$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/18223b1e-48fd-39b5-b848-2ef584eef428.roa File: 18223b1e-48fd-39b5-b848-2ef584eef428.roa (raw, json) Hash identifier: sdmRgOZQCSNKyLzlB68ALMs3sqqQSjz3ME9CR3UqUr4= Subject key identifier: 76:8D:8A:3B:4F:0D:46:E7:96:B4:1F:A8:94:2E:26:E1:A2:11:C9:58 Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e Certificate serial: 010D0C9F4328584511B590410B4BC9A378613D00 Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/18223b1e-48fd-39b5-b848-2ef584eef428.roa Signing time: Sat 02 Mar 2024 02:00:26 +0000 ROA not before: Sat 02 Mar 2024 02:00:26 +0000 ROA not after: Fri 31 May 2024 01:00:26 +0000 asID: 19551 IP address blocks: 2620:4e:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:b5:90:41:0b:4b:c9:a3:78:61:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e Validity Not Before: Mar 2 02:00:26 2024 GMT Not After : May 31 01:00:26 2024 GMT Subject: CN=13119c25-85fa-4071-97e0-50b5a25851d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:59:58:ff:09:a8:a7:0f:6b:b8:df:05:60: ff:18:be:48:76:bd:1f:cd:e0:de:93:f1:a2:d8:e9: db:4d:c1:be:23:bf:e5:49:fa:46:00:02:33:d4:87: 28:95:0f:0a:d7:a6:2e:c3:1f:5a:ac:3a:42:c7:a1: f2:e1:7a:30:e4:0e:e1:4d:5a:cc:9d:87:34:8d:a0: a4:b8:3b:c2:f2:ab:9c:28:2e:b4:46:33:21:7c:6e: 32:91:1e:41:df:c1:4b:39:72:02:42:1e:be:9d:8b: d1:3d:85:6b:6e:e9:98:33:4b:23:ab:b3:30:29:d7: 77:e6:37:f2:5a:c9:ad:98:a5:6d:de:bb:ea:9e:74: 12:b1:b0:93:d9:63:c4:14:9e:27:5c:03:e5:9d:bb: 93:a9:c6:13:bb:69:eb:ea:22:ff:77:ea:70:16:2b: 54:c9:6b:ac:74:ac:70:d7:f1:1f:2e:e0:9a:ab:ce: 07:c5:e2:a9:a7:26:c2:bc:ec:82:5c:de:83:f4:92: c7:27:1a:36:26:da:96:ba:18:58:bb:a9:f5:84:9c: 5c:66:9b:20:6b:af:10:c3:14:d8:d0:ee:d5:b0:d1: b5:3c:42:6d:0f:df:38:da:3b:0d:63:0b:8d:13:d8: 7d:a8:76:19:bc:df:b5:df:ed:35:88:c3:2a:e6:98: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8D:8A:3B:4F:0D:46:E7:96:B4:1F:A8:94:2E:26:E1:A2:11:C9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/18223b1e-48fd-39b5-b848-2ef584eef428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl X509v3 Authority Key Identifier: keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer sbgp-ipAddrBlock: critical IPv6: 2620:4e:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:34:d8:66:ad:6f:f3:b4:da:d3:63:35:c7:ec:08:06:56:b3: be:da:de:f8:33:0b:56:19:26:cd:03:43:c5:89:6b:b5:e6:3f: 72:c2:09:4d:f3:30:0c:de:c8:63:86:da:65:bf:8a:9f:db:7b: 4c:4a:e2:e5:c2:50:e3:9a:07:f2:f8:0f:ad:00:6e:2a:5e:47: e6:ce:15:a5:85:18:0f:ba:f0:b9:7d:a9:9c:cf:62:a9:27:98: 96:20:43:f3:2c:62:e9:3e:41:60:81:99:c1:23:fb:c4:a1:1f: 07:fa:9e:39:70:fc:59:25:d9:11:54:69:c0:a2:14:18:0f:15: 37:c7:10:10:72:96:c7:76:54:ac:38:d9:d6:74:82:26:fe:bd: f5:0d:be:2a:79:5c:0d:ba:aa:9a:fc:bc:17:86:c4:d2:3a:78: af:64:20:56:83:85:ca:56:5a:ae:29:b3:2b:18:0c:54:4a:37: 0e:2a:3b:c4:e7:99:c0:50:89:6e:fd:df:d0:90:37:00:ca:d4: 18:2b:ba:7c:93:13:cb:7d:45:26:40:30:34:c4:01:e8:2a:5f: b2:a2:c5:42:9e:03:68:0e:d9:33:03:e5:6f:d4:b1:a0:1b:77: 1b:ba:93:af:be:91:c4:59:04:b9:4a:54:b5:40:1e:50:37:6b: ef:cf:47:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEURtZBBC0vJo3hhPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh MDFlMB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk MTMxMTljMjUtODVmYS00MDcxLTk3ZTAtNTBiNWEyNTg1MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcxZWP8JqKcPa7jfBWD/GL5Idr0fzeDek/Gi 2OnbTcG+I7/lSfpGAAIz1IcolQ8K16Yuwx9arDpCx6Hy4Xow5A7hTVrMnYc0jaCk uDvC8qucKC60RjMhfG4ykR5B38FLOXICQh6+nYvRPYVrbumYM0sjq7MwKdd35jfy WsmtmKVt3rvqnnQSsbCT2WPEFJ4nXAPlnbuTqcYTu2nr6iL/d+pwFitUyWusdKxw 1/EfLuCaq84HxeKppybCvOyCXN6D9JLHJxo2JtqWuhhYu6n1hJxcZpsga68QwxTY 0O7VsNG1PEJtD9842jsNYwuNE9h9qHYZvN+13+01iMMq5pjXbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHaNijtPDUbnlrQfqJQuJuGiEclYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvMTgyMjNiMWUtNDhmZC0z OWI1LWI4NDgtMmVmNTg0ZWVmNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2 YzQ3YmEwMWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD402Gatb/O02tNjNcfsCAZWs77a3vgzC1YZJs0DQ8WJa7XmP3LC CU3zMAzeyGOG2mW/ip/be0xK4uXCUOOaB/L4D60AbipeR+bOFaWFGA+68Ll9qZzP YqknmJYgQ/MsYuk+QWCBmcEj+8ShHwf6njlw/Fkl2RFUacCiFBgPFTfHEBBylsd2 VKw42dZ0gib+vfUNvip5XA26qpr8vBeGxNI6eK9kIFaDhcpWWq4psysYDFRKNw4q O8TnmcBQiW7939CQNwDK1BgrunyTE8t9RSZAMDTEAegqX7KixUKeA2gO2TMD5W/U saAbdxu6k6++kcRZBLlKVLVAHlA3a+/PR5Y= -----END CERTIFICATE-----Generated at Sat May 18 01:45:41 2024 by rpki-client on console-ams.rpki-client.org