$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa File: 30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json) Hash identifier: +1YMqpg5A0CJFd0BRyAmbM/QsLQu2xuEw1etEauzOwM= Subject key identifier: 05:80:EA:E4:6F:CA:E1:C6:EA:4F:D0:0C:C8:9B:A2:F9:C5:2A:C1:2B Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F432858452540471A6C544B89D244A380 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa Signing time: Sat 09 Mar 2024 02:00:25 +0000 ROA not before: Sat 09 Mar 2024 02:00:25 +0000 ROA not after: Fri 07 Jun 2024 01:00:25 +0000 asID: 33501 IP address blocks: 2607:19c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:25:40:47:1a:6c:54:4b:89:d2:44:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Mar 9 02:00:25 2024 GMT Not After : Jun 7 01:00:25 2024 GMT Subject: CN=87a2fedf-1e41-43d8-8f77-e374988a2062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:34:8e:34:c3:79:ab:51:ff:85:b1:3b:0d: 08:92:b1:36:18:99:1c:e0:b1:3a:6f:56:c2:16:7a: ac:63:ad:25:4b:ed:4d:38:7b:3c:d4:88:4f:7f:ed: 90:bf:43:62:53:7c:3d:46:83:b0:7b:5a:20:81:6f: d8:47:11:fb:3a:4e:dd:6d:06:5d:fc:20:42:86:9d: 69:3b:fd:bf:13:37:9a:1a:84:83:a9:0f:83:61:9e: 32:f6:16:19:f4:63:ff:46:83:9d:a6:4e:56:3c:8e: ab:b9:f0:8a:af:c1:31:21:51:ca:be:46:3c:23:8c: 19:13:96:2d:6f:73:50:0c:98:df:f5:2c:ee:44:06: 16:b6:0b:31:ee:45:31:a2:45:9a:a6:fa:4c:f8:7f: da:96:74:b9:80:5c:91:1d:d1:c9:8a:90:c6:1f:28: 32:f0:05:e4:81:71:f3:30:46:37:b4:9a:74:96:89: cb:33:9e:0a:8f:96:f4:6d:4c:d3:8f:26:5a:4a:8f: 9b:27:26:fc:63:1e:13:09:1e:74:2e:92:53:86:05: a4:8d:bc:33:5e:da:d6:03:c6:14:13:dd:fa:12:59: 2b:50:43:23:c6:a6:ed:2d:7b:59:40:30:30:cf:12: 37:72:7b:f1:01:e1:b0:6d:7a:eb:8a:3e:13:e5:5b: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:80:EA:E4:6F:CA:E1:C6:EA:4F:D0:0C:C8:9B:A2:F9:C5:2A:C1:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f4:08:4f:47:aa:e7:3c:5d:bd:2b:14:61:62:98:12:aa:a3: 74:a3:44:6c:4d:5e:58:f6:af:ec:0d:36:22:44:4d:16:f4:ac: 0b:cc:fc:c2:bc:c0:d2:26:66:21:81:34:a7:57:56:a4:6b:9f: 05:e4:00:9d:57:7b:0a:3a:aa:b5:da:41:b0:44:16:64:11:6d: 1d:c6:be:5b:a3:b4:b6:34:2b:34:9f:aa:3c:ef:a6:33:69:22: ba:3b:10:61:5e:29:0c:6c:8f:33:b8:e3:03:5a:28:09:ae:6b: 1f:31:ba:ac:91:6a:e8:ee:69:96:28:fc:72:90:e1:d0:dc:26: 7e:a2:23:f4:86:bf:47:cd:4a:c9:9b:3b:2f:d4:c7:d0:dd:f1: 89:91:6d:77:2e:3a:16:bd:01:d8:c2:50:a5:ab:3c:bf:ca:3c: 8c:7f:b8:56:38:b3:da:e9:b3:10:c5:69:6b:30:8e:80:30:c5: 5e:fa:cd:41:63:0e:da:3b:b7:f8:ef:81:67:c6:5e:14:73:9c: d7:22:b5:76:2e:f8:00:09:00:33:61:f1:a5:a6:96:6c:75:45: 71:0f:92:19:cc:96:a0:09:07:b7:fd:64:08:7d:00:ac:a6:63: 57:51:48:c1:57:37:88:59:c6:97:cc:a5:22:fb:2e:d6:40:40: c1:f9:46:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUlQEcabFRLidJEo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI0MDMwOTAyMDAyNVoXDTI0MDYwNzAxMDAyNVowLzEtMCsGA1UEAxMk ODdhMmZlZGYtMWU0MS00M2Q4LThmNzctZTM3NDk4OGEyMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoM0jjTDeatR/4WxOw0IkrE2GJkc4LE6b1bC FnqsY60lS+1NOHs81IhPf+2Qv0NiU3w9RoOwe1oggW/YRxH7Ok7dbQZd/CBChp1p O/2/EzeaGoSDqQ+DYZ4y9hYZ9GP/RoOdpk5WPI6rufCKr8ExIVHKvkY8I4wZE5Yt b3NQDJjf9SzuRAYWtgsx7kUxokWapvpM+H/alnS5gFyRHdHJipDGHygy8AXkgXHz MEY3tJp0lonLM54Kj5b0bUzTjyZaSo+bJyb8Yx4TCR50LpJThgWkjbwzXtrWA8YU E936ElkrUEMjxqbtLXtZQDAwzxI3cnvxAeGwbXrrij4T5VsfLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAWA6uRvyuHG6k/QDMibovnFKsErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMzBhNGEzYWYtMGQ3Yy0z MTk2LThjMmItMWZmNmU4ZmU4MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBO9AhPR6rnPF29KxRhYpgSqqN0o0RsTV5Y9q/sDTYiRE0W9KwLzPzC vMDSJmYhgTSnV1aka58F5ACdV3sKOqq12kGwRBZkEW0dxr5bo7S2NCs0n6o876Yz aSK6OxBhXikMbI8zuOMDWigJrmsfMbqskWro7mmWKPxykOHQ3CZ+oiP0hr9HzUrJ mzsv1MfQ3fGJkW13LjoWvQHYwlClqzy/yjyMf7hWOLPa6bMQxWlrMI6AMMVe+s1B Yw7aO7f474Fnxl4Uc5zXIrV2LvgACQAzYfGlppZsdUVxD5IZzJagCQe3/WQIfQCs pmNXUUjBVzeIWcaXzKUi+y7WQEDB+UZT -----END CERTIFICATE-----Generated at Wed May 15 18:21:56 2024 by rpki-client on console-ams.rpki-client.org