vIZq/LLVh1M6iwI15/L21K 5bIwRBEKIlRxXsh8YrKmcEc1wcmGG5uIfJUAnbEcqepTwrLxAZFBQbblpFRuK/G+ mYKxW3KgI8gaunzAEdxEUTLbfBsAjEkkUy4MCJdzildWJgbLV+Rbcvn/576fFBo2 5PZTOFt92466fWaJxOjigKEaRKMypT0G14evzWUQJI1SUtFrHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBv2sGG7EpfDyvfCwfnBGtEctBR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzcyNzg3MzUtZDQ5YS0z Y2FmLWJiODYtYzJjMzUwODVmZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdE34eThfEUpDv5tvlEEGAQCd60F04CK3OxnFE2WSvqJh4vUomO vA/L+4BaV/gI/2+vX5NLh4Q2eJJbBlcccJtn/uS7fy+u7xKOI50MQ1OIGdKhkHPV YeGj4Ow3E9ZyclUe4ksPwUzbzcJYoPK03eQLVa3Vv62DbEQwY35600iDYS2HU3fD xCKD0kMxq4IHNmv7iYH2NAyoxbbZVciSqRSNmAWcSySJhDU4xHUPnkrQH29ImIbl FjxOsalOUDJ3tToddvraRQ0ALQ2WOIKDyrTiY19wkBhtomTle3u/cLnl7DdPFMyo 7IvQ5+YfSMm+GzaDTpNZdTBqWya4HaBUjQg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:10 2024 by rpki-client on console-ams.rpki-client.org