$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa File: fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json) Hash identifier: iX9uAt0GcPJ0pgexOlw5859AJutt4u17VnEFt8Pcs0E= Subject key identifier: A3:AE:41:49:70:7A:26:04:42:CB:AB:6E:5B:BD:D7:CE:66:0B:8C:50 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858478E1BB8A3FE53BC1ADBF25D00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa Signing time: Wed 16 Oct 2024 01:00:31 +0000 ROA not before: Wed 16 Oct 2024 01:00:31 +0000 ROA not after: Tue 14 Jan 2025 02:00:31 +0000 asID: 29802 IP address blocks: 2604:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:1b:b8:a3:fe:53:bc:1a:db:f2:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Oct 16 01:00:31 2024 GMT Not After : Jan 14 02:00:31 2025 GMT Subject: CN=ec4906a1-38f2-4fdd-905a-37d5f9ead0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:61:f4:47:57:89:28:50:11:f8:53:f2:16:4a: 91:e1:e5:32:3c:bb:3e:dd:4c:ea:00:9b:33:e8:97: 24:09:20:f9:3c:e2:12:7b:5a:f8:82:ad:d2:c6:8b: ad:7f:a7:87:c9:e6:43:bc:5b:d7:e9:35:fd:a1:8b: 51:ce:8a:23:85:a6:ba:24:bf:40:33:37:50:1d:cd: 54:36:6a:e6:86:de:ab:ff:1c:fe:c0:50:c2:d4:3a: 27:c2:37:5f:73:90:53:bf:2b:32:e3:1e:2b:9a:49: b3:e6:7f:15:c5:2c:4c:1e:2a:0f:92:57:cc:1d:3d: 5a:e0:df:fe:f4:71:5e:54:b0:c2:44:3f:f4:5f:fe: f0:8e:b5:57:8a:51:2a:aa:3a:60:f2:f3:3a:ce:06: 77:4e:75:39:ce:e0:d6:d4:11:7f:d4:05:8f:11:db: 70:c2:54:3a:e8:f5:9f:98:e1:a6:cd:8a:7d:fe:a9: b5:02:63:00:5e:b6:64:65:06:e0:16:33:13:b9:72: fd:1e:b2:16:ac:94:a0:eb:f0:e1:d8:3c:d5:ef:9d: cc:d8:21:99:26:d9:9e:6b:33:d4:5a:41:84:16:e6: 73:a0:98:3e:e6:4e:da:09:b0:52:c3:c9:03:61:b3: 8f:61:1f:eb:91:7b:82:df:5b:72:d3:31:f8:70:a6: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AE:41:49:70:7A:26:04:42:CB:AB:6E:5B:BD:D7:CE:66:0B:8C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b1:f0:9b:71:2f:b9:5d:82:25:e3:5b:5c:10:76:eb:41:e5: 8c:38:7d:db:64:fa:d1:c1:43:16:cc:c0:05:bd:88:0b:3d:51: 91:36:2d:d0:3a:bf:29:f4:d7:35:90:73:20:d2:e3:e3:cf:04: ee:b1:14:e4:1c:8c:f9:9a:fd:04:08:b3:06:58:b2:34:4a:38: b6:b5:d4:24:7f:4b:78:63:4e:35:84:a6:9e:ac:be:50:4d:f0: 68:72:ac:62:ec:24:4c:59:f7:61:c0:fb:9c:b5:7b:3c:63:0d: bd:84:dc:af:86:e6:c3:e7:05:39:04:0a:de:dc:03:e3:f9:c7: ec:b0:b3:61:b2:d3:79:dd:45:f5:aa:42:39:b4:8d:81:47:bc: 85:70:4a:2f:5e:0d:51:a7:6f:76:89:6f:af:98:ae:f7:32:d2: 7a:dd:d6:db:b5:2e:56:3b:23:ea:90:c4:e5:c3:4a:26:aa:e7: 3e:d5:e9:50:52:a0:33:cc:1a:f9:ff:09:cf:10:4e:0a:8d:24: 30:28:29:91:0a:50:4e:97:9b:15:22:f1:09:35:44:b4:c4:50: d5:b6:ae:b2:fe:6c:86:22:80:61:75:d9:d8:ea:b3:9d:99:9f: 55:95:53:8a:48:97:28:58:a7:aa:eb:e2:2b:0a:66:d3:43:06: 39:3c:e8:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeOG7ij/lO8GtvyXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk ZWM0OTA2YTEtMzhmMi00ZmRkLTkwNWEtMzdkNWY5ZWFkMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22H0R1eJKFAR+FPyFkqR4eUyPLs+3UzqAJsz 6JckCSD5POISe1r4gq3Sxoutf6eHyeZDvFvX6TX9oYtRzoojhaa6JL9AMzdQHc1U Nmrmht6r/xz+wFDC1Donwjdfc5BTvysy4x4rmkmz5n8VxSxMHioPklfMHT1a4N/+ 9HFeVLDCRD/0X/7wjrVXilEqqjpg8vM6zgZ3TnU5zuDW1BF/1AWPEdtwwlQ66PWf mOGmzYp9/qm1AmMAXrZkZQbgFjMTuXL9HrIWrJSg6/Dh2DzV753M2CGZJtmeazPU WkGEFuZzoJg+5k7aCbBSw8kDYbOPYR/rkXuC31ty0zH4cKa0oQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKOuQUlweiYEQsurblu9185mC4xQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmRlMzg2YTAtYTBhMy0z M2Y5LWFkMTEtODEzNzc4Y2Q2OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBisfCbcS+5XYIl41tcEHbrQeWMOH3bZPrRwUMWzMAFvYgLPVGRNi3Q Or8p9Nc1kHMg0uPjzwTusRTkHIz5mv0ECLMGWLI0Sji2tdQkf0t4Y041hKaerL5Q TfBocqxi7CRMWfdhwPuctXs8Yw29hNyvhubD5wU5BAre3APj+cfssLNhstN53UX1 qkI5tI2BR7yFcEovXg1Rp292iW+vmK73MtJ63dbbtS5WOyPqkMTlw0omquc+1elQ UqAzzBr5/wnPEE4KjSQwKCmRClBOl5sVIvEJNUS0xFDVtq6y/myGIoBhddnY6rOd mZ9VlVOKSJcoWKeq6+IrCmbTQwY5POh8 -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org