$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa File: 2b564fbb-5489-3a5e-a3a8-b51618764307.roa (raw, json) Hash identifier: FxnSVunChJRdeATx4eNhXgcTdsI1PcBsxTZD0pDDgz4= Subject key identifier: 28:3B:E2:8D:F3:B6:BE:5A:BB:D4:86:6A:53:57:9F:8F:BE:A3:33:9B Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F43285845D503CE048A9D029B2B0D7800 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa Signing time: Sat 11 May 2024 01:00:27 +0000 ROA not before: Sat 11 May 2024 01:00:27 +0000 ROA not after: Fri 09 Aug 2024 01:00:27 +0000 asID: 26904 IP address blocks: 2602:fc15:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d5:03:ce:04:8a:9d:02:9b:2b:0d:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: May 11 01:00:27 2024 GMT Not After : Aug 9 01:00:27 2024 GMT Subject: CN=ea7c802e-b63d-4e12-aa64-f7d7749f5bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a8:a0:57:ad:cc:42:a5:31:a2:bc:b3:b5:61: 51:1f:3a:81:b2:04:c0:bf:10:3a:e4:04:d5:e2:54: b3:74:ab:70:dd:73:00:0d:bb:31:e0:80:9a:cf:15: 8b:1d:46:2a:64:ed:03:6a:14:89:79:02:d1:69:da: f4:d3:3b:f9:c0:b5:4d:c0:3d:d0:f8:10:52:1d:f7: 59:a6:84:4c:70:09:52:ea:9f:b6:c4:50:77:36:29: 3b:7c:7d:46:30:b6:66:4a:c2:b2:51:26:df:af:88: 4f:15:34:12:6a:c1:da:9d:a7:99:d5:79:77:4b:70: 22:8c:7c:cc:63:8a:a3:3a:e2:fb:c0:0a:b3:35:09: 7c:b3:d4:1b:0e:69:84:98:41:0e:46:97:1d:ca:0e: 88:da:76:ed:24:4e:99:9a:22:2f:f8:58:e3:6c:37: fe:dd:87:97:66:b0:2c:22:a0:df:0d:b0:c9:d0:e8: f8:bd:f2:3d:8f:90:21:0c:58:5a:2e:f9:fd:ad:67: 61:1e:5a:30:66:52:b7:33:b8:b9:0e:52:70:14:a1: b2:99:03:c8:04:cc:27:18:80:08:cc:9f:59:4e:6b: 86:7b:d4:5f:18:ed:ef:a9:ef:24:9c:86:89:82:96: 07:c0:ea:ad:7e:54:0a:1c:0f:9a:8c:25:71:15:f2: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:E2:8D:F3:B6:BE:5A:BB:D4:86:6A:53:57:9F:8F:BE:A3:33:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/2b564fbb-5489-3a5e-a3a8-b51618764307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc15:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9f:00:57:e8:fc:08:fa:29:b7:83:05:ff:2f:97:d8:fb:66: d9:68:a1:18:12:09:bd:33:23:a3:89:ca:15:05:16:f5:ba:16: 70:1e:15:b1:aa:a5:70:3c:34:99:8c:d2:40:59:dd:78:76:dc: 38:39:13:4f:94:0d:5a:44:8c:b2:b3:a6:30:8c:09:1d:92:fe: f8:4c:22:fe:63:b1:d0:d6:a9:4e:45:1e:7c:a5:79:ef:e6:09: 0e:2b:35:66:de:04:60:07:51:b7:60:75:c6:f5:73:77:84:b6: 61:d9:5a:42:72:55:5f:0f:37:be:35:6a:8d:04:a0:42:f0:ae: bb:f3:d4:ae:8e:98:01:c6:e9:9e:d6:8c:0c:9d:62:6f:f2:2b: 8f:32:1c:b2:55:c0:a1:6a:ee:d9:72:5c:f6:4d:99:71:38:1a: 9b:83:56:c4:fb:6a:5e:d1:83:db:ed:f5:05:87:79:d3:2a:41: 7a:a3:6f:6e:7a:27:8d:5e:35:47:d1:7e:28:ce:ee:8a:d4:fe: 05:05:be:74:47:c9:d6:33:42:44:97:f6:88:03:17:df:8f:af: 51:58:9e:a8:86:4b:76:da:97:c4:46:d6:41:68:fa:73:8b:2b: b8:05:b5:c2:29:05:36:7e:bf:32:99:db:45:8f:5c:29:f0:29: b3:af:9c:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXVA84Eip0CmysNeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk ZWE3YzgwMmUtYjYzZC00ZTEyLWFhNjQtZjdkNzc0OWY1YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KigV63MQqUxoryztWFRHzqBsgTAvxA65ATV 4lSzdKtw3XMADbsx4ICazxWLHUYqZO0DahSJeQLRadr00zv5wLVNwD3Q+BBSHfdZ poRMcAlS6p+2xFB3Nik7fH1GMLZmSsKyUSbfr4hPFTQSasHanaeZ1Xl3S3AijHzM Y4qjOuL7wAqzNQl8s9QbDmmEmEEORpcdyg6I2nbtJE6ZmiIv+FjjbDf+3YeXZrAs IqDfDbDJ0Oj4vfI9j5AhDFhaLvn9rWdhHlowZlK3M7i5DlJwFKGymQPIBMwnGIAI zJ9ZTmuGe9RfGO3vqe8knIaJgpYHwOqtflQKHA+ajCVxFfJRhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCg74o3ztr5au9SGalNXn4++ozObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvMmI1NjRmYmItNTQ4OS0z YTVlLWEzYTgtYjUxNjE4NzY0MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL8FQAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABmfAFfo/Aj6KbeDBf8vl9j7ZtlooRgSCb0zI6OJyhUFFvW6FnAe FbGqpXA8NJmM0kBZ3Xh23Dg5E0+UDVpEjLKzpjCMCR2S/vhMIv5jsdDWqU5FHnyl ee/mCQ4rNWbeBGAHUbdgdcb1c3eEtmHZWkJyVV8PN741ao0EoELwrrvz1K6OmAHG 6Z7WjAydYm/yK48yHLJVwKFq7tlyXPZNmXE4GpuDVsT7al7Rg9vt9QWHedMqQXqj b256J41eNUfRfijO7orU/gUFvnRHydYzQkSX9ogDF9+Pr1FYnqiGS3bal8RG1kFo +nOLK7gFtcIpBTZ+vzKZ20WPXCnwKbOvnEQ= -----END CERTIFICATE-----Generated at Sat May 18 13:39:50 2024 by rpki-client on console-ams.rpki-client.org