$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/6916f383-b284-36c3-aef3-63dd6bf3585c.roa File: 6916f383-b284-36c3-aef3-63dd6bf3585c.roa (raw, json) Hash identifier: 5iT8HhnOEl//0d+WKWGUVviCltH7XCYhdHDXqnzZEmk= Subject key identifier: 1C:21:CD:77:A2:77:FA:DF:22:D3:0F:6C:47:7D:91:DA:55:99:C4:0B Certificate issuer: /CN=d61cb32c-9cd6-4665-b0bd-25b06b7df110 Certificate serial: 010D0C9F432858452F68DDED843E534A90BBFF00 Authority key identifier: 4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/6916f383-b284-36c3-aef3-63dd6bf3585c.roa Signing time: Tue 12 Mar 2024 17:20:22 +0000 ROA not before: Tue 12 Mar 2024 17:20:22 +0000 ROA not after: Mon 10 Jun 2024 17:20:22 +0000 asID: 16509 IP address blocks: 2620:a1:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2f:68:dd:ed:84:3e:53:4a:90:bb:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61cb32c-9cd6-4665-b0bd-25b06b7df110 Validity Not Before: Mar 12 17:20:22 2024 GMT Not After : Jun 10 17:20:22 2024 GMT Subject: CN=1ca80537-91ae-4aee-a48f-1831e66ee447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:ca:f5:5a:84:d7:80:91:39:5d:62:f8:0b: 96:a6:da:24:e8:44:96:a7:de:79:8d:a9:09:dd:27: d2:1d:22:93:96:c5:ee:a6:7a:b0:22:0d:d0:db:88: e5:8c:7e:6a:e0:a0:05:4f:52:23:91:1d:d1:9f:e3: fe:87:13:42:91:8a:85:a7:e3:2f:0a:89:9f:e3:0b: 98:d6:fc:0f:3a:dd:90:53:eb:27:92:fd:a0:28:98: 72:f0:ee:d3:50:0d:02:13:71:2a:78:e8:99:5b:7a: 29:33:ce:92:aa:38:c9:c8:7a:89:41:26:32:89:1a: b9:aa:11:2b:d0:f5:b5:d2:99:29:b2:36:ae:cc:ec: 24:c1:53:b7:ea:43:b6:61:cb:a5:b2:43:bc:fb:6f: 26:07:46:05:9d:9a:6b:a5:ce:49:3d:60:f1:b9:3e: f3:12:d8:cf:e6:a0:85:2c:02:8f:be:07:63:b4:c0: a5:29:80:c3:d5:28:da:5a:78:a1:88:e9:fe:8b:ac: 88:84:d9:20:5e:51:c7:c9:cf:81:04:6a:06:0e:af: 76:ee:b1:60:0c:1e:80:76:f3:92:c0:f3:58:31:50: 54:b0:e8:41:de:b8:26:23:13:95:1b:73:21:63:73: 6c:a6:41:d2:d7:ad:9c:42:51:ef:d4:95:b1:97:40: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:CD:77:A2:77:FA:DF:22:D3:0F:6C:47:7D:91:DA:55:99:C4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/6916f383-b284-36c3-aef3-63dd6bf3585c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110/d61cb32c-9cd6-4665-b0bd-25b06b7df110.crl X509v3 Authority Key Identifier: keyid:4D:74:75:64:E5:D4:D8:70:B1:7E:AA:E9:45:31:A8:CC:2B:67:14:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d61cb32c-9cd6-4665-b0bd-25b06b7df110.cer sbgp-ipAddrBlock: critical IPv6: 