$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa File: f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa (raw, json) Hash identifier: 3gKXEDFfCad97387HGkcrlHFkmqDoL9BFjWpWA2o9Xk= Subject key identifier: 8D:C0:38:17:50:E6:A8:23:C0:7B:1B:A1:53:87:34:2F:E5:88:20:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533334C9721965C1361A4180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2607:fec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:34:c9:72:19:65:c1:36:1a:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=9e95da6a-c641-4cab-860f-0ab452a0244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:99:4e:49:d4:42:22:4a:0f:86:d9:68:ce: 98:bf:87:0a:93:0a:56:25:1f:71:64:5d:38:04:5c: 2c:da:25:34:9d:aa:23:cd:d6:10:68:22:dc:8f:15: 1a:55:a9:b2:7f:71:39:9e:1d:f3:5b:b1:d7:e2:19: db:07:ab:1f:b4:04:f4:ad:d1:8a:28:c2:51:72:69: 41:76:b0:1e:fb:47:26:83:25:a7:e6:02:f8:e3:67: 19:9c:c2:92:d5:1e:8f:d6:c8:a5:55:2d:a7:e9:5a: 29:27:3d:d9:b2:32:47:3d:f6:57:15:49:49:8a:d6: b1:c3:bb:79:db:35:22:72:25:42:f8:d5:68:24:04: 80:8c:2f:e3:c0:ea:ba:0b:e7:3e:39:54:b3:81:27: cb:65:b9:7b:e5:fd:e3:f3:98:aa:8b:cc:3c:bd:a5: dc:d1:16:5b:d4:f1:9b:9f:19:a3:aa:1a:08:62:aa: 6b:ec:51:b1:8d:8b:06:50:10:5e:b7:4e:b9:0e:88: cb:7c:cd:f9:62:ad:5d:34:b7:08:fa:e3:5c:61:a7: 24:60:21:3d:ef:24:3b:2f:e0:b5:9b:bd:e2:9e:d3: 50:ac:16:18:6e:4d:ef:ee:4d:db:13:ed:1a:2a:2a: 81:ff:84:4a:11:b1:a4:ea:f8:65:fb:38:69:d7:64: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C0:38:17:50:E6:A8:23:C0:7B:1B:A1:53:87:34:2F:E5:88:20:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a7:8a:3a:ed:00:8f:07:64:71:19:d9:1e:d5:03:da:0a:9f: 0e:cc:00:57:94:43:0d:2a:5c:92:30:4f:f2:50:9d:70:7b:a4: 84:b7:3e:09:bc:57:37:f3:ea:53:03:bb:13:11:47:81:a8:2f: 43:32:26:21:41:0f:38:e6:a1:63:77:d5:fd:29:c8:f8:74:fc: e3:b2:a1:c3:d9:20:6b:26:5e:36:cb:4e:3f:af:5a:ee:e0:80: 4c:58:3d:b6:fa:e0:be:ee:a7:0d:5e:c7:58:9e:6f:b7:8a:61: 48:d8:7c:9f:be:6f:a7:2f:f9:2b:98:b7:2e:8f:55:82:86:9e: eb:74:6c:34:c3:ed:84:61:56:3c:5c:a6:bc:17:69:07:71:be: de:7a:e9:08:32:25:93:86:42:23:cf:ca:7d:09:c1:84:20:69: 9a:92:7c:37:ef:e7:67:7b:c2:f6:1d:61:9d:d2:6d:1d:95:d8: 3a:54:e6:02:ec:d9:d9:ca:94:50:b6:80:70:72:c2:6b:4d:35: b3:8d:ba:c9:db:fc:47:d5:47:f4:d7:41:12:5e:8b:32:98:db: 00:72:5b:d7:65:4b:ee:23:24:3c:b9:6e:ce:d3:c7:1b:f4:03: 23:1b:3b:1b:5f:89:01:1b:f0:f1:da:99:18:fd:93:88:72:bb: e0:c6:35:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVTMzTJchllwTYaQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk OWU5NWRhNmEtYzY0MS00Y2FiLTg2MGYtMGFiNDUyYTAyNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/KZTknUQiJKD4bZaM6Yv4cKkwpWJR9xZF04 BFws2iU0naojzdYQaCLcjxUaVamyf3E5nh3zW7HX4hnbB6sftAT0rdGKKMJRcmlB drAe+0cmgyWn5gL442cZnMKS1R6P1silVS2n6VopJz3ZsjJHPfZXFUlJitaxw7t5 2zUiciVC+NVoJASAjC/jwOq6C+c+OVSzgSfLZbl75f3j85iqi8w8vaXc0RZb1PGb nxmjqhoIYqpr7FGxjYsGUBBet065DojLfM35Yq1dNLcI+uNcYackYCE97yQ7L+C1 m73intNQrBYYbk3v7k3bE+0aKiqB/4RKEbGk6vhl+zhp12RppwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI3AOBdQ5qgjwHsboVOHNC/liCBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjMzMWZlNmYtYmY3MC0z ZTc1LTlmMjItYzllMDBlODY2YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYp4o67QCPB2RxGdke1QPaCp8OzABXlEMNKlySME/yUJ1we6SEtz4J vFc38+pTA7sTEUeBqC9DMiYhQQ845qFjd9X9Kcj4dPzjsqHD2SBrJl42y04/r1ru 4IBMWD22+uC+7qcNXsdYnm+3imFI2Hyfvm+nL/krmLcuj1WChp7rdGw0w+2EYVY8 XKa8F2kHcb7eeukIMiWThkIjz8p9CcGEIGmaknw37+dne8L2HWGd0m0dldg6VOYC 7NnZypRQtoBwcsJrTTWzjbrJ2/xH1Uf010ESXosymNsAclvXZUvuIyQ8uW7O08cb 9AMjGzsbX4kBG/Dx2pkY/ZOIcrvgxjVk -----END CERTIFICATE-----Generated at Thu May 23 13:45:08 2024 by rpki-client on console-fra.rpki-client.org