$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa File: d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa (raw, json) Hash identifier: /HYe/zrvG+1Fn0vbBJ9F+YldZEJwcdOb4e4KVxvQJ5Y= Subject key identifier: 8D:55:BE:3B:1F:18:5B:BB:ED:45:06:24:24:3B:B1:D4:23:A1:FC:64 Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Certificate serial: 010D0C9F432858451CE035D81A36E29417BDE0B0 Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa Signing time: Wed 06 Mar 2024 02:00:25 +0000 ROA not before: Wed 06 Mar 2024 02:00:25 +0000 ROA not after: Tue 04 Jun 2024 01:00:25 +0000 asID: 11399 IP address blocks: 2602:811:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1c:e0:35:d8:1a:36:e2:94:17:bd:e0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Validity Not Before: Mar 6 02:00:25 2024 GMT Not After : Jun 4 01:00:25 2024 GMT Subject: CN=9b44bf0b-b233-4a16-82a5-75636a9822e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bd:44:87:0c:97:47:2e:ea:5c:67:3f:72:9b: d5:15:dc:ab:ba:6f:0a:e1:9a:65:20:3f:cb:08:a9: 98:2b:d1:6e:a2:f7:ad:b8:4c:db:fa:cd:41:2a:78: c6:b9:af:15:2a:e9:02:e9:85:f1:4a:03:0e:fc:7c: 3b:71:70:eb:bb:1f:fc:21:29:43:03:a9:da:ed:d1: da:63:70:28:f7:ef:43:10:7b:5e:dd:03:2b:5c:fb: ad:97:a0:9a:88:d7:b3:65:6f:6d:99:03:67:d3:15: ae:66:61:f4:06:39:d8:9a:3c:4b:9e:a7:5c:7b:70: cc:14:c8:5f:95:23:40:21:96:48:60:e7:da:6b:d3: 18:2c:30:4c:cd:6b:b7:bf:de:14:22:c1:16:ff:1a: b3:1b:3a:92:61:de:ba:70:3c:d8:af:24:c4:d1:56: 6f:1a:02:ef:2a:fc:d9:11:3f:19:b3:cb:eb:26:b2: af:39:34:da:14:f0:54:6f:92:fa:0f:30:8f:ac:a4: de:f7:07:f0:10:a3:17:e2:1e:da:80:a7:19:4b:53: b5:6d:2d:99:95:a3:3f:18:39:7f:f3:a6:4c:44:c3: 39:ce:d9:8e:c9:fe:96:01:64:e2:f3:eb:e6:12:8d: 95:3e:11:ff:56:06:b5:73:12:95:92:d4:94:ed:c3: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:55:BE:3B:1F:18:5B:BB:ED:45:06:24:24:3B:B1:D4:23:A1:FC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl X509v3 Authority Key Identifier: keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer sbgp-ipAddrBlock: critical IPv6: 2602:811:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:39:51:24:c8:35:01:05:12:7d:86:a3:fe:23:36:dc:74:5e: 6f:ad:b4:0b:31:17:63:83:3c:ec:3b:a9:f3:22:08:e0:2d:ee: 4f:1f:71:a1:26:ba:16:98:5b:14:2f:b2:d5:ee:f7:3e:53:0c: da:38:8e:19:e0:1a:46:3e:75:cf:ba:a2:40:c2:7b:0e:cf:cd: d9:15:28:b3:54:13:89:be:83:24:56:bc:db:6d:99:e6:37:7f: d2:1c:63:64:02:5e:bf:2a:cd:43:ff:71:db:0e:50:69:7a:63: 8d:bc:b8:31:9a:57:4e:13:e3:0f:43:86:f9:f1:42:57:3b:81: c2:08:39:f8:29:70:1c:72:d9:9f:3f:b6:5f:77:46:68:a5:20: d6:c7:a4:0a:8f:8f:27:65:0a:0b:6e:3e:d9:86:ad:5d:12:e0: 20:e6:9e:3d:5a:57:10:03:1b:46:5c:2e:32:c4:9c:14:b9:60: 90:ba:b7:34:da:ea:4a:ec:33:00:10:ec:17:d8:d8:f1:92:c6: a3:0a:4c:ce:79:35:74:2e:67:a0:b0:ce:18:bd:8c:34:ee:f3: 7e:1e:ca:e8:79:c4:c3:21:30:16:d9:7f:4c:c2:91:4f:3f:1b: 1a:94:e4:c5:8d:bd:85:ff:b1:9d:0c:d8:2e:c2:91:37:02:ff: 3e:7a:ba:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUc4DXYGjbilBe94LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5 ZTNlMB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk OWI0NGJmMGItYjIzMy00YTE2LTgyYTUtNzU2MzZhOTgyMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh71EhwyXRy7qXGc/cpvVFdyrum8K4ZplID/L CKmYK9FuovetuEzb+s1BKnjGua8VKukC6YXxSgMO/Hw7cXDrux/8ISlDA6na7dHa Y3Ao9+9DEHte3QMrXPutl6CaiNezZW9tmQNn0xWuZmH0BjnYmjxLnqdce3DMFMhf lSNAIZZIYOfaa9MYLDBMzWu3v94UIsEW/xqzGzqSYd66cDzYryTE0VZvGgLvKvzZ ET8Zs8vrJrKvOTTaFPBUb5L6DzCPrKTe9wfwEKMX4h7agKcZS1O1bS2ZlaM/GDl/ 86ZMRMM5ztmOyf6WAWTi8+vmEo2VPhH/Vga1cxKVktSU7cNGqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1VvjsfGFu77UUGJCQ7sdQjofxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvZDNhN2FlYTMtYmE1Zi0z M2E3LWIwMGEtMzA2MjY5Y2M3MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1 OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl ZGQ1MjllM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIETAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHc5USTINQEFEn2Go/4jNtx0Xm+ttAsxF2ODPOw7qfMiCOAt7k8f caEmuhaYWxQvstXu9z5TDNo4jhngGkY+dc+6okDCew7PzdkVKLNUE4m+gyRWvNtt meY3f9IcY2QCXr8qzUP/cdsOUGl6Y428uDGaV04T4w9DhvnxQlc7gcIIOfgpcBxy 2Z8/tl93RmilINbHpAqPjydlCgtuPtmGrV0S4CDmnj1aVxADG0ZcLjLEnBS5YJC6 tzTa6krsMwAQ7BfY2PGSxqMKTM55NXQuZ6Cwzhi9jDTu834eyuh5xMMhMBbZf0zC kU8/GxqU5MWNvYX/sZ0M2C7CkTcC/z56ujA= -----END CERTIFICATE-----Generated at Sat May 18 15:38:29 2024 by rpki-client on console-fra.rpki-client.org