$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa File: ba123b0a-7cc6-337d-9697-a1535b947efe.roa (raw, json) Hash identifier: fQn5pg1DwOmz3/QvRh3u4HZOK0jiugzLeQOibVVjn9s= Subject key identifier: 72:1D:61:0D:3B:72:DB:C6:19:D9:B7:C2:39:F6:CB:A8:A6:9D:D5:6A Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F43285844E6DC8475CE8DD2D6F10DFDC0 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa Signing time: Thu 15 Feb 2024 17:39:22 +0000 ROA not before: Thu 15 Feb 2024 17:39:22 +0000 ROA not after: Wed 15 May 2024 16:39:22 +0000 asID: 14618 IP address blocks: 2602:f98b:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e6:dc:84:75:ce:8d:d2:d6:f1:0d:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Feb 15 17:39:22 2024 GMT Not After : May 15 16:39:22 2024 GMT Subject: CN=2c7ae318-707b-4b63-b98d-a484d3df7412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:c2:04:1b:5e:0e:f6:2b:f6:d8:18:5f:55: a3:a9:e1:f0:23:f1:13:f1:b6:08:72:4d:ef:01:ad: 8e:65:11:5d:db:cb:e9:f5:e1:e3:cd:38:be:60:df: 75:70:03:37:dd:a2:02:68:58:66:4b:72:ce:19:b0: 8a:14:50:04:ae:b5:c6:aa:94:96:8c:10:60:94:5f: dd:3b:59:92:a3:76:63:57:24:1c:9a:32:f3:b9:3a: 07:8c:04:3b:fe:d1:a3:68:eb:b2:49:99:37:93:65: 18:b0:e1:08:e2:6c:3c:f0:1a:90:e0:90:ab:77:4e: 32:29:b3:d3:0d:63:34:2d:c9:3d:49:16:81:2c:0e: d8:86:10:9f:f6:d0:78:ec:f2:80:e0:8d:d8:b2:ac: 9f:2d:ac:d3:4d:01:e7:f4:e4:0f:05:68:e0:30:65: b9:e7:16:3f:84:b7:af:48:82:40:10:c0:a6:b8:ad: 9b:a4:37:84:32:3d:74:15:78:97:0e:38:73:24:2b: b8:44:32:eb:95:6f:7b:8d:3d:75:68:c3:8f:ce:8e: ef:d6:a1:22:30:43:5f:b6:9d:ef:ad:5d:e8:d6:c8: 09:b9:09:68:f9:61:ab:5d:b8:35:31:26:23:b5:b8: 33:b9:5d:23:97:8b:84:4e:9c:73:e3:77:64:bd:79: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:61:0D:3B:72:DB:C6:19:D9:B7:C2:39:F6:CB:A8:A6:9D:D5:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:df:1d:9a:29:bc:9b:e4:64:30:4f:18:ad:78:7d:d1:3c:37: d8:5b:19:bd:89:3b:b2:1b:a7:66:cf:ec:48:ae:85:ae:75:1b: 9c:fc:b3:e5:16:52:c0:44:10:70:59:c5:aa:12:a3:78:ac:9c: c0:4a:df:ae:53:2d:3e:09:97:95:a3:c8:ab:45:42:9b:cd:52: f9:bb:b5:77:d8:b5:a0:7b:9d:ef:f8:d0:52:00:b8:9d:6d:87: c9:c4:ff:85:15:4a:66:90:9b:49:55:04:7c:be:0b:bd:6f:e7: 8e:0d:73:b0:c5:9e:62:3e:a4:69:ce:36:1a:6a:c9:43:39:34: 2e:52:43:01:97:37:25:11:ae:db:c1:e3:f9:3a:1c:43:a2:1f: 4a:07:92:e4:6d:55:a0:11:12:6e:18:bf:b4:a6:30:84:bc:42: 3b:30:fa:31:76:da:c7:4e:97:0c:4f:c0:32:15:8c:09:51:c5: d7:86:35:4c:f8:e9:b6:98:85:5e:07:a2:23:d4:41:44:4d:9a: c9:d6:e7:8d:63:29:50:9f:c8:dd:63:ad:86:ac:25:9b:6c:3f: ca:81:17:dc:59:d6:9c:e1:53:17:09:d4:bc:75:06:92:a1:4c: c7:bb:37:2d:f8:88:58:bd:fb:9d:75:13:e7:61:b0:0f:69:ac: a6:8c:0a:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETm3IR1zo3S1vEN/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI0MDIxNTE3MzkyMloXDTI0MDUxNTE2MzkyMlowLzEtMCsGA1UEAxMk MmM3YWUzMTgtNzA3Yi00YjYzLWI5OGQtYTQ4NGQzZGY3NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSHCBBteDvYr9tgYX1WjqeHwI/ET8bYIck3v Aa2OZRFd28vp9eHjzTi+YN91cAM33aICaFhmS3LOGbCKFFAErrXGqpSWjBBglF/d O1mSo3ZjVyQcmjLzuToHjAQ7/tGjaOuySZk3k2UYsOEI4mw88BqQ4JCrd04yKbPT DWM0Lck9SRaBLA7YhhCf9tB47PKA4I3YsqyfLazTTQHn9OQPBWjgMGW55xY/hLev SIJAEMCmuK2bpDeEMj10FXiXDjhzJCu4RDLrlW97jT11aMOPzo7v1qEiMENftp3v rV3o1sgJuQlo+WGrXbg1MSYjtbgzuV0jl4uETpxz43dkvXncGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHIdYQ07ctvGGdm3wjn2y6imndVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvYmExMjNiMGEtN2NjNi0z MzdkLTk2OTctYTE1MzViOTQ3ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnfHZopvJvkZDBPGK14fdE8N9hbGb2JO7Ibp2bP7Eiuha51G5z8 s+UWUsBEEHBZxaoSo3isnMBK365TLT4Jl5WjyKtFQpvNUvm7tXfYtaB7ne/40FIA uJ1th8nE/4UVSmaQm0lVBHy+C71v544Nc7DFnmI+pGnONhpqyUM5NC5SQwGXNyUR rtvB4/k6HEOiH0oHkuRtVaAREm4Yv7SmMIS8Qjsw+jF22sdOlwxPwDIVjAlRxdeG NUz46baYhV4HoiPUQURNmsnW541jKVCfyN1jrYasJZtsP8qBF9xZ1pzhUxcJ1Lx1 BpKhTMe7Ny34iFi9+511E+dhsA9prKaMClo= -----END CERTIFICATE-----Generated at Wed May 1 20:50:29 2024 by rpki-client on console-ams.rpki-client.org