$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa File: d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa (raw, json) Hash identifier: Wf9CtiEEgoDeX9TnlIrXFgVCUTMUB3Zy4XORCsYWPcI= Subject key identifier: 05:08:0B:AC:FC:82:9B:50:48:36:91:F1:E5:6B:A8:C4:5F:16:13:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858452146B5DD3FB53B152F98CE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa Signing time: Thu 07 Mar 2024 15:50:13 +0000 ROA not before: Thu 07 Mar 2024 15:50:13 +0000 ROA not after: Wed 05 Jun 2024 14:50:13 +0000 asID: 20940 IP address blocks: 2600:141c:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:21:46:b5:dd:3f:b5:3b:15:2f:98:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 7 15:50:13 2024 GMT Not After : Jun 5 14:50:13 2024 GMT Subject: CN=b21520dc-6819-4318-ac53-e2d8700ca84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:d4:d3:c6:5a:9a:20:f6:73:e5:1b:e4:ee: 25:00:16:ef:9a:6f:30:82:0b:7b:6c:7b:2f:fa:e8: 51:3a:42:e1:8a:65:4a:c3:b9:96:cf:33:11:4a:92: 4b:68:27:13:05:46:cf:95:53:80:0d:6c:e0:4e:be: f4:6c:6b:1b:e1:e1:8c:4d:81:f0:58:85:01:d1:55: 34:c7:15:8b:bf:20:c1:ee:45:19:23:50:11:25:29: 35:7e:1e:da:a1:d8:b0:e4:0f:8a:83:5f:f8:6f:f0: a6:e5:96:f7:d5:a2:59:39:23:6d:39:93:31:c7:f6: 4e:ee:79:06:46:9c:8c:3e:fb:5f:45:e1:d3:35:1e: b5:92:89:5e:45:69:9c:56:a1:8e:c5:11:3d:39:81: 19:da:47:6e:be:8e:a8:50:a8:7d:06:b7:18:a3:7f: 5e:36:67:8d:b3:46:5c:0e:32:d8:d2:f3:db:68:d7: 0a:7b:9c:0a:76:67:b7:8d:c3:27:ed:b2:72:1a:29: d4:44:06:ec:77:6d:ef:01:6b:bf:6a:26:a3:b0:96: 56:a5:67:75:65:22:d2:14:8f:80:57:68:8e:b9:0b: f1:69:d0:77:ed:84:f7:60:aa:a7:d1:f2:02:21:43: af:d7:84:d4:96:11:7c:bc:3e:e1:64:98:58:48:4c: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:08:0B:AC:FC:82:9B:50:48:36:91:F1:E5:6B:A8:C4:5F:16:13:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:2800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:42:b0:09:ab:30:e2:0b:30:47:31:3f:f3:56:32:4b:71:9f: 25:b2:ad:70:e7:a8:b3:b4:d7:7a:2f:89:0d:2a:dc:09:82:84: 02:a9:e1:25:d7:12:e4:9e:34:21:37:9a:35:96:7d:4f:0e:7f: 37:df:af:08:54:7c:6d:6c:09:b4:ef:b3:bf:47:4d:9c:48:a7: ce:1a:87:21:06:d8:d6:5e:86:73:68:cb:e3:44:78:33:2d:e7: db:4b:48:46:34:5d:cf:bb:e0:50:aa:ce:a7:1d:ad:b1:a6:2d: 58:4d:63:b9:4a:30:d3:31:1d:23:15:b2:a4:e1:91:d6:ce:65: 4f:f1:3a:e1:a2:c3:e8:b3:84:d2:59:52:94:f7:4c:af:02:d0: a6:98:7b:33:36:6d:59:69:fc:bc:8f:14:b0:2c:b8:d5:db:b1: 3f:85:9e:17:2f:48:f0:67:bd:9c:1c:32:8b:73:49:ca:13:c8: 9d:b5:28:39:5f:cd:41:a8:94:09:8c:7b:43:f5:e9:38:45:5a: 6d:b1:30:ae:c5:5b:3a:14:b1:20:87:32:a8:b9:17:2d:16:59: b3:80:c0:72:fe:5f:8d:85:34:59:5c:cb:5c:72:60:69:10:3d: 90:75:9a:d2:f2:c1:a2:53:b6:f9:f9:48:f1:5e:a6:af:43:cf: 63:07:f6:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUhRrXdP7U7FS+YzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMwNzE1NTAxM1oXDTI0MDYwNTE0NTAxM1owLzEtMCsGA1UEAxMk YjIxNTIwZGMtNjgxOS00MzE4LWFjNTMtZTJkODcwMGNhODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm93U08ZamiD2c+Ub5O4lABbvmm8wggt7bHsv +uhROkLhimVKw7mWzzMRSpJLaCcTBUbPlVOADWzgTr70bGsb4eGMTYHwWIUB0VU0 xxWLvyDB7kUZI1ARJSk1fh7aodiw5A+Kg1/4b/Cm5Zb31aJZOSNtOZMxx/ZO7nkG RpyMPvtfReHTNR61koleRWmcVqGOxRE9OYEZ2kduvo6oUKh9BrcYo39eNmeNs0Zc DjLY0vPbaNcKe5wKdme3jcMn7bJyGinURAbsd23vAWu/aiajsJZWpWd1ZSLSFI+A V2iOuQvxadB37YT3YKqn0fICIUOv14TUlhF8vD7hZJhYSEyL/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAUIC6z8gptQSDaR8eVrqMRfFhNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg2NDNkODUtNWYyNy0z ZjMzLWFmOWEtZmRmZDQyYmE4NGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHCgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpCsAmrMOILMEcxP/NWMktxnyWyrXDnqLO013oviQ0q3AmChAKp 4SXXEuSeNCE3mjWWfU8OfzffrwhUfG1sCbTvs79HTZxIp84ahyEG2NZehnNoy+NE eDMt59tLSEY0Xc+74FCqzqcdrbGmLVhNY7lKMNMxHSMVsqThkdbOZU/xOuGiw+iz hNJZUpT3TK8C0KaYezM2bVlp/LyPFLAsuNXbsT+FnhcvSPBnvZwcMotzScoTyJ21 KDlfzUGolAmMe0P16ThFWm2xMK7FWzoUsSCHMqi5Fy0WWbOAwHL+X42FNFlcy1xy YGkQPZB1mtLywaJTtvn5SPFepq9Dz2MH9sU= -----END CERTIFICATE-----Generated at Fri May 17 20:05:38 2024 by rpki-client on console-ams.rpki-client.org