$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa File: f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa (raw, json) Hash identifier: tInCTHAr+wOmYenHEpIKhozt0U6yb7OOAU8l+tyKmL4= Subject key identifier: C4:11:54:67:76:51:34:0D:9B:A3:AF:BF:1B:EE:8B:95:76:29:D7:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F1550D340E11AF7FF8C9AF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 2604:cb00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:0d:34:0e:11:af:7f:f8:c9:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=6fbbbfba-92f1-4ded-a167-f46680231dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:02:7b:37:7d:7f:48:a6:35:c6:80:27:58:55: 32:1a:0f:20:4a:a9:fe:49:e5:f3:4f:1b:18:e3:eb: 74:04:c8:7e:4d:d1:bc:2f:65:62:df:5a:5c:a5:0d: 97:bf:ee:9a:6a:33:6f:84:c9:e6:06:25:a1:30:cd: 3b:2c:4a:8e:78:ff:c5:a3:ac:22:f8:8d:4f:15:5b: bf:94:02:20:1c:e0:7e:5a:32:f9:36:31:5e:49:da: 00:46:b7:48:63:28:7b:e3:47:67:14:66:c0:cd:26: 1f:74:a0:1c:86:e4:53:6a:3b:27:de:ae:47:d7:45: 04:8e:da:af:c8:61:43:a4:18:49:fb:99:5c:83:53: d5:5c:7d:40:b4:98:49:ed:67:70:7e:2a:f3:0c:0a: bb:e5:54:c6:ae:9d:b2:23:9e:a9:3a:b0:aa:34:02: 60:8c:02:19:3b:1f:fd:79:03:56:8d:bc:56:5b:f8: b5:e3:02:2e:cc:fc:d9:2a:08:3d:88:25:40:2a:44: 0e:c4:4d:c9:5b:3c:cb:33:9e:83:09:d7:54:0b:56: 99:fd:73:af:0d:d9:bd:3d:39:78:89:04:d1:5d:59: 76:b4:32:9c:05:0c:73:07:a3:f5:05:06:c3:34:90: 1f:63:16:d1:6c:6b:4e:71:c3:23:09:e3:21:34:2d: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:11:54:67:76:51:34:0D:9B:A3:AF:BF:1B:EE:8B:95:76:29:D7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8eb4ea3-4bd2-30f1-a58a-2274c951a424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c0:32:a2:c5:96:d9:d0:96:12:6c:ca:7d:de:ae:35:65:0e: ff:4e:a4:29:27:65:1a:2a:f2:fd:87:95:46:db:26:2b:20:3f: 13:f8:41:07:dd:b5:52:c8:79:2c:8a:9d:46:31:b6:7e:f4:e8: ce:64:32:98:0f:82:d9:ea:37:70:41:00:1d:18:87:3b:a8:80: c3:4b:46:c5:b7:64:09:4c:e4:ce:fb:a7:89:44:ba:b0:56:66: 0a:f7:b5:c0:69:5e:aa:6f:f5:37:57:bd:12:69:85:50:d8:77: 79:6f:9d:e9:0a:e0:ce:19:42:4e:0f:b1:d4:53:09:68:4c:58: 32:a8:4c:ca:70:1e:1f:94:e7:f5:52:5a:e4:72:dd:11:f6:26: d8:a1:d9:38:e2:9c:fd:26:65:e1:42:47:cc:ec:ef:bb:72:a0: 6c:02:26:30:22:af:40:77:0d:cb:86:98:ff:10:44:f9:b7:b5: af:f1:5b:1c:03:65:83:08:dd:eb:e2:ab:48:1f:de:f6:29:fc: eb:fa:0b:63:53:fc:1b:6e:84:73:d6:24:8d:a9:9a:bc:7f:0e: a8:4a:42:bd:0c:e1:69:0f:7a:7d:77:92:16:b1:ca:7d:77:d7: 85:36:2d:28:8c:f7:9c:03:a4:9c:b4:6f:c3:3d:5e:26:79:87: e2:9f:0a:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfxVQ00DhGvf/jJrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NmZiYmJmYmEtOTJmMS00ZGVkLWExNjctZjQ2NjgwMjMxZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgJ7N31/SKY1xoAnWFUyGg8gSqn+SeXzTxsY 4+t0BMh+TdG8L2Vi31pcpQ2Xv+6aajNvhMnmBiWhMM07LEqOeP/Fo6wi+I1PFVu/ lAIgHOB+WjL5NjFeSdoARrdIYyh740dnFGbAzSYfdKAchuRTajsn3q5H10UEjtqv yGFDpBhJ+5lcg1PVXH1AtJhJ7WdwfirzDAq75VTGrp2yI56pOrCqNAJgjAIZOx/9 eQNWjbxWW/i14wIuzPzZKgg9iCVAKkQOxE3JWzzLM56DCddUC1aZ/XOvDdm9PTl4 iQTRXVl2tDKcBQxzB6P1BQbDNJAfYxbRbGtOccMjCeMhNC0/uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMQRVGd2UTQNm6Ovvxvui5V2KdeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhlYjRlYTMtNGJkMi0z MGYxLWE1OGEtMjI3NGM5NTFhNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJXAMqLFltnQlhJsyn3erjVlDv9OpCknZRoq8v2HlUbbJisgPxP4 QQfdtVLIeSyKnUYxtn706M5kMpgPgtnqN3BBAB0YhzuogMNLRsW3ZAlM5M77p4lE urBWZgr3tcBpXqpv9TdXvRJphVDYd3lvnekK4M4ZQk4PsdRTCWhMWDKoTMpwHh+U 5/VSWuRy3RH2Jtih2TjinP0mZeFCR8zs77tyoGwCJjAir0B3DcuGmP8QRPm3ta/x WxwDZYMI3eviq0gf3vYp/Ov6C2NT/BtuhHPWJI2pmrx/DqhKQr0M4WkPen13khax yn1314U2LSiM95wDpJy0b8M9XiZ5h+KfCoc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:30 2024 by rpki-client on console-fra.rpki-client.org