$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa File: f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa (raw, json) Hash identifier: uJxye2de9ZDVf1Y1j1C0BLgT2NyauTI2yK9mMvbMv3Q= Subject key identifier: 05:C3:EC:A3:F4:F3:E5:59:4F:6F:14:16:70:62:AB:B1:73:60:89:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553332EE8935D3103BA42B300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:2e:e8:93:5d:31:03:ba:42:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=af504d4a-85a6-4cca-8a4b-fa9595037e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:db:38:b8:a5:e5:02:c2:ab:eb:59:2b:e7: 79:40:f1:34:65:9d:7f:91:9b:b5:37:9b:04:2d:ba: 66:98:f3:8c:32:87:b3:83:67:10:11:b5:d5:b7:cf: 62:04:d1:47:c7:71:b8:2b:da:0d:93:ef:57:a9:d1: de:b7:42:2b:cd:5d:bb:c1:2b:d1:f2:1d:b6:a9:3b: d2:a4:40:e6:1f:aa:28:8f:1d:ac:3b:a2:27:dc:72: 28:58:27:25:78:c0:6e:5f:30:40:9d:a7:f6:fc:c7: c1:f1:1d:9f:b5:23:1a:a0:03:ac:8c:ce:59:37:3e: 4b:e4:7f:6e:98:52:57:4f:59:cd:67:9e:d2:e1:9a: 7c:c7:10:f4:64:f8:26:f4:25:4e:14:1b:bb:bc:48: 0b:77:91:e9:47:f5:52:2a:7e:b6:42:13:d3:1c:34: 1d:94:bc:23:9a:4b:b1:1a:19:6b:f2:68:30:83:19: 75:9b:f8:13:67:93:d7:20:90:54:21:63:67:85:b1: b4:48:f8:03:fe:2a:26:1a:95:f2:6b:96:61:ef:3e: a7:d2:e4:73:57:2d:74:9c:a8:d1:b2:fc:71:7e:85: 2c:ce:0f:b6:45:91:65:59:a8:ad:e0:a0:a4:98:e1: 5e:e2:57:4d:93:fe:34:29:a7:cb:79:52:45:f5:51: c9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C3:EC:A3:F4:F3:E5:59:4F:6F:14:16:70:62:AB:B1:73:60:89:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f99acc95-21c9-3a5e-bb23-a6b58b0c4ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e5:9f:52:da:8b:ee:0c:ca:8d:38:e0:6f:83:b2:a1:26:c9: c2:6f:f2:44:ca:92:c3:1f:2f:96:ec:ca:12:0b:da:a3:c9:75: 4d:2e:f7:4b:66:03:2e:a9:b2:e3:9e:f8:e6:56:53:17:62:ab: bf:d5:54:80:9a:48:1e:93:d3:58:95:15:fe:66:d3:8b:1d:54: 92:5e:02:34:58:56:a5:a3:fb:fe:fe:87:c8:62:b1:66:49:95: ff:c1:ea:a2:de:2b:b2:9b:88:e3:da:95:9f:b9:e8:27:15:45: cf:43:fc:c0:79:cf:97:ff:97:f0:9c:c4:71:96:c4:ee:5d:08: c9:8f:e0:28:77:56:13:12:09:46:ce:4b:99:fc:bf:de:a3:72: b1:4a:14:64:de:f7:dc:18:ee:3f:e1:87:a3:c4:26:61:21:99: 5c:77:28:b4:a5:03:32:65:2e:5f:ce:a1:df:3a:71:25:f1:ff: 39:17:e8:c6:08:21:fb:48:97:a5:6f:f1:41:dd:42:21:6d:c3: ba:fb:8a:63:b4:ca:04:56:77:a6:37:2a:da:1f:3b:65:36:22: cc:cc:0b:85:6e:14:db:f2:a7:3e:54:97:43:ca:8f:86:e2:5e: c1:20:c2:d1:0f:0d:82:00:92:38:54:38:d6:31:ef:ad:70:be: 6d:1f:6f:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMy7ok10xA7pCswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YWY1MDRkNGEtODVhNi00Y2NhLThhNGItZmE5NTk1MDM3ZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK7bOLil5QLCq+tZK+d5QPE0ZZ1/kZu1N5sE LbpmmPOMMoezg2cQEbXVt89iBNFHx3G4K9oNk+9XqdHet0IrzV27wSvR8h22qTvS pEDmH6oojx2sO6In3HIoWCcleMBuXzBAnaf2/MfB8R2ftSMaoAOsjM5ZNz5L5H9u mFJXT1nNZ57S4Zp8xxD0ZPgm9CVOFBu7vEgLd5HpR/VSKn62QhPTHDQdlLwjmkux Ghlr8mgwgxl1m/gTZ5PXIJBUIWNnhbG0SPgD/iomGpXya5Zh7z6n0uRzVy10nKjR svxxfoUszg+2RZFlWait4KCkmOFe4ldNk/40KafLeVJF9VHJfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAXD7KP08+VZT28UFnBiq7FzYIkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjk5YWNjOTUtMjFjOS0z YTVlLWJiMjMtYTZiNThiMGM0YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLln1Lai+4Myo044G+DsqEmycJv8kTKksMfL5bsyhIL2qPJdU0u 90tmAy6psuOe+OZWUxdiq7/VVICaSB6T01iVFf5m04sdVJJeAjRYVqWj+/7+h8hi sWZJlf/B6qLeK7KbiOPalZ+56CcVRc9D/MB5z5f/l/CcxHGWxO5dCMmP4Ch3VhMS CUbOS5n8v96jcrFKFGTe99wY7j/hh6PEJmEhmVx3KLSlAzJlLl/Ood86cSXx/zkX 6MYIIftIl6Vv8UHdQiFtw7r7imO0ygRWd6Y3KtofO2U2IszMC4VuFNvypz5Ul0PK j4biXsEgwtEPDYIAkjhUONYx761wvm0fbw4= -----END CERTIFICATE-----Generated at Sat May 18 01:40:43 2024 by rpki-client on console-fra.rpki-client.org