$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa File: c9d29c32-a313-3797-8f77-559ae3991224.roa (raw, json) Hash identifier: F1ZfZQR/SHRolk3KTmJbVOhWRfUZ17yIHpm1FIua0l4= Subject key identifier: C9:E6:5A:36:3B:DD:5A:D5:2A:86:00:2D:50:70:AA:F6:93:3C:B1:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333308DC3D2A74919247240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:30:8d:c3:d2:a7:49:19:24:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=789e34e9-0b27-4f6a-8636-9784573f21c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:49:00:60:dd:ee:83:ad:a5:b1:d0:db:ba: 0d:ed:f5:88:09:84:0f:32:ac:73:9d:e1:a5:78:1a: 40:28:53:4e:4e:86:0e:1c:8c:41:b1:92:a3:da:83: 5f:e4:0b:29:38:4d:0c:aa:12:d2:f2:f2:02:4b:a8: 13:d3:e9:12:2c:d4:4e:64:10:f9:98:43:d3:40:e2: 18:b7:6d:5f:82:6c:7f:38:fc:9a:6e:b6:0d:35:63: b4:f6:77:16:25:3a:88:c9:be:d9:03:34:37:18:83: 8c:27:4a:3a:db:f8:17:99:db:77:35:74:2d:9e:28: 31:09:f7:33:28:8a:8c:22:83:05:57:88:66:2a:00: 35:a1:fb:5a:eb:d9:74:9c:d6:c7:8e:fc:af:d7:d7: 12:ad:fc:1f:bb:49:f1:bd:e7:f2:64:2b:48:46:77: 55:bb:6a:ed:3d:40:17:8a:b5:1c:09:a5:62:11:9c: d3:ef:99:71:31:ed:fc:55:c1:2d:c6:2f:3e:dc:52: 66:4b:34:c2:d2:f5:46:7a:80:da:21:f5:e1:ee:fa: 44:75:34:82:d0:32:6e:f4:17:03:09:e7:58:dc:69: ea:5c:fe:79:1b:ac:e0:1b:63:ca:1c:f6:1b:51:03: a2:60:87:0d:9e:42:e3:ea:3e:56:f6:bb:40:4c:88: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E6:5A:36:3B:DD:5A:D5:2A:86:00:2D:50:70:AA:F6:93:3C:B1:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fd:fd:ba:7c:20:c8:c6:63:5a:f2:db:52:92:41:19:21:e6: 71:7a:3d:61:f6:c0:67:c6:2a:f9:35:65:fe:ed:41:ab:c5:7f: 52:98:2b:d7:58:5a:93:9b:18:e6:c6:5a:f6:fc:33:5b:f4:05: 71:aa:2a:d7:98:ea:dc:45:14:76:fa:b1:de:73:fb:a7:ff:60: 54:ad:eb:fa:4e:9d:ad:04:56:98:c3:b9:d1:8d:6c:6e:9a:35: 8a:c3:d9:af:fa:ef:bd:0b:93:f9:f7:db:69:52:2a:e2:aa:4a: e8:fe:29:1e:d3:4d:3d:a5:a2:52:f9:3a:3e:06:80:95:2b:8c: e6:5b:d8:2f:0f:92:d4:14:b4:8b:b1:1d:b9:cb:42:4f:14:a0: 9f:bf:b4:de:01:0c:63:d8:7a:2b:3c:47:5b:03:1b:8b:e7:dd: 7a:90:16:2e:9d:73:20:c9:16:6d:a8:4f:3b:2e:d9:b1:0e:41: a9:f9:36:50:b1:6e:c7:13:46:cf:d2:8e:b6:2f:8b:6e:df:4e: 5e:71:45:86:d1:22:54:e2:56:77:46:08:cf:9b:e9:cc:65:c0: e9:3f:4d:70:80:c5:42:e8:6b:b6:d7:ae:a0:28:dd:05:f0:d0: bf:91:49:f0:0b:98:b4:74:f7:c3:9c:12:d8:29:46:7a:4a:63: d0:44:17:74 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVTMzCNw9KnSRkkckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk Nzg5ZTM0ZTktMGIyNy00ZjZhLTg2MzYtOTc4NDU3M2YyMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrNJAGDd7oOtpbHQ27oN7fWICYQPMqxzneGl eBpAKFNOToYOHIxBsZKj2oNf5AspOE0MqhLS8vICS6gT0+kSLNROZBD5mEPTQOIY t21fgmx/OPyabrYNNWO09ncWJTqIyb7ZAzQ3GIOMJ0o62/gXmdt3NXQtnigxCfcz KIqMIoMFV4hmKgA1ofta69l0nNbHjvyv19cSrfwfu0nxvefyZCtIRndVu2rtPUAX irUcCaViEZzT75lxMe38VcEtxi8+3FJmSzTC0vVGeoDaIfXh7vpEdTSC0DJu9BcD CedY3GnqXP55G6zgG2PKHPYbUQOiYIcNnkLj6j5W9rtATIh8UwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMnmWjY73VrVKoYALVBwqvaTPLE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzlkMjljMzItYTMxMy0z Nzk3LThmNzctNTU5YWUzOTkxMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEv39unwgyMZjWvLbUpJBGSHmcXo9YfbAZ8Yq+TVl/u1Bq8V/Upgr 11hak5sY5sZa9vwzW/QFcaoq15jq3EUUdvqx3nP7p/9gVK3r+k6drQRWmMO50Y1s bpo1isPZr/rvvQuT+ffbaVIq4qpK6P4pHtNNPaWiUvk6PgaAlSuM5lvYLw+S1BS0 i7EductCTxSgn7+03gEMY9h6KzxHWwMbi+fdepAWLp1zIMkWbahPOy7ZsQ5Bqfk2 ULFuxxNGz9KOti+Lbt9OXnFFhtEiVOJWd0YIz5vpzGXA6T9NcIDFQuhrtteuoCjd BfDQv5FJ8AuYtHT3w5wS2ClGekpj0EQXdA== -----END CERTIFICATE-----Generated at Fri May 24 01:53:58 2024 by rpki-client on console-fra.rpki-client.org