$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa File: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (raw, json) Hash identifier: k923zzW8Tvx2YcZ6q+6spPsEXYyp9hwzsRFf4QIsZv4= Subject key identifier: A2:A3:3C:C9:A4:3D:FB:05:A6:CB:93:13:E8:D5:96:E3:EF:0F:06:DC Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F43285845CE090E460B6C3126C6E42F80 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa Signing time: Wed 08 May 2024 13:00:34 +0000 ROA not before: Wed 08 May 2024 13:00:34 +0000 ROA not after: Tue 06 Aug 2024 13:00:34 +0000 asID: 19782 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ce:09:0e:46:0b:6c:31:26:c6:e4:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: May 8 13:00:34 2024 GMT Not After : Aug 6 13:00:34 2024 GMT Subject: CN=972cbe13-67a7-4e4d-a03d-95df2956642f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:55:7d:60:c3:f2:70:1d:87:69:9b:5c:bd: f6:05:5e:0c:3f:7d:98:d8:82:73:f9:6a:ff:08:70: 0a:c1:cc:42:c5:42:5a:65:0e:5b:5a:4f:0e:1d:9d: bd:ae:46:08:b6:65:82:f3:f2:5b:5f:20:49:de:e6: 71:43:4d:5a:0d:74:e6:cc:7d:c1:1d:96:d2:8e:48: 4d:72:37:7a:91:05:80:36:88:66:20:82:29:ca:22: f2:8b:00:9b:05:ba:69:ea:79:39:aa:37:97:4e:8d: 3f:d9:b4:c2:5c:43:15:78:64:34:8e:a7:3a:a4:0f: 8f:33:87:e2:79:83:84:ae:0a:8f:d7:bb:67:75:05: b1:21:af:1e:02:63:33:e3:20:a6:ca:6a:ab:54:39: 3d:72:6f:da:93:f9:9c:91:bb:09:c7:c1:33:4a:c3: 0a:a9:11:53:79:eb:4b:8d:f5:56:49:e7:93:6c:86: 2c:13:5a:1e:85:eb:f5:fd:0d:7e:fa:45:21:33:d1: 48:ce:11:de:ac:7a:6b:8d:97:20:4b:d2:aa:9a:31: 13:13:fc:86:94:b5:23:46:0f:8a:11:0d:0f:e0:00: 79:e7:96:70:23:8e:68:5b:cf:de:53:16:88:99:c9: e6:8c:40:8a:7d:c8:18:a9:0c:e9:21:83:42:e3:1e: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A3:3C:C9:A4:3D:FB:05:A6:CB:93:13:E8:D5:96:E3:EF:0F:06:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:10:f3:f0:ff:52:d6:4c:23:b5:48:3d:a6:ba:b3:d1:c4:f8: f3:5e:b0:f0:62:35:3a:28:c3:ce:aa:01:ea:27:36:e8:fb:4b: d1:a4:5f:d2:3e:bf:58:aa:ae:50:13:30:5d:75:b7:a6:df:a0: 24:34:b2:c1:f2:47:2a:9b:26:1e:52:c9:e5:7f:7c:24:d8:53: f7:58:d8:0b:70:b1:36:8a:30:dc:b3:e5:1b:c0:1b:5c:6d:2f: 6c:1c:10:e8:e5:bc:e9:3a:ba:dd:e9:3c:a3:ad:91:fb:46:5c: 76:fe:34:a6:ad:6e:00:0a:e4:bf:d0:50:6d:7b:1a:27:77:97: 1b:7d:b9:6d:61:fb:db:b2:42:1f:27:32:ca:d7:31:8b:e5:f0: 0a:cd:79:0e:5f:36:94:f6:f4:4e:3b:79:b3:6b:df:b1:49:6d: 33:1b:57:0c:bc:cc:4a:54:1c:49:fb:72:4b:d3:87:26:48:6f: f3:1a:78:d1:a4:cb:cb:87:38:c4:7c:07:7b:43:1e:bb:59:81: c1:bd:1b:b5:bb:af:56:f2:a4:d6:e3:90:32:88:56:2b:25:ac: 6d:71:46:f0:c5:73:1e:2a:8c:35:e3:d1:d4:b4:26:eb:c6:00: 3e:f2:3f:9a:b8:03:5d:09:15:06:aa:a9:a2:b2:50:5e:f7:7b: 2e:6f:aa:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXOCQ5GC2wxJsbkL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk OTcyY2JlMTMtNjdhNy00ZTRkLWEwM2QtOTVkZjI5NTY2NDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBFVfWDD8nAdh2mbXL32BV4MP32Y2IJz+Wr/ CHAKwcxCxUJaZQ5bWk8OHZ29rkYItmWC8/JbXyBJ3uZxQ01aDXTmzH3BHZbSjkhN cjd6kQWANohmIIIpyiLyiwCbBbpp6nk5qjeXTo0/2bTCXEMVeGQ0jqc6pA+PM4fi eYOErgqP17tndQWxIa8eAmMz4yCmymqrVDk9cm/ak/mckbsJx8EzSsMKqRFTeetL jfVWSeeTbIYsE1oehev1/Q1++kUhM9FIzhHerHprjZcgS9KqmjETE/yGlLUjRg+K EQ0P4AB555ZwI45oW8/eUxaImcnmjECKfcgYqQzpIYNC4x6B7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKKjPMmkPfsFpsuTE+jVluPvDwbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvMGQzNmI5MGMtM2VlNS0z YjRkLThhODgtNGE1OGI3MDY4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2EPPw/1LWTCO1SD2murPRxPjzXrDwYjU6KMPOqgHqJzbo+0vRpF/S Pr9Yqq5QEzBddbem36AkNLLB8kcqmyYeUsnlf3wk2FP3WNgLcLE2ijDcs+UbwBtc bS9sHBDo5bzpOrrd6TyjrZH7Rlx2/jSmrW4ACuS/0FBtexond5cbfbltYfvbskIf JzLK1zGL5fAKzXkOXzaU9vROO3mza9+xSW0zG1cMvMxKVBxJ+3JL04cmSG/zGnjR pMvLhzjEfAd7Qx67WYHBvRu1u69W8qTW45AyiFYrJaxtcUbwxXMeKow149HUtCbr xgA+8j+auANdCRUGqqmislBe93sub6oX -----END CERTIFICATE-----Generated at Wed May 15 15:09:03 2024 by rpki-client on console-fra.rpki-client.org