$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e97e17-a28e-35fe-9c52-ec00d964f260.roa File: 16e97e17-a28e-35fe-9c52-ec00d964f260.roa (raw, json) Hash identifier: AK2N0RF4tEBQE0mwu5HD4C4yX2xAWLG3/sbeB5OB8LU= Subject key identifier: E2:21:D3:ED:44:6B:6C:C2:DB:87:9A:7B:E0:4F:31:AD:9C:1C:3F:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858457D1320B9C08507DD942DCF30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e97e17-a28e-35fe-9c52-ec00d964f260.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 35994 IP address blocks: 2001:4878:1e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:20:b9:c0:85:07:dd:94:2d:cf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=58435d66-868b-4801-a932-5e9606b18eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:c2:5e:b0:b0:e4:06:5a:db:7b:db:40:7a: 7d:18:09:1c:4a:e3:49:25:5c:9c:f4:dd:49:a7:9a: 85:5d:5c:84:48:ef:03:9f:90:12:f1:fc:54:69:4d: 98:40:88:ec:83:85:ee:b9:ab:04:ef:a0:db:03:d7: 65:25:35:dc:40:7c:05:1c:f2:18:28:48:23:76:86: 1e:8d:a0:97:bb:c2:6f:aa:59:f9:39:fc:c2:a3:44: 7f:8f:7c:c1:57:8b:94:96:86:85:bc:e2:b9:cc:52: bc:68:0f:8b:a7:b9:98:20:ff:1a:34:f4:12:10:86: c9:37:07:ab:23:ea:43:98:19:50:74:ff:48:9f:51: d8:32:4a:d8:14:91:01:11:eb:cf:80:7a:1d:30:4f: f0:d4:71:1f:41:61:78:a3:36:7b:26:ef:f9:3e:9d: 2e:df:9c:26:78:cb:56:a5:0e:ff:45:cf:4d:20:3f: 9a:61:e0:a1:c7:6a:97:b4:76:74:f0:9c:cf:8e:4d: 77:c3:19:dc:44:83:c3:45:e9:ac:b7:2a:94:70:b2: 70:70:3a:a8:cd:2a:62:12:dd:2d:37:5c:d0:f2:08: db:25:67:59:68:bd:cd:c4:ad:42:73:b5:f7:dd:e4: a8:d7:72:a9:69:63:8d:c3:c5:62:ba:78:65:bc:85: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:D3:ED:44:6B:6C:C2:DB:87:9A:7B:E0:4F:31:AD:9C:1C:3F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e97e17-a28e-35fe-9c52-ec00d964f260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:1e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5c:89:9d:5d:13:2c:9f:66:3f:19:ef:68:57:5d:2a:ea:6d: e0:ca:24:38:73:f6:9d:bb:c3:79:d5:54:c0:2a:c6:4a:63:88: 48:93:18:74:25:27:54:0e:c7:4a:ea:be:94:35:ac:43:c0:c6: 3a:6f:ec:d4:5f:f3:99:60:bc:df:d4:f5:6b:b3:83:0f:1a:48: 80:56:21:5a:8a:99:f6:9a:9b:1e:c6:2c:07:fc:c6:34:2a:61: 2b:5b:1f:4d:15:88:98:fe:e1:0b:c1:91:4c:09:59:7f:9f:46: b8:87:db:c6:3d:ac:9f:11:d4:cd:e4:0d:d4:ce:62:cb:3e:89: 3d:d3:3e:e0:ca:d5:bb:72:35:19:46:23:16:05:fc:aa:1d:4e: 27:94:d4:5f:e1:c3:4e:ff:e1:5f:26:55:a9:68:98:2d:f7:8e: 45:a2:21:57:20:09:e4:7e:35:27:82:cf:78:f3:b0:f2:f9:4c: 8a:66:65:ca:1e:ed:11:4a:48:95:8e:02:28:e2:83:66:34:fb: 63:4c:d1:5e:74:43:3b:6c:9f:d8:3e:38:57:e5:c6:6b:f5:9c: 34:1f:c2:a7:84:a9:68:c0:3c:79:fd:87:dd:20:f1:89:81:cb: f7:5e:8c:b6:12:c9:2e:e5:41:a6:7d:d7:7c:c2:2f:b3:00:63: 0f:f9:d5:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV9EyC5wIUH3ZQtzzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk NTg0MzVkNjYtODY4Yi00ODAxLWE5MzItNWU5NjA2YjE4ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNPCXrCw5AZa23vbQHp9GAkcSuNJJVyc9N1J p5qFXVyESO8Dn5AS8fxUaU2YQIjsg4XuuasE76DbA9dlJTXcQHwFHPIYKEgjdoYe jaCXu8Jvqln5OfzCo0R/j3zBV4uUloaFvOK5zFK8aA+Lp7mYIP8aNPQSEIbJNwer I+pDmBlQdP9In1HYMkrYFJEBEevPgHodME/w1HEfQWF4ozZ7Ju/5Pp0u35wmeMtW pQ7/Rc9NID+aYeChx2qXtHZ08JzPjk13wxncRIPDRemstyqUcLJwcDqozSpiEt0t N1zQ8gjbJWdZaL3NxK1Cc7X33eSo13KpaWONw8ViunhlvIXJXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOIh0+1Ea2zC24eae+BPMa2cHD+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZlOTdlMTctYTI4ZS0z NWZlLTljNTItZWMwMGQ5NjRmMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIeAHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAVciZ1dEyyfZj8Z72hXXSrqbeDKJDhz9p27w3nVVMAqxkpjiEiT GHQlJ1QOx0rqvpQ1rEPAxjpv7NRf85lgvN/U9Wuzgw8aSIBWIVqKmfaamx7GLAf8 xjQqYStbH00ViJj+4QvBkUwJWX+fRriH28Y9rJ8R1M3kDdTOYss+iT3TPuDK1bty NRlGIxYF/KodTieU1F/hw07/4V8mValomC33jkWiIVcgCeR+NSeCz3jzsPL5TIpm Zcoe7RFKSJWOAijig2Y0+2NM0V50Qztsn9g+OFflxmv1nDQfwqeEqWjAPHn9h90g 8YmBy/dejLYSyS7lQaZ913zCL7MAYw/51UM= -----END CERTIFICATE-----Generated at Fri May 17 22:03:00 2024 by rpki-client on console-ams.rpki-client.org