$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa File: 17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json) Hash identifier: bx4Fa7QAIlrg5J2R3zBQn5N7Ch/AIxPkYnc4JPicygI= Subject key identifier: B8:7A:62:A5:79:C3:77:CF:40:C4:F5:D5:F3:61:70:FD:D6:5F:40:16 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F432858455E5DA4A205C87031B7934080 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa Signing time: Fri 29 Mar 2024 13:00:37 +0000 ROA not before: Fri 29 Mar 2024 13:00:37 +0000 ROA not after: Thu 27 Jun 2024 13:00:37 +0000 asID: 21519 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5e:5d:a4:a2:05:c8:70:31:b7:93:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Mar 29 13:00:37 2024 GMT Not After : Jun 27 13:00:37 2024 GMT Subject: CN=a3816cea-25f3-4475-b904-d6c51ecde163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:4a:6d:46:f0:38:f0:56:73:e1:70:f8:5c: ec:8b:58:58:02:2c:85:83:c7:81:e7:ac:3c:38:a1: 1d:56:29:64:cc:40:a3:88:63:eb:9c:75:4c:19:71: 69:2b:47:de:99:d1:2a:ee:41:6b:13:aa:67:ec:1b: 97:52:7a:39:a1:05:af:d2:f8:ad:8d:c4:09:a5:ea: a6:c8:24:c8:c2:46:19:d0:9f:87:9e:f8:46:47:f7: 1a:bf:e0:49:2d:d0:bd:55:fe:11:f0:82:a5:2a:b9: 2f:85:08:e0:a0:9d:6e:31:c1:e7:d8:ee:30:cf:96: 6c:bc:f8:d8:ce:76:a4:d7:27:8e:ae:91:06:9d:27: 77:4a:fa:b5:46:bb:2b:75:c3:08:c8:df:f9:cb:47: 12:1d:f2:b0:36:b2:9d:ee:df:a1:14:4c:29:2c:6e: 4e:b4:e3:cf:12:3d:5d:b8:e3:c2:69:da:44:b0:8d: 1c:ea:d0:65:68:e5:fd:7c:5a:46:2c:6e:da:f1:c7: 0c:de:23:d1:f3:94:1f:5e:5e:7c:5a:74:d2:bb:27: cb:53:81:bd:6b:3b:ec:30:97:a9:47:b4:8d:f6:d3: 0b:f2:8b:47:20:cb:ac:10:d7:5e:b2:ac:24:4c:6e: 8f:91:95:98:b4:af:42:ac:bd:db:f5:88:21:4d:9c: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7A:62:A5:79:C3:77:CF:40:C4:F5:D5:F3:61:70:FD:D6:5F:40:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:70:c0:0c:b1:1e:8f:62:ac:03:5e:fd:70:bf:39:f7:67:74: 64:63:55:f8:93:2e:db:ba:5f:8b:af:53:e9:80:bb:8a:ec:95: ac:0f:33:e0:20:79:fd:01:5e:88:f9:68:49:89:e2:43:b9:d9: e2:99:43:76:e1:aa:de:59:c0:80:05:f7:72:5f:59:d7:6a:72: a6:47:e5:da:bf:50:88:cd:ea:e1:fe:5e:86:06:f0:b5:4a:21: 0d:8c:5e:14:76:9f:46:22:a3:2d:b8:b8:b7:74:ee:69:1c:8c: 9b:46:91:bd:04:38:06:48:87:54:32:bb:cc:c4:aa:f6:b0:92: 3d:cc:e2:6f:76:3c:75:35:a5:4b:cb:dd:6f:bc:fc:21:09:bb: 35:e5:03:78:ae:3d:76:8c:7d:9c:d1:35:35:fc:12:c7:4f:7e: 17:60:1f:49:79:4e:75:6a:df:26:f9:7a:43:22:17:0c:1d:b8: 95:2b:3c:e8:fe:d8:07:85:19:ee:a2:00:31:14:9d:65:3b:b0: ed:5b:e1:4d:b6:3d:74:16:19:ed:18:78:32:6e:ac:7d:2a:7f: 67:c6:6d:ab:db:f4:cb:02:11:63:cb:95:8e:83:db:ea:7a:a4: d1:c1:8d:a1:00:29:35:c1:63:5d:93:e5:7e:ff:f7:d5:63:64: 95:ad:92:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVeXaSiBchwMbeTQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk YTM4MTZjZWEtMjVmMy00NDc1LWI5MDQtZDZjNTFlY2RlMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaBKbUbwOPBWc+Fw+Fzsi1hYAiyFg8eB56w8 OKEdVilkzECjiGPrnHVMGXFpK0femdEq7kFrE6pn7BuXUno5oQWv0vitjcQJpeqm yCTIwkYZ0J+HnvhGR/cav+BJLdC9Vf4R8IKlKrkvhQjgoJ1uMcHn2O4wz5ZsvPjY znak1yeOrpEGnSd3Svq1RrsrdcMIyN/5y0cSHfKwNrKd7t+hFEwpLG5OtOPPEj1d uOPCadpEsI0c6tBlaOX9fFpGLG7a8ccM3iPR85QfXl58WnTSuyfLU4G9azvsMJep R7SN9tML8otHIMusENdesqwkTG6PkZWYtK9CrL3b9YghTZyBYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLh6YqV5w3fPQMT11fNhcP3WX0AWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvMTc2ODgzMTMtYjY3Mi0z ODhlLWJlZjEtY2QyNGUyMjRlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCncMAMsR6PYqwDXv1wvzn3Z3RkY1X4ky7bul+Lr1PpgLuK7JWsDzPg IHn9AV6I+WhJieJDudnimUN24areWcCABfdyX1nXanKmR+Xav1CIzerh/l6GBvC1 SiENjF4Udp9GIqMtuLi3dO5pHIybRpG9BDgGSIdUMrvMxKr2sJI9zOJvdjx1NaVL y91vvPwhCbs15QN4rj12jH2c0TU1/BLHT34XYB9JeU51at8m+XpDIhcMHbiVKzzo /tgHhRnuogAxFJ1lO7DtW+FNtj10FhntGHgybqx9Kn9nxm2r2/TLAhFjy5WOg9vq eqTRwY2hACk1wWNdk+V+//fVY2SVrZIs -----END CERTIFICATE-----Generated at Sat May 18 04:05:27 2024 by rpki-client on console-ams.rpki-client.org