$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa File: e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa (raw, json) Hash identifier: 8ipicqCoGkIAJ6wXh/94N14CCJtkYkt3fcZqukNuAKY= Subject key identifier: A2:C5:ED:E2:D8:93:C0:7B:81:33:29:22:7A:D1:49:2A:8E:24:AC:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584824FA916F77B666F9FC182280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa Signing time: Mon 09 Dec 2024 02:00:40 +0000 ROA not before: Mon 09 Dec 2024 02:00:40 +0000 ROA not after: Sun 09 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 2604:cb00:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:fa:91:6f:77:b6:66:f9:fc:18:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 9 02:00:40 2024 GMT Not After : Mar 9 02:00:40 2025 GMT Subject: CN=f48d8581-56a8-48f1-939a-fa12c5178fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:f2:84:9d:24:5f:a4:e8:c8:ef:5e:64:a9: 4b:e8:28:e9:42:9d:7f:f5:3f:e8:a2:1b:59:0b:88: d0:af:e0:5f:4f:88:e5:2f:28:a3:40:4b:20:84:bf: d2:31:6a:39:51:7a:af:0c:bc:b6:e3:80:ce:6b:cf: 36:d7:33:13:cc:09:b7:40:d2:47:f0:89:48:fb:97: be:b8:83:19:da:b0:3d:13:c0:e7:b3:ad:7a:4d:4c: 8e:5a:ab:b3:87:d7:4a:4c:a9:e0:94:5b:87:ca:4f: 18:dd:46:95:b9:2f:c7:2f:9f:2e:91:5b:cd:58:db: 6e:5c:98:b3:f3:85:ce:3e:42:12:71:a8:96:e2:9f: 61:c1:05:fd:ec:71:90:14:43:db:a4:ee:86:71:bd: d2:33:72:2c:06:b3:11:14:3a:cd:e1:9d:58:b1:7d: 0a:03:06:87:a7:5b:e9:74:c1:7c:82:b7:8f:4b:4b: 5a:97:43:66:e3:bc:10:15:ef:60:48:18:2f:2b:be: 1b:d4:c1:12:c8:ae:04:ca:92:66:0a:9c:57:ff:98: 53:8c:5b:4d:2b:91:51:a7:11:56:dd:f9:d7:b2:7b: 71:6d:8f:3b:cd:a9:88:cc:73:53:e1:09:2e:81:3d: ab:ec:0e:ad:2a:29:1f:5c:ca:4b:47:16:d1:07:56: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:ED:E2:D8:93:C0:7B:81:33:29:22:7A:D1:49:2A:8E:24:AC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a8:ae:a2:ec:ce:8b:dd:d7:37:49:11:37:35:04:6f:2c:88: d7:31:cc:17:7a:1e:1c:0f:df:74:31:85:27:dd:80:e4:f8:80: 6d:04:7c:ae:af:d0:4c:02:a0:36:e3:08:63:96:12:36:42:cb: 09:43:c0:2b:ee:c1:73:e7:95:2e:12:7d:75:4d:ec:9f:29:3d: 6c:3b:d7:98:fc:be:7f:16:e5:63:3e:59:a0:af:8c:76:85:10: 6e:39:7f:e2:94:d0:67:f1:99:0a:30:2e:31:63:88:6c:6e:8b: 8e:a3:ae:0e:fb:f8:ec:cd:27:4a:a1:d2:f6:81:4c:7b:fe:30: dc:c8:46:9a:2d:48:ea:07:dc:f8:ef:55:51:3d:e6:39:29:0b: 80:cd:27:f6:53:a1:64:a1:62:e7:3b:bf:38:57:b7:a1:62:50: fb:1d:14:da:c9:ba:c6:ac:63:21:b0:17:36:0f:9d:0d:88:9c: c1:8c:db:d1:5a:2b:30:b3:4d:99:16:35:d8:1d:9b:90:74:12: b8:6b:f2:8a:79:30:35:1e:ee:48:c4:b3:7a:2a:f5:55:97:48: 95:66:37:29:58:af:c1:67:78:ef:3a:d7:76:63:2e:26:20:b2: 3c:c0:8e:af:9a:58:6e:2b:43:aa:ea:83:58:a4:88:6c:8a:8e: a5:c7:74:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgk+pFvd7Zm+fwYIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk ZjQ4ZDg1ODEtNTZhOC00OGYxLTkzOWEtZmExMmM1MTc4ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjXyhJ0kX6ToyO9eZKlL6CjpQp1/9T/oohtZ C4jQr+BfT4jlLyijQEsghL/SMWo5UXqvDLy244DOa8821zMTzAm3QNJH8IlI+5e+ uIMZ2rA9E8Dns616TUyOWquzh9dKTKnglFuHyk8Y3UaVuS/HL58ukVvNWNtuXJiz 84XOPkIScaiW4p9hwQX97HGQFEPbpO6Gcb3SM3IsBrMRFDrN4Z1YsX0KAwaHp1vp dMF8grePS0tal0Nm47wQFe9gSBgvK74b1MESyK4EypJmCpxX/5hTjFtNK5FRpxFW 3fnXsntxbY87zamIzHNT4QkugT2r7A6tKikfXMpLRxbRB1aW8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKLF7eLYk8B7gTMpInrRSSqOJKydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTQ4NjBiMTQtZmM5MS0z YzljLWJlOTEtYTM3MGUyZWRlNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKorqLszovd1zdJETc1BG8siNcxzBd6HhwP33QxhSfdgOT4gG0E fK6v0EwCoDbjCGOWEjZCywlDwCvuwXPnlS4SfXVN7J8pPWw715j8vn8W5WM+WaCv jHaFEG45f+KU0GfxmQowLjFjiGxui46jrg77+OzNJ0qh0vaBTHv+MNzIRpotSOoH 3PjvVVE95jkpC4DNJ/ZToWShYuc7vzhXt6FiUPsdFNrJusasYyGwFzYPnQ2InMGM 29FaKzCzTZkWNdgdm5B0Erhr8op5MDUe7kjEs3oq9VWXSJVmNylYr8FneO8613Zj LiYgsjzAjq+aWG4rQ6rqg1ikiGyKjqXHdPQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:45 2025 by rpki-client