$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa File: 8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa (raw, json) Hash identifier: HpPC+UH1q8TQQU5qyFQPk9OnrMsfVoQQuKrsAdsvh10= Subject key identifier: B7:B6:F3:D2:D5:9F:36:78:BF:C1:C0:9D:0B:E9:DF:2A:A9:41:5E:51 Certificate issuer: /CN=d4919c1e-24c8-430e-8811-91383c31b96a Certificate serial: 010D0C9F432858456128678D912C101FFC81DD20 Authority key identifier: DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 3856 IP address blocks: 2620:0:870::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:67:8d:91:2c:10:1f:fc:81:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4919c1e-24c8-430e-8811-91383c31b96a Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=358ef696-8858-4992-99d3-5dc8cb37e50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:c4:89:69:0f:e8:c0:ce:42:18:22:cb:55: 8d:f7:8f:13:55:f8:26:0b:64:cd:3a:2a:f1:7b:ac: fa:15:af:6a:3e:17:36:fe:6a:23:b8:e2:c8:b8:5c: 23:b6:53:ef:49:15:a0:d8:62:67:8e:3e:52:cf:2a: 81:79:a7:f4:9f:04:cc:f6:d9:1a:7c:80:77:4b:63: f7:ce:43:43:38:fa:41:61:58:6f:94:57:30:2a:f6: 6d:4f:04:91:d0:c5:6a:88:95:56:8d:90:55:a7:c2: d7:4c:47:b1:9e:b7:a1:e3:ce:13:c6:e5:fa:75:68: c2:85:e0:de:ea:33:4f:30:98:bb:45:ad:9b:5b:8f: 7a:26:1f:3c:91:ac:bc:2b:43:93:8b:ea:f5:12:94: 70:45:8a:e3:9c:2f:7f:9c:4b:40:9f:16:12:2f:d3: 56:fe:bf:44:59:ab:13:5a:f9:a9:6c:66:df:37:56: 9d:2e:4d:75:57:a6:ca:35:67:6e:95:df:23:04:2a: 69:65:09:ac:88:09:1a:78:c3:9d:f4:70:4b:10:77: 5d:47:d2:22:4a:fe:9b:87:49:91:2e:34:01:9d:77: c6:12:95:f0:8f:b5:86:1d:29:39:2b:ee:98:63:30: ca:b2:ba:1c:4f:ad:5c:96:6b:db:97:bd:d1:43:51: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B6:F3:D2:D5:9F:36:78:BF:C1:C0:9D:0B:E9:DF:2A:A9:41:5E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/8a0ce720-b8a5-3d5a-8ffe-340a813b05be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl X509v3 Authority Key Identifier: keyid:DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:870::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f8:53:33:53:a0:be:23:11:1c:ff:12:13:9f:7f:31:0e:b4: ce:65:9c:c1:ac:15:5b:dc:03:68:9d:32:13:f2:a6:be:b4:d3: cc:ab:e0:0a:6d:4e:5d:03:32:8d:dc:2c:33:a3:25:49:53:6a: bf:09:04:0a:85:e7:c0:97:73:e3:7d:20:70:74:d7:ee:a6:e7: 3f:2a:54:3f:fa:2c:0e:76:86:6b:d3:a7:71:7c:fa:b5:43:86: 86:87:6d:b1:72:87:28:d5:66:e0:fc:80:71:52:4d:bd:42:3a: a3:81:a8:4b:ef:b3:84:cf:77:39:73:90:2f:14:e3:0e:ae:ac: 58:b2:00:e9:70:e8:68:11:4c:e1:85:6a:4e:f5:74:68:be:28: ca:62:c2:6b:61:c2:38:dc:58:5d:fa:9e:d6:56:7d:3a:3d:1a: c8:c2:db:89:06:52:e4:c0:1f:ae:df:d5:0f:02:f7:f4:0c:7e: 84:50:51:bb:19:b3:54:80:b1:83:e7:63:64:2c:77:a0:bd:c9: 40:0c:51:ab:d7:b5:d3:fc:1e:66:e1:77:a1:e7:98:0a:cd:00: fe:8c:83:d5:32:b0:11:bf:22:70:19:af:8d:01:4e:e0:62:89: a1:f9:f6:51:85:a1:e5:81:3a:d0:eb:9c:07:4f:71:d5:70:cc: f1:53:b7:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVhKGeNkSwQH/yB3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5MTljMWUtMjRjOC00MzBlLTg4MTEtOTEzODNjMzFi OTZhMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk MzU4ZWY2OTYtODg1OC00OTkyLTk5ZDMtNWRjOGNiMzdlNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll3EiWkP6MDOQhgiy1WN948TVfgmC2TNOirx e6z6Fa9qPhc2/mojuOLIuFwjtlPvSRWg2GJnjj5SzyqBeaf0nwTM9tkafIB3S2P3 zkNDOPpBYVhvlFcwKvZtTwSR0MVqiJVWjZBVp8LXTEexnreh484TxuX6dWjCheDe 6jNPMJi7Ra2bW496Jh88kay8K0OTi+r1EpRwRYrjnC9/nEtAnxYSL9NW/r9EWasT WvmpbGbfN1adLk11V6bKNWduld8jBCppZQmsiAkaeMOd9HBLEHddR9IiSv6bh0mR LjQBnXfGEpXwj7WGHSk5K+6YYzDKsrocT61clmvbl73RQ1FXnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLe289LVnzZ4v8HAnQvp3yqpQV5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkx OWMxZS0yNGM4LTQzMGUtODgxMS05MTM4M2MzMWI5NmEvOGEwY2U3MjAtYjhhNS0z ZDVhLThmZmUtMzQwYTgxM2IwNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ5MTljMWUtMjRjOC00MzBlLTg4 MTEtOTEzODNjMzFiOTZhL2Q0OTE5YzFlLTI0YzgtNDMwZS04ODExLTkxMzgzYzMx Yjk2YS5jcmwwHwYDVR0jBBgwFoAU3yQUbb7Pe6ejeQwXRpVEgBR4KTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkxOWMxZS0yNGM4LTQzMGUtODgxMS05MTM4 M2MzMWI5NmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAhw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALT4UzNToL4jERz/EhOffzEOtM5lnMGsFVvcA2idMhPypr6008yr 4AptTl0DMo3cLDOjJUlTar8JBAqF58CXc+N9IHB01+6m5z8qVD/6LA52hmvTp3F8 +rVDhoaHbbFyhyjVZuD8gHFSTb1COqOBqEvvs4TPdzlzkC8U4w6urFiyAOlw6GgR TOGFak71dGi+KMpiwmthwjjcWF36ntZWfTo9GsjC24kGUuTAH67f1Q8C9/QMfoRQ UbsZs1SAsYPnY2Qsd6C9yUAMUavXtdP8Hmbhd6HnmArNAP6Mg9UysBG/InAZr40B TuBiiaH59lGFoeWBOtDrnAdPcdVwzPFTt0I= -----END CERTIFICATE-----Generated at Sat May 11 07:51:13 2024 by rpki-client on console-ams.rpki-client.org