$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bab5bfcd-854c-3b80-9833-27403f97b597.roa File: bab5bfcd-854c-3b80-9833-27403f97b597.roa (raw, json) Hash identifier: Iy+qRVAAYZo84CthE2Qy4vqHZnVWG8viAtSyb95sv4g= Subject key identifier: C1:D5:C7:BC:D4:6C:CF:77:88:89:35:B0:C7:5E:BC:50:E8:65:89:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FAB3314A4CA4A831A9F2E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bab5bfcd-854c-3b80-9833-27403f97b597.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 22909 IP address blocks: 2603:3018:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:33:14:a4:ca:4a:83:1a:9f:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=aacc58c6-dff0-4d3c-8e6e-b4ec3ca33047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:9a:bb:f4:43:a5:ce:b5:5b:c6:44:5d:12: 24:2d:7e:ca:54:99:79:83:b4:a8:38:cd:2f:7c:f0: d9:34:ef:80:46:fb:4b:4d:e8:82:49:86:be:55:1f: d5:d9:72:e4:09:d1:18:a2:53:85:cf:4a:c7:05:b4: 02:56:ad:5c:75:0c:de:24:6e:07:a8:50:05:ba:f3: 00:d5:8e:1e:4d:d8:d3:83:d5:d8:01:f7:6c:16:2f: 7e:94:79:db:38:9a:d4:91:de:c7:9d:d8:b2:82:f4: d9:41:e7:ce:5f:f0:a0:da:50:96:c8:e9:cf:77:62: cd:88:4c:ad:60:45:2c:c9:4b:a4:12:cf:3e:68:49: 8b:83:82:95:2b:22:65:50:0b:5d:07:b9:8a:96:ce: 74:dd:70:67:ee:86:bf:5e:61:0a:7e:67:d5:5a:73: 20:f7:dd:f5:11:bc:9e:77:b9:98:24:c9:ba:b2:35: 7a:a7:a4:2d:eb:c8:99:9f:ca:8a:01:03:13:05:9d: 45:2e:ab:08:5a:6e:8e:2a:aa:0a:36:22:66:03:8a: c9:99:7c:08:3c:ed:0f:10:ee:2a:19:28:7d:53:c4: fb:4c:c1:56:16:59:40:67:33:ec:10:9f:17:29:1a: 74:b2:a7:75:20:eb:b8:7e:2d:53:d4:60:31:e5:e5: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D5:C7:BC:D4:6C:CF:77:88:89:35:B0:C7:5E:BC:50:E8:65:89:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bab5bfcd-854c-3b80-9833-27403f97b597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3018:700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:50:4c:f6:cc:34:ec:d5:4a:a7:21:24:ce:9b:bf:e1:50:b7: 6e:b8:6f:44:fd:91:17:fa:f7:aa:9d:df:a9:86:9f:12:55:dd: 0c:a9:72:68:44:cc:38:0b:91:94:34:d8:4d:db:b7:75:84:be: f2:7b:bf:16:ef:18:a7:79:f1:08:04:53:89:c7:b8:96:29:84: f3:e8:ac:fa:8b:4b:f3:7e:4d:d4:01:23:63:f1:eb:e7:6a:1c: 0a:b5:f2:6d:dc:52:e6:4f:97:8c:3a:63:e2:cd:4b:4e:25:84: 9c:56:25:02:4f:60:85:c9:c4:bc:2b:67:8c:21:18:17:dd:18: 22:cd:06:b0:c3:06:24:ac:ea:c5:78:fd:bc:d8:71:97:da:61: d5:a0:c7:ca:54:79:5c:3b:92:20:ab:27:9f:77:7d:92:95:27: af:00:3c:06:b2:cd:08:4b:6f:f8:fb:aa:09:ae:a7:54:87:e7: c3:ee:0f:3e:73:98:17:64:ce:43:84:6b:c2:43:c3:6d:b2:60: 40:89:48:04:36:73:92:71:a9:d8:04:3b:68:53:66:d1:e7:2b: 88:11:4c:9a:4a:8d:e8:0c:52:d3:ce:06:01:3d:41:55:8c:b1: 92:57:44:57:78:a4:fb:ae:8d:e3:03:59:ed:0f:ce:1b:d5:34: 97:d6:e4:2e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUfqzMUpMpKgxqfLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YWFjYzU4YzYtZGZmMC00ZDNjLThlNmUtYjRlYzNjYTMzMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuWau/RDpc61W8ZEXRIkLX7KVJl5g7SoOM0v fPDZNO+ARvtLTeiCSYa+VR/V2XLkCdEYolOFz0rHBbQCVq1cdQzeJG4HqFAFuvMA 1Y4eTdjTg9XYAfdsFi9+lHnbOJrUkd7HndiygvTZQefOX/Cg2lCWyOnPd2LNiEyt YEUsyUukEs8+aEmLg4KVKyJlUAtdB7mKls503XBn7oa/XmEKfmfVWnMg9931Ebye d7mYJMm6sjV6p6Qt68iZn8qKAQMTBZ1FLqsIWm6OKqoKNiJmA4rJmXwIPO0PEO4q GSh9U8T7TMFWFllAZzPsEJ8XKRp0sqd1IOu4fi1T1GAx5eW+jQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMHVx7zUbM93iIk1sMdevFDoZYkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFiNWJmY2QtODU0Yy0z YjgwLTk4MzMtMjc0MDNmOTdiNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGAcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAS1BM9sw07NVKpyEkzpu/4VC3brhvRP2RF/r3qp3fqYafElXdDKly aETMOAuRlDTYTdu3dYS+8nu/Fu8Yp3nxCARTice4limE8+is+otL835N1AEjY/Hr 52ocCrXybdxS5k+XjDpj4s1LTiWEnFYlAk9ghcnEvCtnjCEYF90YIs0GsMMGJKzq xXj9vNhxl9ph1aDHylR5XDuSIKsnn3d9kpUnrwA8BrLNCEtv+PuqCa6nVIfnw+4P PnOYF2TOQ4RrwkPDbbJgQIlIBDZzknGp2AQ7aFNm0ecriBFMmkqN6AxS084GAT1B VYyxkldEV3ik+66N4wNZ7Q/OG9U0l9bkLg== -----END CERTIFICATE-----Generated at Sat May 4 14:56:49 2024 by rpki-client on console-ams.rpki-client.org