$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa File: d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json) Hash identifier: JOlxEIQEdS3OyXDVKv8uR3okEWD2nnU7Ah6uHJYDyL4= Subject key identifier: A3:1A:25:8B:7A:FA:00:51:28:CA:50:E3:DB:DD:ED:B6:50:9F:DB:D4 Certificate issuer: /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Certificate serial: 010D0C9F43285845FC19329F7956F56D9210EAE0 Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa Signing time: Sat 25 May 2024 01:00:27 +0000 ROA not before: Sat 25 May 2024 01:00:27 +0000 ROA not after: Fri 23 Aug 2024 01:00:27 +0000 asID: 395660 IP address blocks: 2620:133:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:fc:19:32:9f:79:56:f5:6d:92:10:ea:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Validity Not Before: May 25 01:00:27 2024 GMT Not After : Aug 23 01:00:27 2024 GMT Subject: CN=9a0464dc-c7c4-46aa-8a88-97caead6cb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:1f:5a:b2:92:30:bd:48:1d:88:b2:a7:ff: 63:ee:71:79:34:2f:26:94:42:88:ef:c7:a1:64:a1: e1:85:7a:03:b0:7a:ff:5a:0c:0d:33:a0:0b:cd:69: da:b0:b5:75:ab:00:17:f1:c9:06:7a:59:c2:4b:c2: 55:c3:0e:57:d0:a2:43:06:99:d3:a6:6b:8e:20:e6: 4c:75:9b:0a:32:f1:c1:b0:20:6f:62:4c:11:a5:dd: 99:56:4d:a8:a7:75:61:56:04:af:9a:e8:cd:59:a7: 5e:48:e4:2f:12:66:f0:d6:24:45:eb:e2:52:ef:97: d0:7a:de:93:22:05:27:61:c9:4b:29:28:de:11:f7: 62:b3:89:c9:db:23:a1:cb:53:82:aa:12:9d:43:c1: fa:f3:dc:63:c4:0b:eb:0a:6f:e7:95:f6:e4:eb:79: 41:f1:20:92:fb:50:8b:64:7b:c3:8e:25:da:b3:c8: a2:08:af:30:19:de:a4:f8:ce:69:d6:ae:5a:9c:4e: 4b:24:be:60:fa:67:02:06:a1:3d:05:9c:83:12:54: 8c:34:7e:dd:40:46:e7:07:7f:5a:da:6e:23:6a:45: d4:a2:23:25:04:01:c1:1b:41:74:c3:74:72:cd:d0: 8e:13:0e:15:1f:1c:c1:ca:f3:00:3e:bd:0e:63:44: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:25:8B:7A:FA:00:51:28:CA:50:E3:DB:DD:ED:B6:50:9F:DB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl X509v3 Authority Key Identifier: keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:80:05:39:29:a4:78:35:d5:24:ed:0f:8f:93:0c:a2:91:34: ea:ca:ed:dd:62:b8:0e:f9:d8:fd:55:46:d8:7d:4c:fa:a3:74: 87:51:8f:af:0b:3f:c9:78:f3:91:36:b5:9d:0f:ab:5f:71:0c: d6:93:f6:e3:d4:33:b2:a1:0a:58:4d:f4:6b:c5:39:6b:dd:76: 8b:95:10:5f:d2:c7:e9:b2:37:f6:5f:db:1a:1f:4a:53:ac:b1: fc:88:bd:15:b4:4b:df:00:61:a4:c2:3e:bc:23:c8:28:01:a0: 87:19:cc:5d:a2:3f:21:96:64:04:ae:c0:f8:5d:c1:2c:9b:28: 84:21:db:50:65:3f:18:b9:cd:61:a3:5a:e3:54:8f:a6:44:16: 67:8a:0c:d9:5d:1d:50:e8:9f:e3:eb:02:81:17:09:54:a4:5e: 66:3c:ff:7d:d7:c5:3d:9d:8e:5f:16:31:57:09:b2:30:e9:46: c2:b1:93:8f:f0:24:23:5c:61:2f:ad:86:a3:b7:36:aa:9e:c2: cc:1d:ca:d3:52:39:4a:a5:bd:6e:dc:d4:92:5f:06:5c:1e:9e: 58:84:c3:f6:4d:47:c1:05:d2:b5:45:5b:cf:d9:a2:c4:2d:fe: d7:1f:ad:1e:d3:ca:81:cc:b3:9f:16:b3:76:5d:a3:18:99:97: 16:b6:02:1a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEX8GTKfeVb1bZIQ6uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE2OWNjYTUtYjZjMi00MWY0LWE5MmYtZTc0ZDU3MTNk MmMxMB4XDTI0MDUyNTAxMDAyN1oXDTI0MDgyMzAxMDAyN1owLzEtMCsGA1UEAxMk OWEwNDY0ZGMtYzdjNC00NmFhLThhODgtOTdjYWVhZDZjYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzcfWrKSML1IHYiyp/9j7nF5NC8mlEKI78eh ZKHhhXoDsHr/WgwNM6ALzWnasLV1qwAX8ckGelnCS8JVww5X0KJDBpnTpmuOIOZM dZsKMvHBsCBvYkwRpd2ZVk2op3VhVgSvmujNWadeSOQvEmbw1iRF6+JS75fQet6T IgUnYclLKSjeEfdis4nJ2yOhy1OCqhKdQ8H689xjxAvrCm/nlfbk63lB8SCS+1CL ZHvDjiXas8iiCK8wGd6k+M5p1q5anE5LJL5g+mcCBqE9BZyDElSMNH7dQEbnB39a 2m4jakXUoiMlBAHBG0F0w3RyzdCOEw4VHxzByvMAPr0OY0RtTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKMaJYt6+gBRKMpQ49vd7bZQn9vUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5 Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRkNTcxM2QyYzEvZDVkYWY5ZjUtMWRiNS0z N2ZiLWJlNjAtNjI2ZDhhMDJiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDE2OWNjYTUtYjZjMi00MWY0LWE5 MmYtZTc0ZDU3MTNkMmMxL2QxNjljY2E1LWI2YzItNDFmNC1hOTJmLWU3NGQ1NzEz ZDJjMS5jcmwwHwYDVR0jBBgwFoAUvTnNefSLJO+PaY3cP5jNDKuB+JowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRk NTcxM2QyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABM7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAYAFOSmkeDXVJO0Pj5MMopE06srt3WK4DvnY/VVG2H1M+qN0h1GP rws/yXjzkTa1nQ+rX3EM1pP249QzsqEKWE30a8U5a912i5UQX9LH6bI39l/bGh9K U6yx/Ii9FbRL3wBhpMI+vCPIKAGghxnMXaI/IZZkBK7A+F3BLJsohCHbUGU/GLnN YaNa41SPpkQWZ4oM2V0dUOif4+sCgRcJVKReZjz/fdfFPZ2OXxYxVwmyMOlGwrGT j/AkI1xhL62Go7c2qp7CzB3K01I5SqW9btzUkl8GXB6eWITD9k1HwQXStUVbz9mi xC3+1x+tHtPKgcyznxazdl2jGJmXFrYCGg== -----END CERTIFICATE-----Generated at Sun Jun 2 19:33:01 2024 by rpki-client on console-ams.rpki-client.org