$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa File: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (raw, json) Hash identifier: d6cLORmLgdR1RZ+LrSlATzxMqxfn+aWf2s0RjJp6zc0= Subject key identifier: A1:71:36:B7:A5:2D:68:E9:A8:72:F5:95:9E:80:CF:98:12:BA:E5:7F Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F43285845777DCBAA73FA8497162CA040 Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa Signing time: Sun 07 Apr 2024 13:00:32 +0000 ROA not before: Sun 07 Apr 2024 13:00:32 +0000 ROA not after: Sat 06 Jul 2024 13:00:32 +0000 asID: 395184 IP address blocks: 2620:0:950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:77:7d:cb:aa:73:fa:84:97:16:2c:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Apr 7 13:00:32 2024 GMT Not After : Jul 6 13:00:32 2024 GMT Subject: CN=6be12187-2c35-4d25-b120-8db0a17d9e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:ac:6d:b4:39:84:1f:f2:19:77:34:29:cc: 87:70:8b:c9:97:6b:3b:38:cb:7a:cb:15:97:7c:ed: 65:fd:7b:3a:39:c1:40:f5:0d:b5:b8:88:63:d3:08: 20:c4:57:43:51:da:65:84:b1:ef:e6:67:29:81:a6: 0c:5e:c2:e2:27:00:17:0e:9d:53:e0:be:cc:f9:f1: 87:14:ce:40:28:d9:7e:f7:fc:db:b9:37:5f:aa:ed: ae:ed:c5:d0:44:20:4a:58:5d:c6:15:4d:29:d8:e8: f1:eb:b5:4a:06:49:dc:0f:d0:ce:18:5c:cc:2e:a2: 65:c0:a1:d6:b7:17:b9:55:ab:33:81:90:c9:2e:54: 27:9e:88:8d:bd:51:3b:7e:40:a6:63:04:1b:b6:38: ed:79:0c:12:29:40:dc:70:78:c6:df:e0:35:cc:7b: 17:d0:7f:7f:1a:9b:c7:46:97:a9:2f:01:5b:1f:c0: 74:6c:45:fd:6b:a1:d7:b6:14:ff:d9:e8:9f:31:92: 72:c5:25:29:02:7d:09:91:6f:88:15:5d:eb:fb:d7: 02:7f:bc:a0:b1:ff:7f:c2:33:65:74:3a:be:60:bc: c2:fe:7b:6d:e1:1d:81:32:e1:8e:b4:32:07:56:49: 62:86:a6:11:54:0f:75:e4:0d:d0:d4:ae:4f:39:7d: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:36:B7:A5:2D:68:E9:A8:72:F5:95:9E:80:CF:98:12:BA:E5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/aaf7d372-4189-3790-9dca-61a125a2f0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:950::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:41:20:98:57:9a:1b:df:48:41:29:4b:4d:b2:15:ea:ff:30: 75:f0:ea:88:88:e2:a5:2d:c6:49:86:72:58:6a:e9:eb:59:0f: 51:54:1c:14:6f:b6:27:79:32:be:c0:25:7e:d1:b0:75:a1:fd: bf:bd:b1:6e:07:b9:7f:af:23:8a:b0:4f:e7:be:57:ae:25:2a: 01:e5:fc:d0:f0:3d:93:25:8c:d8:43:54:0e:4b:f1:78:fe:0c: 8b:4f:db:6f:8d:66:5b:33:95:bd:f5:c9:a4:81:82:ee:c0:70: 6c:81:ae:07:95:43:64:2f:ae:18:99:b2:92:7e:57:ab:ae:b0: 7a:c7:d9:fc:cb:91:ff:32:d4:cf:3a:96:84:da:e9:c8:98:52: 02:e1:3a:18:24:7a:e5:a4:01:9b:c3:42:93:2d:c5:8c:6c:54: ca:c1:33:f6:49:53:d5:c5:3c:ed:62:e1:ba:2b:e1:8d:b7:8b: 97:a7:2d:bb:b7:a7:e8:01:56:f4:72:e7:08:31:f8:8b:7c:62: 91:16:b1:cf:c6:d7:4e:3c:ed:e5:36:35:b1:91:63:e3:d3:4c: 8b:09:63:87:1a:ce:10:49:f1:84:0d:9a:be:94:42:10:bd:04: a4:1e:ab:de:42:90:f4:2d:88:91:24:f1:94:4a:40:db:04:be: 77:b7:a2:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV3fcuqc/qElxYsoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk NmJlMTIxODctMmMzNS00ZDI1LWIxMjAtOGRiMGExN2Q5ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ+sbbQ5hB/yGXc0KcyHcIvJl2s7OMt6yxWX fO1l/Xs6OcFA9Q21uIhj0wggxFdDUdplhLHv5mcpgaYMXsLiJwAXDp1T4L7M+fGH FM5AKNl+9/zbuTdfqu2u7cXQRCBKWF3GFU0p2Ojx67VKBkncD9DOGFzMLqJlwKHW txe5VaszgZDJLlQnnoiNvVE7fkCmYwQbtjjteQwSKUDccHjG3+A1zHsX0H9/GpvH RpepLwFbH8B0bEX9a6HXthT/2eifMZJyxSUpAn0JkW+IFV3r+9cCf7ygsf9/wjNl dDq+YLzC/ntt4R2BMuGOtDIHVklihqYRVA915A3Q1K5POX17cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKFxNrelLWjpqHL1lZ6Az5gSuuV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvYWFmN2QzNzItNDE4OS0z NzkwLTlkY2EtNjFhMTI1YTJmMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAlQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1BIJhXmhvfSEEpS02yFer/MHXw6oiI4qUtxkmGclhq6etZD1FU HBRvtid5Mr7AJX7RsHWh/b+9sW4HuX+vI4qwT+e+V64lKgHl/NDwPZMljNhDVA5L 8Xj+DItP22+NZlszlb31yaSBgu7AcGyBrgeVQ2QvrhiZspJ+V6uusHrH2fzLkf8y 1M86loTa6ciYUgLhOhgkeuWkAZvDQpMtxYxsVMrBM/ZJU9XFPO1i4bor4Y23i5en Lbu3p+gBVvRy5wgx+It8YpEWsc/G10487eU2NbGRY+PTTIsJY4cazhBJ8YQNmr6U QhC9BKQeq95CkPQtiJEk8ZRKQNsEvne3ops= -----END CERTIFICATE-----Generated at Sun May 5 15:30:48 2024 by rpki-client on console-ams.rpki-client.org