$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/74c93893-0143-3428-b8d0-0322cad8005f.roa File: 74c93893-0143-3428-b8d0-0322cad8005f.roa (raw, json) Hash identifier: 9LtXasSU3TDTk+SoaBdjvGPwiwRqR31nivs9O9djd1g= Subject key identifier: 81:D8:21:5C:30:ED:D5:B6:C4:C8:5E:C5:6B:35:B7:9A:4B:59:68:11 Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584526A5ACF0BA111EEDE9CC0580 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/74c93893-0143-3428-b8d0-0322cad8005f.roa Signing time: Sat 09 Mar 2024 14:00:31 +0000 ROA not before: Sat 09 Mar 2024 14:00:31 +0000 ROA not after: Fri 07 Jun 2024 13:00:31 +0000 asID: 210645 IP address blocks: 2602:2c9:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:26:a5:ac:f0:ba:11:1e:ed:e9:cc:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Mar 9 14:00:31 2024 GMT Not After : Jun 7 13:00:31 2024 GMT Subject: CN=8c353a48-79ca-41bd-b0b2-e2e6f96ea048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:f7:b1:7d:23:f8:52:8d:46:97:09:8a:8c: ce:73:45:f7:41:43:fa:68:a7:9a:bb:59:1b:87:f5: be:47:91:aa:11:7d:88:eb:be:07:0b:f2:54:8b:3b: fc:9e:a2:7e:bf:47:30:78:f5:50:67:1e:fd:e6:fc: b3:c7:80:eb:91:3c:9c:85:7e:b1:e9:0c:3b:4d:cf: fc:3a:74:75:7c:67:34:10:1d:98:e3:9e:56:11:3d: 80:45:13:af:2a:a9:05:05:8c:eb:73:75:e4:88:df: a9:82:69:41:7c:2d:f5:41:34:d7:4a:e1:e6:8f:7a: 65:fa:c1:51:11:10:03:50:cc:6a:f0:8d:6d:28:af: f8:09:b9:a5:1a:8d:fa:af:db:ef:9b:8c:41:e8:01: 75:14:51:dd:35:48:35:cf:28:02:2e:24:5a:5c:ea: 83:93:18:75:51:b6:6d:43:6a:30:e0:99:c3:83:80: e8:f1:34:b1:6d:f3:67:28:d5:04:7a:27:b7:ec:2e: a0:25:d9:e9:e4:ee:f3:d0:03:3b:de:c5:bb:8c:77: 30:76:47:09:71:9f:29:ec:a7:72:37:9f:ed:ed:cf: 44:23:e9:df:25:1d:be:61:c0:25:01:1e:6c:7a:dc: 59:be:33:5e:89:62:96:03:b8:63:cb:21:46:d3:67: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D8:21:5C:30:ED:D5:B6:C4:C8:5E:C5:6B:35:B7:9A:4B:59:68:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/74c93893-0143-3428-b8d0-0322cad8005f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c9:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:86:7f:9b:10:fb:2d:85:25:08:7f:3b:2b:bf:32:f5:65:65: 12:e5:87:fe:94:a2:8c:40:ac:b6:0c:04:7c:54:e4:50:ba:2d: 69:fb:dd:b7:09:5e:ae:d8:1e:3c:48:e5:da:ec:9d:51:0f:b5: a7:06:0d:e6:25:93:33:ef:07:da:5c:32:9b:ac:6c:96:a1:e7: 47:cf:72:0f:31:0b:65:cc:68:ab:b3:3f:68:ae:ea:1b:fd:cf: b5:22:26:ef:45:b6:5b:6e:b2:87:4a:c5:6a:a4:7c:9f:74:13: 7e:49:c1:b3:b8:24:01:44:1c:fc:46:cb:6f:69:93:3c:b4:aa: 90:26:4c:fa:e1:e7:68:d3:df:da:58:ea:84:7a:f4:99:e6:b3: b9:3b:ca:64:0f:71:e7:01:8a:12:b4:87:79:1f:5e:ec:f2:4f: 90:6c:b9:7f:86:b4:d6:5b:98:5c:9c:25:de:57:9b:4e:4c:fa: 16:5f:8a:96:c9:8d:69:20:ee:20:97:67:9d:21:d1:8a:5b:5f: 39:37:03:68:5c:a9:06:68:93:5e:11:66:f3:0f:19:ce:7c:53: 03:93:55:a8:33:5c:c3:06:89:ec:fc:06:78:ef:cf:db:04:b1: 63:02:63:78:ee:56:72:af:14:26:38:d2:bd:f9:d7:04:31:fc: 20:02:13:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUmpazwuhEe7enMBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI0MDMwOTE0MDAzMVoXDTI0MDYwNzEzMDAzMVowLzEtMCsGA1UEAxMk OGMzNTNhNDgtNzljYS00MWJkLWIwYjItZTJlNmY5NmVhMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyT3sX0j+FKNRpcJiozOc0X3QUP6aKeau1kb h/W+R5GqEX2I674HC/JUizv8nqJ+v0cwePVQZx795vyzx4DrkTychX6x6Qw7Tc/8 OnR1fGc0EB2Y455WET2ARROvKqkFBYzrc3XkiN+pgmlBfC31QTTXSuHmj3pl+sFR ERADUMxq8I1tKK/4CbmlGo36r9vvm4xB6AF1FFHdNUg1zygCLiRaXOqDkxh1UbZt Q2ow4JnDg4Do8TSxbfNnKNUEeie37C6gJdnp5O7z0AM73sW7jHcwdkcJcZ8p7Kdy N5/t7c9EI+nfJR2+YcAlAR5setxZvjNeiWKWA7hjyyFG02f2EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIHYIVww7dW2xMhexWs1t5pLWWgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvNzRjOTM4OTMtMDE0My0z NDI4LWI4ZDAtMDMyMmNhZDgwMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCGf5sQ+y2FJQh/Oyu/MvVlZRLlh/6UooxArLYMBHxU5FC6LWn7 3bcJXq7YHjxI5drsnVEPtacGDeYlkzPvB9pcMpusbJah50fPcg8xC2XMaKuzP2iu 6hv9z7UiJu9FtltusodKxWqkfJ90E35JwbO4JAFEHPxGy29pkzy0qpAmTPrh52jT 39pY6oR69Jnms7k7ymQPcecBihK0h3kfXuzyT5BsuX+GtNZbmFycJd5Xm05M+hZf ipbJjWkg7iCXZ50h0YpbXzk3A2hcqQZok14RZvMPGc58UwOTVagzXMMGiez8Bnjv z9sEsWMCY3juVnKvFCY40r351wQx/CACE/g= -----END CERTIFICATE-----Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org