$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa File: 532a6650-1360-380d-a68f-680dd10f9fc8.roa (raw, json) Hash identifier: WYSttQ5+Zsbt6fDLLXsmuqscJhRyru4QJGn2Bpw2hPU= Subject key identifier: 29:FA:F1:85:BD:74:C3:68:89:7B:33:FB:0D:C0:2A:55:3B:1F:61:6A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584827C549A14C2D058153413EF0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 61317 IP address blocks: 2604:4500:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:49:a1:4c:2d:05:81:53:41:3e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=f4eec696-a208-44f0-b065-b3aa219391b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:15:b1:e5:43:e4:b9:db:6b:b1:b4:77:db: b7:cc:81:ab:68:94:d6:12:c9:aa:61:3b:fb:83:c3: ba:06:42:21:bb:45:8c:5c:06:b9:d9:2b:fb:2c:8d: 11:c5:33:56:c2:63:ad:45:a3:a5:ee:ea:6d:1e:2b: 55:1f:ac:f8:96:33:4c:c0:c8:23:02:95:d2:7e:7c: e1:7f:24:38:31:5e:d5:1a:74:49:6a:88:27:3e:54: 31:ea:b4:5b:ce:20:4c:b2:77:c9:bd:55:a7:65:c1: 47:bc:23:1a:a2:b2:09:1b:a0:52:fa:45:83:2e:8b: c8:76:0e:bd:61:60:4f:e2:90:67:54:ab:d9:4f:07: 8e:5d:5f:60:ec:d9:66:db:56:14:22:1b:2c:a4:cd: e4:5d:72:fa:20:78:87:d3:2b:86:9c:3a:f6:54:70: 8d:ad:28:c1:4d:fe:8b:8b:62:f1:8a:12:36:70:61: 92:d2:06:cc:ec:36:17:36:32:b2:5a:cf:5e:4a:f7: f5:be:ea:b5:8a:c3:3b:14:af:0c:35:9b:2a:c8:62: 05:6e:4c:b2:c8:67:a9:ac:de:ad:bc:21:31:5b:d9: 78:7c:a8:a8:6c:d7:0b:ba:e5:ca:a6:5f:51:53:19: 57:d7:f8:5d:9e:43:0d:49:78:f5:02:d6:61:ea:1b: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FA:F1:85:BD:74:C3:68:89:7B:33:FB:0D:C0:2A:55:3B:1F:61:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:86:d7:17:40:df:eb:e1:c9:e2:6c:00:53:a5:8d:21:1c:72: 73:d8:34:97:ff:f3:55:17:bc:f9:6c:93:ea:7d:8b:d8:43:f3: 4d:ba:98:34:73:59:d0:45:e4:ae:96:77:97:78:f4:6f:8f:e3: e2:a8:63:61:c9:a1:55:74:d1:12:5b:52:55:45:db:6a:51:f6: ea:9e:1b:be:89:08:f8:87:59:09:42:f1:10:d6:5d:03:62:0f: d7:b0:02:1d:a6:af:fb:a5:4a:f0:e9:ee:20:e3:2c:68:34:04: 46:16:d2:e4:a3:67:f8:71:57:30:e7:12:2e:6f:e4:60:0f:e6: bd:73:7d:88:d3:a8:fa:5a:d7:d5:fe:05:5d:25:81:71:ec:aa: 79:32:ce:f3:2e:60:13:5f:6f:af:39:0e:e6:92:a4:e3:82:47: 3b:4c:ee:7a:7f:21:ba:fc:99:5e:3c:44:88:2d:3c:52:c2:33: e6:6f:67:55:d0:4e:8f:a6:b3:b3:fd:42:be:81:ab:3c:54:da: 41:a5:3d:eb:1a:23:0f:20:06:b2:83:68:ef:c3:21:92:95:8d: f4:28:b5:a6:00:ab:f1:04:92:98:27:54:c0:60:7a:fc:81:da: 79:e2:3e:b8:93:29:67:22:55:b1:6a:35:ea:8b:97:d3:e3:5b: 7d:40:c2:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgnxUmhTC0FgVNBPvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk ZjRlZWM2OTYtYTIwOC00NGYwLWIwNjUtYjNhYTIxOTM5MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij8VseVD5Lnba7G0d9u3zIGraJTWEsmqYTv7 g8O6BkIhu0WMXAa52Sv7LI0RxTNWwmOtRaOl7uptHitVH6z4ljNMwMgjApXSfnzh fyQ4MV7VGnRJaognPlQx6rRbziBMsnfJvVWnZcFHvCMaorIJG6BS+kWDLovIdg69 YWBP4pBnVKvZTweOXV9g7Nlm21YUIhsspM3kXXL6IHiH0yuGnDr2VHCNrSjBTf6L i2LxihI2cGGS0gbM7DYXNjKyWs9eSvf1vuq1isM7FK8MNZsqyGIFbkyyyGeprN6t vCExW9l4fKiobNcLuuXKpl9RUxlX1/hdnkMNSXj1AtZh6hu9MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCn68YW9dMNoiXsz+w3AKlU7H2FqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTMyYTY2NTAtMTM2MC0z ODBkLWE2OGYtNjgwZGQxMGY5ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCG1xdA3+vhyeJsAFOljSEccnPYNJf/81UXvPlsk+p9i9hD8026 mDRzWdBF5K6Wd5d49G+P4+KoY2HJoVV00RJbUlVF22pR9uqeG76JCPiHWQlC8RDW XQNiD9ewAh2mr/ulSvDp7iDjLGg0BEYW0uSjZ/hxVzDnEi5v5GAP5r1zfYjTqPpa 19X+BV0lgXHsqnkyzvMuYBNfb685DuaSpOOCRztM7np/Ibr8mV48RIgtPFLCM+Zv Z1XQTo+ms7P9Qr6BqzxU2kGlPesaIw8gBrKDaO/DIZKVjfQotaYAq/EEkpgnVMBg evyB2nniPriTKWciVbFqNeqLl9PjW31AwvU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:22 2025 by rpki-client