$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa File: dad7d956-91ce-309d-a710-c9e480e1eb82.roa (raw, json) Hash identifier: Vf1UPWWoyNjtjFaItpCjVs56jSqcNXUoZe2rCkBgmV0= Subject key identifier: D7:D7:57:03:C0:02:3F:C7:68:1C:A4:41:2A:B6:76:47:EF:B6:37:88 Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584515E58FB7FB565488D7CD9D80 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa Signing time: Sun 03 Mar 2024 14:00:31 +0000 ROA not before: Sun 03 Mar 2024 14:00:31 +0000 ROA not after: Sat 01 Jun 2024 13:00:31 +0000 asID: 400644 IP address blocks: 2620:aa:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:15:e5:8f:b7:fb:56:54:88:d7:cd:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Mar 3 14:00:31 2024 GMT Not After : Jun 1 13:00:31 2024 GMT Subject: CN=1e304fa1-85bc-402e-81d9-af72ea5c00cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:fd:20:48:51:e4:d5:a6:16:02:54:3c:85: a7:2c:b7:32:cb:37:59:22:2e:f3:78:de:29:5b:a7: 30:05:05:e7:a4:e3:bb:6e:eb:61:c6:b5:9b:e4:86: 31:9e:30:2e:48:56:fb:c2:00:70:d9:eb:1b:87:a8: 37:14:66:8c:d5:61:cb:5d:c9:10:3a:99:c7:79:7f: 71:28:61:ff:01:c4:7a:a6:97:55:7f:96:a9:01:a4: 89:96:dc:61:a0:98:66:3d:93:87:61:5d:01:6b:36: 2c:8f:d8:1e:56:11:df:dd:22:e9:8f:fb:3f:1b:37: d0:40:3b:b7:f2:a9:df:5f:e0:1f:2d:26:99:78:b1: d9:11:b0:03:5a:cd:f2:36:04:37:19:b8:d1:e5:43: 09:c7:24:3a:7e:91:94:5b:4a:01:6c:cf:80:c4:31: 88:15:da:45:14:63:fc:39:b5:45:98:ac:61:30:6b: 61:2b:a9:f3:75:da:33:78:08:dc:d9:50:c9:e9:26: df:01:c9:18:65:4b:78:37:cd:0d:ad:63:03:e3:b7: e9:ce:ec:8f:95:55:58:27:5c:94:9a:65:8e:58:5b: 44:f6:6a:5d:a7:60:14:37:74:e0:31:6e:e0:89:75: 6f:42:56:0d:d6:0b:1f:3f:06:65:c0:98:35:46:70: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D7:57:03:C0:02:3F:C7:68:1C:A4:41:2A:B6:76:47:EF:B6:37:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv6: 2620:aa:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9a:de:43:a1:10:99:d1:6d:25:fb:58:35:e7:ce:ba:14:7e: 71:f8:0b:d8:01:24:82:cf:2e:f2:13:a9:b8:03:18:fd:e9:94: 9a:6f:8b:b9:29:f4:96:fc:5a:d5:e6:68:90:f7:9d:fe:d4:32: 87:4c:05:4b:c0:b4:56:02:e7:d3:73:6f:49:79:79:4e:3a:43: ad:62:ac:9a:d7:41:0d:af:3d:65:02:f8:01:c8:af:d2:3f:51: 4e:d4:39:96:53:ac:08:11:79:ab:97:54:13:ca:c5:28:5d:5a: c9:4c:13:60:56:14:d8:8b:59:44:31:fb:67:8a:f6:84:a9:6d: fb:d4:e4:3c:82:97:76:ee:ed:fe:df:da:b5:5b:38:f8:58:a3: 07:8d:d8:31:2a:a7:79:53:68:cc:08:1a:51:ec:af:19:4f:5b: 85:fe:f7:ec:10:2d:14:97:06:52:33:b1:81:b9:d6:90:af:ef: 4e:e2:e8:6c:f6:ae:d1:60:e1:e5:ec:67:2e:ae:c7:60:28:1c: a8:6a:46:1e:81:13:66:0a:54:c3:39:b6:2f:10:49:c7:1a:16: ab:22:57:cd:da:da:83:55:00:b0:88:26:ec:6a:c5:18:cc:c4: 96:67:d8:c3:87:d4:11:3e:1b:4c:ca:a4:7e:66:c6:36:26:e6: 02:45:1b:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUV5Y+3+1ZUiNfNnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk MWUzMDRmYTEtODViYy00MDJlLTgxZDktYWY3MmVhNWMwMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaz9IEhR5NWmFgJUPIWnLLcyyzdZIi7zeN4p W6cwBQXnpOO7buthxrWb5IYxnjAuSFb7wgBw2esbh6g3FGaM1WHLXckQOpnHeX9x KGH/AcR6ppdVf5apAaSJltxhoJhmPZOHYV0BazYsj9geVhHf3SLpj/s/GzfQQDu3 8qnfX+AfLSaZeLHZEbADWs3yNgQ3GbjR5UMJxyQ6fpGUW0oBbM+AxDGIFdpFFGP8 ObVFmKxhMGthK6nzddozeAjc2VDJ6SbfAckYZUt4N80NrWMD47fpzuyPlVVYJ1yU mmWOWFtE9mpdp2AUN3TgMW7giXVvQlYN1gsfPwZlwJg1RnAECQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNfXVwPAAj/HaBykQSq2dkfvtjeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvZGFkN2Q5NTYtOTFjZS0z MDlkLWE3MTAtYzllNDgwZTFlYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAqqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6a3kOhEJnRbSX7WDXnzroUfnH4C9gBJILPLvITqbgDGP3plJpv i7kp9Jb8WtXmaJD3nf7UModMBUvAtFYC59Nzb0l5eU46Q61irJrXQQ2vPWUC+AHI r9I/UU7UOZZTrAgReauXVBPKxShdWslME2BWFNiLWUQx+2eK9oSpbfvU5DyCl3bu 7f7f2rVbOPhYoweN2DEqp3lTaMwIGlHsrxlPW4X+9+wQLRSXBlIzsYG51pCv707i 6Gz2rtFg4eXsZy6ux2AoHKhqRh6BE2YKVMM5ti8QSccaFqsiV83a2oNVALCIJuxq xRjMxJZn2MOH1BE+G0zKpH5mxjYm5gJFG7A= -----END CERTIFICATE-----Generated at Wed May 15 16:06:07 2024 by rpki-client on console-ams.rpki-client.org