$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json) Hash identifier: n22J26ZKX+1AI+Q+7Z7cLPNl1uhrgNi5aYUM+R0TZk8= Subject key identifier: 3D:5C:51:9D:BF:92:8B:11:4E:AB:57:0F:32:D6:26:0E:0B:7A:52:8A Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F432858455A2D86E646358EB14CD8E800 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa Signing time: Thu 28 Mar 2024 01:00:27 +0000 ROA not before: Thu 28 Mar 2024 01:00:27 +0000 ROA not after: Wed 26 Jun 2024 01:00:27 +0000 asID: 958 IP address blocks: 2605:ac40:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5a:2d:86:e6:46:35:8e:b1:4c:d8:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Mar 28 01:00:27 2024 GMT Not After : Jun 26 01:00:27 2024 GMT Subject: CN=e5fb97d2-0b30-44d6-acc1-d98b814b2a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:9d:e5:7e:5d:1f:9d:2f:65:1e:3b:34:1f: 70:da:51:52:ea:7a:a4:09:71:75:fc:c5:7d:de:f2: 25:ac:08:e6:23:a0:b6:6e:81:62:09:4a:72:b1:d2: b4:24:97:b9:db:58:cc:b1:86:78:bf:7c:77:74:01: 52:ce:6d:61:9e:dc:70:52:f5:2f:00:b6:e1:e6:b0: ad:0f:68:36:42:0a:29:74:9e:4e:de:46:92:50:29: 27:c8:b5:e3:e4:3d:ac:9e:4e:69:93:f0:fa:48:ce: d7:79:ef:17:ae:d3:61:57:51:ac:41:38:6f:83:3d: bd:e9:00:fb:27:c6:28:90:54:c9:1f:3a:96:8a:c3: 85:9c:5a:43:55:f1:fd:4c:2f:a0:d4:76:a9:b8:b0: cc:35:df:57:d1:e0:8b:10:b8:d6:b0:ee:1e:d7:d0: e4:1c:d0:ac:8b:22:aa:77:ea:81:20:e0:50:91:41: 8b:d3:e8:91:ac:c3:fb:31:c0:00:03:2d:29:e7:72: a9:df:eb:0c:72:99:8e:d1:56:4c:0d:c8:e7:76:d3: ea:3c:00:27:1e:74:a9:2c:58:ef:15:c7:8c:34:98: 4e:06:9c:f7:14:f2:5f:45:8e:d4:c8:b9:88:1c:67: f7:59:2b:5e:bc:93:da:5a:6a:a0:be:48:92:0a:27: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5C:51:9D:BF:92:8B:11:4E:AB:57:0F:32:D6:26:0E:0B:7A:52:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5b:6b:66:10:85:4f:81:29:65:90:23:73:a9:1e:20:e8:d4: 9c:f9:86:6a:98:a2:8e:68:66:78:65:1c:ac:75:89:11:39:ec: 8c:0b:2a:85:8a:76:b8:bf:3b:0c:84:d1:3e:c0:71:43:7b:48: fa:70:9b:31:bd:f5:bd:ce:f6:6d:7b:a0:1c:22:0c:1f:73:01: 8c:0a:1f:a5:e0:f6:c4:83:35:a8:5c:9b:06:09:90:2d:f0:42: e0:44:40:c3:25:44:4c:fb:bd:a4:a3:4c:dd:b7:8b:98:e0:e4: 71:b6:c5:07:b8:b5:ca:1b:98:d6:5b:53:30:af:71:92:2c:45: 12:4c:7e:4a:9e:86:2e:f7:eb:28:4a:d8:26:d2:eb:3b:02:9f: de:53:b7:ea:03:c8:70:80:f5:a6:17:68:0c:b4:1e:07:a8:46: 76:46:31:c1:84:91:a2:2e:53:8a:c9:31:8d:31:74:ce:bd:ce: 52:ac:22:e1:d0:42:d7:1f:fe:e1:22:3d:56:db:8c:d5:de:5e: 3e:53:83:da:38:02:7a:af:1b:b5:6d:6e:85:93:4e:7b:2b:09: bb:2e:51:b7:9a:2c:54:f6:86:4b:18:0d:12:bd:69:ff:97:62: c5:f9:a3:d6:4e:df:b3:da:59:29:c9:00:91:46:0e:b8:e1:57: 0a:a5:cf:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVaLYbmRjWOsUzY6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk ZTVmYjk3ZDItMGIzMC00NGQ2LWFjYzEtZDk4YjgxNGIyYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF+d5X5dH50vZR47NB9w2lFS6nqkCXF1/MV9 3vIlrAjmI6C2boFiCUpysdK0JJe521jMsYZ4v3x3dAFSzm1hntxwUvUvALbh5rCt D2g2QgopdJ5O3kaSUCknyLXj5D2snk5pk/D6SM7Xee8XrtNhV1GsQThvgz296QD7 J8YokFTJHzqWisOFnFpDVfH9TC+g1HapuLDMNd9X0eCLELjWsO4e19DkHNCsiyKq d+qBIOBQkUGL0+iRrMP7McAAAy0p53Kp3+sMcpmO0VZMDcjndtPqPAAnHnSpLFjv FceMNJhOBpz3FPJfRY7UyLmIHGf3WStevJPaWmqgvkiSCieaQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD1cUZ2/kosRTqtXDzLWJg4LelKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZba2YQhU+BKWWQI3OpHiDo1Jz5hmqYoo5oZnhlHKx1iRE57IwL KoWKdri/OwyE0T7AcUN7SPpwmzG99b3O9m17oBwiDB9zAYwKH6Xg9sSDNahcmwYJ kC3wQuBEQMMlREz7vaSjTN23i5jg5HG2xQe4tcobmNZbUzCvcZIsRRJMfkqehi73 6yhK2CbS6zsCn95Tt+oDyHCA9aYXaAy0HgeoRnZGMcGEkaIuU4rJMY0xdM69zlKs IuHQQtcf/uEiPVbbjNXeXj5Tg9o4AnqvG7VtboWTTnsrCbsuUbeaLFT2hksYDRK9 af+XYsX5o9ZO37PaWSnJAJFGDrjhVwqlz94= -----END CERTIFICATE-----Generated at Sun Jun 2 22:26:57 2024 by rpki-client on console-fra.rpki-client.org