$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ec3c94-ff75-3d80-9301-3b433f048759.roa File: b0ec3c94-ff75-3d80-9301-3b433f048759.roa (raw, json) Hash identifier: KbBO5RTudQ4dOphYttDoaUnFzE81/w+CqPBf6jTvAc0= Subject key identifier: 85:EC:D5:7D:ED:5F:5D:78:B9:E2:B0:87:08:D2:33:C7:5A:6F:74:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB2E7F8BA23BE4E8693580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ec3c94-ff75-3d80-9301-3b433f048759.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 2601:842::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:2e:7f:8b:a2:3b:e4:e8:69:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=29e850ac-7806-4246-8db1-17a8eebea74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:56:9b:7c:a9:13:b6:06:32:2f:21:d2:37: 62:73:cb:6d:f9:c6:39:99:7a:ff:41:fb:4e:4b:d3: de:55:ce:1a:8d:bc:e1:7d:95:8c:a0:c2:31:98:c6: dc:54:fa:cf:0b:dd:6f:96:21:d2:56:5e:38:25:2f: 60:4c:c4:eb:51:6c:39:eb:d6:e2:56:10:7f:d6:b2: 14:b2:49:32:82:49:eb:bd:0b:f1:9b:4e:93:ec:54: 7c:3a:f6:da:bd:cc:81:b0:19:0c:3f:59:20:5c:95: eb:3a:fd:34:aa:05:0f:75:76:b7:aa:79:14:00:8e: d9:58:10:19:88:e2:22:bf:38:a6:ab:5b:f2:61:2e: fa:b4:33:09:50:b9:8b:81:a2:9d:d9:71:75:63:88: eb:26:8d:44:4e:5b:f5:e0:a3:87:20:8f:fd:a2:1c: da:bc:86:f5:0d:51:ab:19:06:73:43:fc:d0:1c:e7: 82:5a:0d:b8:bb:48:0f:bb:7f:32:19:cc:76:ea:11: c3:a4:3b:60:33:ae:aa:c0:56:40:d4:e7:33:4d:4a: 2f:cc:00:18:b1:f6:71:9b:15:e3:83:b4:d0:3b:ed: 4c:42:c3:d8:75:5c:eb:65:5a:ec:3e:29:a2:ac:50: e2:be:70:e1:6f:b8:16:3b:17:08:bd:07:74:56:94: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EC:D5:7D:ED:5F:5D:78:B9:E2:B0:87:08:D2:33:C7:5A:6F:74:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ec3c94-ff75-3d80-9301-3b433f048759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:842::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:bf:56:93:c5:f5:96:60:8a:1e:74:90:57:37:1e:7a:c0:8c: a4:52:21:88:2b:f1:95:a8:11:4b:00:5f:3c:5d:6a:53:33:f4: 5d:13:3d:5a:b4:ac:5b:d9:9c:59:38:30:73:ab:b5:a8:24:3e: 47:7b:5f:ba:74:ab:fa:60:47:ea:cb:87:5a:9e:67:ce:f8:db: 46:ca:a0:9a:40:67:6a:fa:24:ea:53:b2:f5:d0:2a:e5:82:db: d3:fa:f5:2d:56:a0:c0:f4:9d:75:47:23:c0:67:9c:ba:e2:2c: 27:ab:2b:22:9e:f6:0b:4d:ba:86:09:2d:0c:b7:97:7a:a8:3e: 9f:af:3d:1c:e6:7c:ba:80:ad:9f:f3:07:fe:70:41:62:5f:20: 21:66:33:37:2e:e1:a8:2d:ad:1f:79:7f:e6:a9:07:47:bd:35: 2c:09:39:9c:31:53:82:11:27:eb:6c:e1:39:1d:db:09:95:33: 92:bb:b8:da:8c:4c:a8:cc:1a:c0:b1:88:b6:9b:75:dc:c8:27: a2:d5:c9:36:50:7e:ed:e8:72:b4:57:5b:a6:44:3c:38:ae:84: 52:cb:0e:b9:ca:ed:7c:4f:97:c0:98:a8:19:61:67:e6:7e:fb: 50:d4:8e:38:10:dc:28:8e:81:a3:18:c1:fe:be:0e:9d:21:e5: 4c:7f:1b:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUfqy5/i6I75OhpNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk MjllODUwYWMtNzgwNi00MjQ2LThkYjEtMTdhOGVlYmVhNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S5Wm3ypE7YGMi8h0jdic8tt+cY5mXr/QftO S9PeVc4ajbzhfZWMoMIxmMbcVPrPC91vliHSVl44JS9gTMTrUWw569biVhB/1rIU skkygknrvQvxm06T7FR8OvbavcyBsBkMP1kgXJXrOv00qgUPdXa3qnkUAI7ZWBAZ iOIivzimq1vyYS76tDMJULmLgaKd2XF1Y4jrJo1ETlv14KOHII/9ohzavIb1DVGr GQZzQ/zQHOeCWg24u0gPu38yGcx26hHDpDtgM66qwFZA1OczTUovzAAYsfZxmxXj g7TQO+1MQsPYdVzrZVrsPimirFDivnDhb7gWOxcIvQd0VpQ5ewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIXs1X3tX114ueKwhwjSM8dab3TVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjBlYzNjOTQtZmY3NS0z ZDgwLTkzMDEtM2I0MzNmMDQ4NzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEIQgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApL9Wk8X1lmCKHnSQVzceesCMpFIhiCvxlagRSwBfPF1qUzP0XRM9 WrSsW9mcWTgwc6u1qCQ+R3tfunSr+mBH6suHWp5nzvjbRsqgmkBnavok6lOy9dAq 5YLb0/r1LVagwPSddUcjwGecuuIsJ6srIp72C026hgktDLeXeqg+n689HOZ8uoCt n/MH/nBBYl8gIWYzNy7hqC2tH3l/5qkHR701LAk5nDFTghEn62zhOR3bCZUzkru4 2oxMqMwawLGItpt13MgnotXJNlB+7ehytFdbpkQ8OK6EUssOucrtfE+XwJioGWFn 5n77UNSOOBDcKI6BoxjB/r4OnSHlTH8bfA== -----END CERTIFICATE-----Generated at Sun May 5 02:20:58 2024 by rpki-client on console-ams.rpki-client.org