$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa File: e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa (raw, json) Hash identifier: KBk/tQ0j5JRoEtwhcmFVwGaM7hI6UMUILVmsg2bDd6M= Subject key identifier: 37:BD:60:E8:88:B0:1F:C4:52:C2:82:2F:96:D6:CC:2C:6B:BD:E3:ED Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847736CFC229BD0949E7083F700 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa Signing time: Sun 06 Oct 2024 11:37:30 +0000 ROA not before: Sun 06 Oct 2024 11:37:30 +0000 ROA not after: Sat 04 Jan 2025 12:37:30 +0000 asID: 1239 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:6c:fc:22:9b:d0:94:9e:70:83:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 6 11:37:30 2024 GMT Not After : Jan 4 12:37:30 2025 GMT Subject: CN=756dabb6-0535-40a9-996f-2f82502b17e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:2a:e1:89:e6:c7:1d:99:16:78:09:55:91: 42:79:3c:94:1e:27:f3:85:d6:e7:83:39:89:33:3a: c0:6a:96:f8:f6:a2:08:b0:bb:85:b2:61:0d:98:9a: 3b:18:5c:d3:74:57:9c:10:8f:9d:36:87:7d:0e:77: 35:07:68:29:37:63:90:3c:6a:90:65:53:ef:1b:5d: 47:52:05:03:cf:82:73:d0:73:e7:9f:bc:35:1e:ec: 85:5e:b6:85:7a:1e:ed:da:09:a8:7d:b6:1b:ae:4b: 76:e4:e9:df:63:fd:7b:65:d2:0f:64:5a:1c:36:a0: b8:f7:ec:f8:59:cb:9b:03:5c:41:d2:0c:2c:3c:8f: 30:bc:1a:57:48:60:82:30:b0:a2:10:f6:33:e3:2f: ce:e7:5a:9e:a9:b0:f8:63:d1:74:f0:a4:ed:db:eb: ec:2d:75:b4:4c:9e:de:f6:b5:1f:c9:39:0b:04:a5: 42:f7:a2:1d:23:29:93:71:46:2e:cf:6d:3b:f7:bd: b1:42:62:48:aa:78:f6:f7:5e:82:bf:f1:53:77:7c: fc:de:c3:00:01:8b:f4:f8:f7:c5:db:dc:b3:c8:57: 2e:b4:8c:62:f8:00:2b:e2:74:12:ef:68:4f:0d:3d: 3a:6c:94:4f:f7:0c:ee:21:97:7f:94:5e:e2:2a:e3: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BD:60:E8:88:B0:1F:C4:52:C2:82:2F:96:D6:CC:2C:6B:BD:E3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e49e52a9-7b0c-31e6-8a6b-a042a112989f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6f:38:82:61:b9:90:cf:f3:dc:2c:d5:53:5e:0e:e7:8c:0a: 40:ae:0f:bb:ce:9b:f6:27:d4:fa:22:f7:dc:20:a9:6c:01:e2: cd:ac:50:c3:52:7b:69:11:dc:31:3c:c4:f4:5f:aa:74:55:c4: bb:30:4b:5d:ff:64:f5:de:94:88:2d:75:b4:d1:87:f0:ae:94: f5:02:d0:64:46:3b:b9:2f:1b:6a:b9:11:39:58:1f:04:6a:08: 2a:84:a4:48:a9:d3:b9:87:ca:95:57:8f:de:a0:97:e8:83:e5: 7c:31:21:63:bb:99:1b:c3:5b:a0:e3:2b:0b:58:db:f3:74:a2: f5:3c:ca:e5:9b:ab:66:43:7f:6c:96:fe:d5:91:2f:89:82:dd: a1:e2:e3:bd:4f:d6:ef:64:67:c8:cb:3a:f3:fe:31:86:d5:f2: a1:d4:18:c0:dc:18:8b:f7:fc:e3:c6:7c:75:e4:57:c2:3b:8f: d1:15:fe:9e:ff:f5:9b:4a:b3:39:88:fd:a6:52:6c:a6:49:f7: 87:08:23:44:c8:e4:0f:5a:00:4a:ef:c0:fa:dc:1e:08:30:98: 52:77:59:3b:6c:16:5a:35:57:03:5a:c5:b0:3d:c0:2f:31:e1: 89:93:c7:e5:7a:38:65:27:f6:10:79:6a:74:e0:0d:dc:3b:af: e0:ac:ac:50 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEdzbPwim9CUnnCD9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTAwNjExMzczMFoXDTI1MDEwNDEyMzczMFowLzEtMCsGA1UEAxMk NzU2ZGFiYjYtMDUzNS00MGE5LTk5NmYtMmY4MjUwMmIxN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhoq4Ynmxx2ZFngJVZFCeTyUHifzhdbngzmJ MzrAapb49qIIsLuFsmENmJo7GFzTdFecEI+dNod9Dnc1B2gpN2OQPGqQZVPvG11H UgUDz4Jz0HPnn7w1HuyFXraFeh7t2gmofbYbrkt25OnfY/17ZdIPZFocNqC49+z4 WcubA1xB0gwsPI8wvBpXSGCCMLCiEPYz4y/O51qeqbD4Y9F08KTt2+vsLXW0TJ7e 9rUfyTkLBKVC96IdIymTcUYuz207972xQmJIqnj2916Cv/FTd3z83sMAAYv0+PfF 29yzyFcutIxi+AAr4nQS72hPDT06bJRP9wzuIZd/lF7iKuNz9wIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFDe9YOiIsB/EUsKCL5bWzCxrvePtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZTQ5ZTUyYTktN2IwYy0z MWU2LThhNmItYTA0MmExMTI5ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQB+bziCYbmQz/PcLNVTXg7njApArg+7zpv2J9T6IvfcIKlsAeLNrFDDUntpEdwx PMT0X6p0VcS7MEtd/2T13pSILXW00YfwrpT1AtBkRju5LxtquRE5WB8EaggqhKRI qdO5h8qVV4/eoJfog+V8MSFju5kbw1ug4ysLWNvzdKL1PMrlm6tmQ39slv7VkS+J gt2h4uO9T9bvZGfIyzrz/jGG1fKh1BjA3BiL9/zjxnx15FfCO4/RFf6e//WbSrM5 iP2mUmymSfeHCCNEyOQPWgBK78D63B4IMJhSd1k7bBZaNVcDWsWwPcAvMeGJk8fl ejhlJ/YQeWp04A3cO6/grKxQ -----END CERTIFICATE-----Generated at Tue Oct 22 18:55:14 2024 by rpki-client on console-ams.rpki-client.org