$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa File: 1c16513b-2697-3b28-b3a6-069788e76f01.roa (raw, json) Hash identifier: zcd4NiXga56ItiUj+O44tuA19tpJxtCAh8jdCYGkqQc= Subject key identifier: 48:CE:D1:41:90:2F:CB:4D:AB:B8:D3:86:C3:85:C9:27:C4:23:7C:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845857328A10567803BC2025D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa Signing time: Fri 12 Apr 2024 13:00:34 +0000 ROA not before: Fri 12 Apr 2024 13:00:34 +0000 ROA not after: Thu 11 Jul 2024 13:00:34 +0000 asID: 16509 IP address blocks: 2600:6801:11ff:2000::/52 maxlen: 64 2600:6801:11ff:1000::/52 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:85:73:28:a1:05:67:80:3b:c2:02:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 12 13:00:34 2024 GMT Not After : Jul 11 13:00:34 2024 GMT Subject: CN=1059f534-8d4f-40b0-8a7b-0b18bb7a8c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:6b:8f:cf:b4:59:1e:ca:2a:d2:fa:80:29: 63:f1:25:f0:f0:a2:cc:5f:39:fd:9c:fa:8c:19:9a: 57:ad:1d:db:e2:f5:aa:41:17:a5:41:c7:89:38:ea: f0:77:59:f4:59:8b:fd:81:4b:43:2a:66:d6:81:85: 3b:41:b9:27:09:10:9d:37:6d:c4:f9:88:29:49:28: c8:9b:a9:6e:73:9d:b5:2a:bb:2e:6c:8e:fe:92:fc: dd:82:33:c8:d4:8d:76:ec:ff:de:24:11:a1:9f:9e: 63:20:92:0c:0f:ba:6e:0c:8c:61:cc:9a:8b:c9:49: 5a:f0:4d:4e:c4:91:60:e6:c9:4a:bd:58:00:f2:b0: 95:30:b7:5b:c3:b2:93:7f:b7:c6:58:25:0d:89:8b: 52:16:6f:22:34:26:8e:e8:74:fe:07:d7:b7:1d:56: 50:f8:35:7c:90:b8:04:13:14:9a:11:eb:aa:ad:22: 64:e4:6f:3c:c6:28:88:d9:2a:1f:ba:2f:e3:9e:25: 9b:f4:3f:e1:d6:96:19:9b:96:a7:db:4d:89:98:a3: 58:a8:4e:3a:19:88:1a:a3:5b:07:ca:a9:51:db:d6: ce:06:ec:b7:22:78:4b:9e:58:ce:c0:a3:9f:3d:4f: 55:00:d5:2d:b4:16:4c:cd:c0:02:c8:78:ac:6b:6b: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CE:D1:41:90:2F:CB:4D:AB:B8:D3:86:C3:85:C9:27:C4:23:7C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv6: 2600:6801:11ff:1000::-2600:6801:11ff:2fff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4f:46:85:62:39:37:f1:30:f1:38:4e:02:84:35:0c:8d:8b: 89:67:00:6d:08:64:57:66:2a:9a:c9:29:f8:96:9b:96:47:90: 87:c5:49:e8:f0:2b:43:bb:3d:be:cf:62:59:96:4a:0e:44:40: 15:58:6e:96:9c:1f:a5:b1:9a:d3:80:5e:b2:2b:38:16:51:ce: ae:f1:55:26:59:e5:55:ad:95:87:57:f5:99:08:49:74:28:48: ce:90:9e:ba:4b:c1:52:83:23:b6:06:13:fa:89:e4:d0:30:09: 3a:42:a3:e5:dc:fb:03:63:c8:71:71:67:6e:d9:77:0f:67:24: 77:fe:3a:0a:0e:27:a1:3f:0b:40:2d:89:08:7d:af:05:c9:b9: be:22:28:96:03:62:0e:4d:1a:ba:30:c5:f6:a6:37:97:b7:78: 1e:41:b1:5a:43:fa:f5:79:41:66:68:23:86:50:fb:62:8f:84: 9c:5c:82:7d:9d:21:30:66:41:55:0e:e2:1c:77:f2:96:65:e2: 7e:dc:03:47:cb:24:63:9e:a5:09:10:ab:ef:33:75:cc:46:fa: 3f:7b:59:69:0c:66:3d:2b:34:3d:4e:b5:c5:79:c0:80:40:6c: 0c:b2:84:da:1d:e6:4b:5d:9d:8d:41:0e:12:ae:74:25:1a:8d: 59:8f:79:69 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEWFcyihBWeAO8ICXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDQxMjEzMDAzNFoXDTI0MDcxMTEzMDAzNFowLzEtMCsGA1UEAxMk MTA1OWY1MzQtOGQ0Zi00MGIwLThhN2ItMGIxOGJiN2E4YzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFdrj8+0WR7KKtL6gClj8SXw8KLMXzn9nPqM GZpXrR3b4vWqQRelQceJOOrwd1n0WYv9gUtDKmbWgYU7QbknCRCdN23E+YgpSSjI m6luc521KrsubI7+kvzdgjPI1I127P/eJBGhn55jIJIMD7puDIxhzJqLyUla8E1O xJFg5slKvVgA8rCVMLdbw7KTf7fGWCUNiYtSFm8iNCaO6HT+B9e3HVZQ+DV8kLgE ExSaEeuqrSJk5G88xiiI2Sofui/jniWb9D/h1pYZm5an202JmKNYqE46GYgao1sH yqlR29bOBuy3InhLnljOwKOfPU9VANUttBZMzcACyHisa2s9twIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEjO0UGQL8tNq7jThsOFySfEI3wCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMxNjUxM2ItMjY5Ny0z YjI4LWIzYTYtMDY5Nzg4ZTc2ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAAjAWMBQDCAQmAGgB Ef8QAwgEJgBoARH/IDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfT0aFYjk38TDxOE4ChDUMjYuJZwBtCGRX ZiqaySn4lpuWR5CHxUno8CtDuz2+z2JZlkoOREAVWG6WnB+lsZrTgF6yKzgWUc6u 8VUmWeVVrZWHV/WZCEl0KEjOkJ66S8FSgyO2BhP6ieTQMAk6QqPl3PsDY8hxcWdu 2XcPZyR3/joKDiehPwtALYkIfa8Fybm+IiiWA2IOTRq6MMX2pjeXt3geQbFaQ/r1 eUFmaCOGUPtij4ScXIJ9nSEwZkFVDuIcd/KWZeJ+3ANHyyRjnqUJEKvvM3XMRvo/ e1lpDGY9KzQ9TrXFecCAQGwMsoTaHeZLXZ2NQQ4SrnQlGo1Zj3lp -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:33 2024 by rpki-client on console-ams.rpki-client.org