$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa File: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (raw, json) Hash identifier: +PpQ8htdzPbe7jhGdpzVKq2XHfeuThgN/RI7vRTQ9xU= Subject key identifier: 77:7D:47:66:E3:83:A5:42:6B:2F:8E:92:87:56:52:C7:01:9B:B8:F5 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285845F253F5445930A47CC104D598 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa Signing time: Tue 21 May 2024 13:00:34 +0000 ROA not before: Tue 21 May 2024 13:00:34 +0000 ROA not after: Mon 19 Aug 2024 13:00:34 +0000 asID: 29838 IP address blocks: 2602:ffb5::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f2:53:f5:44:59:30:a4:7c:c1:04:d5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: May 21 13:00:34 2024 GMT Not After : Aug 19 13:00:34 2024 GMT Subject: CN=280e0ea5-0b9f-4968-a478-ccf981470b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:ed:ea:a7:b3:47:f9:79:c4:51:0e:da:42: d2:54:54:05:b2:ed:8a:7b:50:0c:0a:9c:6f:71:96: 10:28:c5:cc:4d:72:9f:e6:c0:75:ce:8b:fe:09:29: 6d:c7:ce:1c:ba:ff:4f:d0:08:1d:e5:b8:8e:df:3d: 73:e6:de:01:c0:e5:d8:fd:af:f8:b8:31:eb:ef:4c: 9e:0a:28:d9:b7:0d:00:84:df:f2:10:5c:09:b5:65: 8f:76:80:49:33:4f:ee:f9:0c:9b:a6:c7:c3:c8:e8: 8b:39:ef:f3:7f:1c:19:6a:cc:d5:be:bb:94:d8:f9: 39:b8:c9:cd:12:d5:20:73:da:67:a7:a8:8e:46:69: 95:63:b3:12:66:70:b1:ef:17:2b:ef:c2:bc:d8:8c: 87:7b:ab:4a:2e:3b:f5:1e:75:2c:9f:d4:6c:4d:62: 60:87:1f:80:77:20:62:9a:7d:94:0e:5a:24:ab:c1: be:43:d3:c0:f7:0a:f5:6f:13:b7:96:37:92:6a:66: 9d:7c:69:45:9a:e0:1a:49:ef:98:55:4d:eb:c4:8b: 74:69:8c:72:c7:6d:32:1b:43:bc:90:56:c9:95:84: cc:1c:47:8e:1e:c2:59:1c:fb:f0:50:27:47:0e:7c: b8:79:77:c4:3d:b5:e6:b3:89:ed:82:0f:cb:b6:84: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7D:47:66:E3:83:A5:42:6B:2F:8E:92:87:56:52:C7:01:9B:B8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:96:97:e8:41:90:b9:f2:7c:ac:79:52:c0:90:db:43:a1:41: 34:7f:89:29:0f:29:75:08:20:ca:3a:46:9a:ae:4f:4e:5b:7b: f7:ab:78:b4:3b:42:17:6f:7b:ac:e1:76:79:b4:1c:d1:3c:5c: e6:dc:a0:be:d4:89:c5:69:9a:a0:36:73:ad:29:97:1a:bd:d2: b7:1f:e2:b6:26:8b:46:73:c1:2f:f0:a4:2d:8a:67:93:fd:ca: 60:13:cb:b9:dc:0e:7e:96:9f:da:7b:f5:e8:e3:52:0d:fb:e4: 7b:6f:96:86:de:a5:d7:9e:c2:d0:9f:89:1f:7a:dd:42:65:89: bb:66:bb:72:ae:40:03:42:9f:36:21:42:8a:85:f0:d9:77:70: cb:e8:b3:f1:18:9d:1a:7e:92:ed:aa:91:57:ef:5f:1d:fc:2a: 96:28:ca:38:ba:1d:96:01:bd:b1:44:04:38:ef:1f:31:5b:bb: b1:f8:ce:b6:ab:6d:07:4a:aa:5f:12:5b:9d:29:01:6f:21:32: 87:e5:4a:da:c7:58:e1:ad:f4:27:87:71:9f:99:e4:45:24:cc: 49:40:c5:31:6b:90:2d:40:97:9c:50:1f:6a:fd:e4:76:a6:2d: 29:59:8e:e6:e2:78:c6:30:6a:35:f0:61:0c:9b:17:41:53:9a: 0e:a7:71:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXyU/VEWTCkfMEE1ZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI0MDUyMTEzMDAzNFoXDTI0MDgxOTEzMDAzNFowLzEtMCsGA1UEAxMk MjgwZTBlYTUtMGI5Zi00OTY4LWE0NzgtY2NmOTgxNDcwYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy/t6qezR/l5xFEO2kLSVFQFsu2Ke1AMCpxv cZYQKMXMTXKf5sB1zov+CSltx84cuv9P0Agd5biO3z1z5t4BwOXY/a/4uDHr70ye CijZtw0AhN/yEFwJtWWPdoBJM0/u+QybpsfDyOiLOe/zfxwZaszVvruU2Pk5uMnN EtUgc9pnp6iORmmVY7MSZnCx7xcr78K82IyHe6tKLjv1HnUsn9RsTWJghx+AdyBi mn2UDlokq8G+Q9PA9wr1bxO3ljeSamadfGlFmuAaSe+YVU3rxIt0aYxyx20yG0O8 kFbJlYTMHEeOHsJZHPvwUCdHDny4eXfEPbXms4ntgg/LtoSIkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHd9R2bjg6VCay+OkodWUscBm7j1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZGI0OGNiZWMtNDgxMS0z MWEzLTk4Y2YtYWI4YTNkZGUyMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUJaX6EGQufJ8rHlSwJDbQ6FBNH+JKQ8pdQggyjpGmq5PTlt796t4 tDtCF297rOF2ebQc0Txc5tygvtSJxWmaoDZzrSmXGr3Stx/itiaLRnPBL/CkLYpn k/3KYBPLudwOfpaf2nv16ONSDfvke2+Wht6l157C0J+JH3rdQmWJu2a7cq5AA0Kf NiFCioXw2Xdwy+iz8RidGn6S7aqRV+9fHfwqlijKOLodlgG9sUQEOO8fMVu7sfjO tqttB0qqXxJbnSkBbyEyh+VK2sdY4a30J4dxn5nkRSTMSUDFMWuQLUCXnFAfav3k dqYtKVmO5uJ4xjBqNfBhDJsXQVOaDqdxKw== -----END CERTIFICATE-----Generated at Fri May 24 02:53:38 2024 by rpki-client on console-ams.rpki-client.org