$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3c372ef3-6a0a-3f16-88a5-589231d7d0e9.roa File: 3c372ef3-6a0a-3f16-88a5-589231d7d0e9.roa (raw, json) Hash identifier: 4mVubM577ChLajoqSrY5hxvoa6vXzGbFBO/d8TkNtqs= Subject key identifier: 13:E5:52:4C:68:37:57:E8:58:32:CF:89:31:59:01:FC:6C:20:3B:8B Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858459D2DE80E8DF13958A6E95600 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3c372ef3-6a0a-3f16-88a5-589231d7d0e9.roa Signing time: Sun 21 Apr 2024 01:00:25 +0000 ROA not before: Sun 21 Apr 2024 01:00:25 +0000 ROA not after: Sat 20 Jul 2024 01:00:25 +0000 asID: 15290 IP address blocks: 2001:4c8:109b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9d:2d:e8:0e:8d:f1:39:58:a6:e9:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Apr 21 01:00:25 2024 GMT Not After : Jul 20 01:00:25 2024 GMT Subject: CN=29fcab6a-75d0-452c-ac4b-16a8f5bcc031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9d:f1:65:e7:9d:1e:b5:e5:40:86:09:73:e0: 35:95:bc:28:4a:a6:ac:91:b0:dd:52:b8:88:c7:81: 2f:1a:77:80:26:38:a9:76:14:14:1e:97:d9:10:4b: 04:a4:b9:8b:0b:bf:c5:94:f9:98:4c:6f:a9:2f:62: ae:ea:b1:3a:01:84:60:ad:56:8b:af:6d:00:92:7f: f7:0b:60:da:56:6a:d2:e4:01:94:9a:c9:9b:ed:6d: f9:46:4c:4c:d0:fc:40:91:c6:2b:ba:9e:a2:41:fa: 4d:cd:c1:8f:af:7d:b4:f0:8d:ad:7c:64:33:0e:3a: c7:41:57:68:10:3f:cb:af:e7:f2:ba:ec:67:c7:05: 30:8c:9a:d4:6a:aa:85:f3:09:41:71:c1:16:48:54: 35:9a:f7:9a:2f:47:d4:2d:2e:55:e5:b6:67:b4:70: 8c:5e:62:f8:03:e1:28:04:84:e0:cb:42:da:c9:ff: fa:43:64:45:aa:7f:d1:f2:3a:8b:a4:fa:75:8f:2c: 55:fc:71:c0:38:a4:21:23:c3:b0:13:b8:3b:74:ac: 9f:a0:6c:d3:55:f7:e5:bd:b6:22:ad:6c:65:41:94: 23:ec:87:40:55:3b:d9:cb:23:5c:8b:f2:be:d4:bd: 42:ac:cd:47:8b:29:46:de:b6:be:5f:11:0e:ac:17: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:52:4C:68:37:57:E8:58:32:CF:89:31:59:01:FC:6C:20:3B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3c372ef3-6a0a-3f16-88a5-589231d7d0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv6: 2001:4c8:109b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ea:b8:f8:08:6e:5b:62:c2:bb:bf:1a:eb:ac:d4:04:96:f5: 4d:82:cf:cd:8b:f6:3d:f9:d7:38:93:20:d2:91:b4:1e:fb:6e: 8a:d2:38:79:40:fc:e5:8d:9c:6f:93:2d:95:a5:af:0d:4a:f9: 87:23:ff:e2:1a:18:a0:98:45:7c:7b:b9:d3:32:a6:d9:5e:53: fd:96:40:b8:c0:79:b5:ca:e4:bf:be:d3:47:7e:ba:18:b2:c6: bd:61:75:b8:93:84:74:ce:76:cb:9b:49:8d:11:84:fc:41:55: 09:1e:a4:35:27:55:71:e7:91:6f:cf:57:55:cd:1c:75:4f:61: 5d:c7:75:1e:22:71:df:bb:b6:9e:92:7b:21:d1:07:26:bc:a7: e6:0e:7b:3c:ce:d2:8a:ec:39:33:96:14:70:10:05:c9:48:76: 45:f3:75:f8:ac:2d:e0:73:ff:8e:fb:34:26:6f:60:5c:17:3d: f8:db:7f:64:5d:91:b2:c5:72:41:ef:94:a0:b5:0e:76:46:3b: e0:10:d9:85:ba:d0:a4:b6:31:a9:ae:c8:be:9d:32:15:20:67: 15:00:dd:80:9a:1c:55:bc:8b:c4:88:80:ec:38:61:19:40:34: 88:ec:74:72:97:4f:9a:b0:63:d5:b5:5c:c3:b2:98:54:c0:eb: 01:4e:df:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWdLegOjfE5WKbpVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk MjlmY2FiNmEtNzVkMC00NTJjLWFjNGItMTZhOGY1YmNjMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp3xZeedHrXlQIYJc+A1lbwoSqaskbDdUriI x4EvGneAJjipdhQUHpfZEEsEpLmLC7/FlPmYTG+pL2Ku6rE6AYRgrVaLr20Akn/3 C2DaVmrS5AGUmsmb7W35RkxM0PxAkcYrup6iQfpNzcGPr3208I2tfGQzDjrHQVdo ED/Lr+fyuuxnxwUwjJrUaqqF8wlBccEWSFQ1mveaL0fULS5V5bZntHCMXmL4A+Eo BITgy0Layf/6Q2RFqn/R8jqLpPp1jyxV/HHAOKQhI8OwE7g7dKyfoGzTVfflvbYi rWxlQZQj7IdAVTvZyyNci/K+1L1CrM1HiylG3ra+XxEOrBcz9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPlUkxoN1foWDLPiTFZAfxsIDuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvM2MzNzJlZjMtNmEwYS0z ZjE2LTg4YTUtNTg5MjMxZDdkMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvquPgIbltiwru/Guus1ASW9U2Cz82L9j351ziTINKRtB77borS OHlA/OWNnG+TLZWlrw1K+Ycj/+IaGKCYRXx7udMyptleU/2WQLjAebXK5L++00d+ uhiyxr1hdbiThHTOdsubSY0RhPxBVQkepDUnVXHnkW/PV1XNHHVPYV3HdR4icd+7 tp6SeyHRBya8p+YOezzO0orsOTOWFHAQBclIdkXzdfisLeBz/477NCZvYFwXPfjb f2RdkbLFckHvlKC1DnZGO+AQ2YW60KS2MamuyL6dMhUgZxUA3YCaHFW8i8SIgOw4 YRlANIjsdHKXT5qwY9W1XMOymFTA6wFO35M= -----END CERTIFICATE-----