$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa File: d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json) Hash identifier: koYFvGbDGmBfz2Os5AB9WL+/xElurG5Lvl9j7dtquX4= Subject key identifier: 4A:59:B5:03:E4:63:82:94:8A:42:60:48:FC:F8:A0:25:86:8A:6E:84 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584518B04152CE20702286A27580 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa Signing time: Mon 04 Mar 2024 14:00:33 +0000 ROA not before: Mon 04 Mar 2024 14:00:33 +0000 ROA not after: Sun 02 Jun 2024 13:00:33 +0000 asID: 229 IP address blocks: 2001:48a8:68f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:18:b0:41:52:ce:20:70:22:86:a2:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Mar 4 14:00:33 2024 GMT Not After : Jun 2 13:00:33 2024 GMT Subject: CN=f412edcd-a41c-4b23-b1bc-277cc12b3955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:07:1d:69:3e:f3:4f:16:0e:23:b2:8a:c7: 0b:4c:9c:21:b5:34:95:11:6c:1a:1e:08:fe:9f:1f: 3a:71:9c:ca:d2:3d:03:28:7d:7c:4d:24:62:eb:ff: c2:16:e1:51:b2:1e:e8:7e:8a:af:da:75:bd:51:7e: 7f:9d:38:d8:24:4b:5d:f3:67:1c:bb:dc:9c:e0:08: c3:54:39:ad:29:e7:e1:f0:fc:7a:2b:55:38:ce:e7: 33:f8:92:86:e8:ad:38:72:7e:09:7c:ea:ec:69:05: 4b:12:30:b7:70:f3:fd:1f:87:4c:7d:80:ea:32:26: 54:dd:e7:9e:73:01:14:bc:a1:79:37:6d:14:f6:10: dc:0f:0b:0d:a2:4f:90:d1:24:c3:c2:6b:ed:b4:c9: 36:9e:0b:ab:c6:a4:c1:bf:2b:00:25:5d:2d:1c:a9: 14:29:e0:fa:10:cb:3c:2d:a1:fc:d0:c7:c6:91:7e: 86:bc:11:8e:1b:1d:7d:3e:59:13:f7:33:7c:34:ab: 6a:ef:78:30:63:72:60:45:76:9e:23:17:29:86:5e: 62:4d:da:02:34:3e:60:6f:ad:8f:68:7f:0f:b6:bb: 53:e5:bb:c1:6b:d8:d5:ab:ff:67:94:26:7e:32:db: 4c:df:09:d0:d7:35:f4:64:93:e8:3b:1c:77:54:47: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:59:B5:03:E4:63:82:94:8A:42:60:48:FC:F8:A0:25:86:8A:6E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f2:4b:70:5a:95:a4:28:bc:b0:72:70:e5:6f:bb:66:b5:79: c3:14:ba:07:40:86:bf:77:9d:f8:11:7b:57:d6:73:61:ad:be: de:e2:cd:ee:d4:eb:5f:af:84:c7:14:ed:56:8e:f6:20:60:95: 85:d6:3e:7a:c7:41:1c:69:6f:42:0e:f7:56:29:b6:84:84:a9: c1:c1:16:ff:21:65:38:b3:5b:76:9b:e8:79:08:4f:69:03:0a: ca:8e:9e:42:5b:cd:b0:3f:dd:1f:08:b0:b5:73:bb:9e:25:b6: 61:7d:98:9f:30:d1:59:5c:3d:e4:c5:46:90:3c:89:6c:fc:b2: 4a:a4:f4:18:1a:cc:2e:42:da:1d:eb:89:4f:2f:eb:66:a8:59: f6:00:b1:39:06:bd:f9:1d:25:19:8d:46:5e:d3:57:b2:9a:78: 98:c5:f6:05:cc:dd:cb:72:99:2a:98:28:09:54:45:98:7d:a3: 43:ba:49:ca:38:61:cd:74:f0:07:3c:81:5c:c8:18:20:bc:74: 06:5f:cf:1b:4d:0b:5b:79:a2:f9:32:65:a5:3c:e3:d7:eb:36: 26:68:3e:c8:ac:69:06:3a:0e:05:20:19:c8:26:bf:dd:a7:c8: d3:71:2f:51:53:10:d1:6a:d4:2e:d1:95:53:41:ac:71:4b:22: 05:66:21:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUYsEFSziBwIoaidYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk ZjQxMmVkY2QtYTQxYy00YjIzLWIxYmMtMjc3Y2MxMmIzOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMEHHWk+808WDiOyiscLTJwhtTSVEWwaHgj+ nx86cZzK0j0DKH18TSRi6//CFuFRsh7ofoqv2nW9UX5/nTjYJEtd82ccu9yc4AjD VDmtKefh8Px6K1U4zucz+JKG6K04cn4JfOrsaQVLEjC3cPP9H4dMfYDqMiZU3eee cwEUvKF5N20U9hDcDwsNok+Q0STDwmvttMk2ngurxqTBvysAJV0tHKkUKeD6EMs8 LaH80MfGkX6GvBGOGx19PlkT9zN8NKtq73gwY3JgRXaeIxcphl5iTdoCND5gb62P aH8PtrtT5bvBa9jVq/9nlCZ+MttM3wnQ1zX0ZJPoOxx3VEeAsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEpZtQPkY4KUikJgSPz4oCWGim6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvZDc3MGRlNmMtZTc5NS0z NDU4LWIzZmEtNzY3OTdhOGZjMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvyS3BalaQovLBycOVvu2a1ecMUugdAhr93nfgRe1fWc2Gtvt7i ze7U61+vhMcU7VaO9iBglYXWPnrHQRxpb0IO91YptoSEqcHBFv8hZTizW3ab6HkI T2kDCsqOnkJbzbA/3R8IsLVzu54ltmF9mJ8w0VlcPeTFRpA8iWz8skqk9BgazC5C 2h3riU8v62aoWfYAsTkGvfkdJRmNRl7TV7KaeJjF9gXM3ctymSqYKAlURZh9o0O6 Sco4Yc108Ac8gVzIGCC8dAZfzxtNC1t5ovkyZaU849frNiZoPsisaQY6DgUgGcgm v92nyNNxL1FTENFq1C7RlVNBrHFLIgVmIQ8= -----END CERTIFICATE-----Generated at Tue May 14 16:35:11 2024 by rpki-client on console-ams.rpki-client.org