2620:a1:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ce:52:e1:6f:d3:90:3e:81:44:db:83:4f:a9:43:84:cd:7f: 1d:29:0d:f8:ee:25:94:c1:7b:b6:e3:26:22:f7:6d:21:09:7f: 67:27:0f:28:50:a4:0f:6f:28:3c:5f:e6:22:99:dc:d7:c0:42: 2e:b7:6f:df:53:82:01:c8:6d:cc:a7:a2:d9:96:c1:88:22:fc: 88:38:66:b1:27:08:59:43:a1:aa:75:d4:44:c5:69:26:3b:1d: 43:a2:d9:e8:ba:74:91:e5:42:c2:7f:39:f7:da:e6:61:0f:15: 98:06:df:48:87:1a:71:0b:1b:d6:54:c9:4d:d7:bb:28:76:eb: 39:06:e4:19:2a:f9:60:2f:a0:25:06:a8:44:35:73:16:b2:a8: 26:68:0c:1a:12:f4:d6:71:c0:ca:cf:ac:2c:78:44:e0:45:07: 2e:e1:0a:05:7b:9b:10:dc:a7:00:81:0e:59:28:f3:6e:6a:7f: ad:40:eb:11:c0:a7:ed:ba:73:a4:d0:ad:2c:12:73:c9:4b:55: 7d:29:d8:70:78:dd:1b:82:15:91:39:86:a3:38:cd:e6:af:5e: f8:28:e8:8b:a6:46:f6:47:40:4a:7b:c2:31:45:5d:cf:8f:a8: a3:71:bd:c7:43:a5:0e:89:21:1c:db:36:1d:aa:04:47:03:b1: b2:bd:6e:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUvaN3thD5TSpC7/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDYxY2IzMmMtOWNkNi00NjY1LWIwYmQtMjViMDZiN2Rm MTEwMB4XDTI0MDMxMjE3MjAyMloXDTI0MDYxMDE3MjAyMlowLzEtMCsGA1UEAxMk MWNhODA1MzctOTFhZS00YWVlLWE0OGYtMTgzMWU2NmVlNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+DK9VqE14CROV1i+AuWptok6ESWp955jakJ 3SfSHSKTlsXupnqwIg3Q24jljH5q4KAFT1IjkR3Rn+P+hxNCkYqFp+MvComf4wuY 1vwPOt2QU+snkv2gKJhy8O7TUA0CE3EqeOiZW3opM86SqjjJyHqJQSYyiRq5qhEr 0PW10pkpsjauzOwkwVO36kO2YculskO8+28mB0YFnZprpc5JPWDxuT7zEtjP5qCF LAKPvgdjtMClKYDD1SjaWnihiOn+i6yIhNkgXlHHyc+BBGoGDq927rFgDB6AdvOS wPNYMVBUsOhB3rgmIxOVG3MhY3NspkHS162cQlHv1JWxl0B4FwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBwhzXeid/rfItMPbEd9kdpVmcQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNjFj YjMyYy05Y2Q2LTQ2NjUtYjBiZC0yNWIwNmI3ZGYxMTAvNjkxNmYzODMtYjI4NC0z NmMzLWFlZjMtNjNkZDZiZjM1ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDYxY2IzMmMtOWNkNi00NjY1LWIw YmQtMjViMDZiN2RmMTEwL2Q2MWNiMzJjLTljZDYtNDY2NS1iMGJkLTI1YjA2Yjdk ZjExMC5jcmwwHwYDVR0jBBgwFoAUTXR1ZOXU2HCxfqrpRTGozCtnFAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kNjFjYjMyYy05Y2Q2LTQ2NjUtYjBiZC0yNWIw NmI3ZGYxMTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoUAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrOUuFv05A+gUTbg0+pQ4TNfx0pDfjuJZTBe7bjJiL3bSEJf2cn DyhQpA9vKDxf5iKZ3NfAQi63b99TggHIbcynotmWwYgi/Ig4ZrEnCFlDoap11ETF aSY7HUOi2ei6dJHlQsJ/Offa5mEPFZgG30iHGnELG9ZUyU3Xuyh26zkG5Bkq+WAv oCUGqEQ1cxayqCZoDBoS9NZxwMrPrCx4ROBFBy7hCgV7mxDcpwCBDlko825qf61A 6xHAp+26c6TQrSwSc8lLVX0p2HB43RuCFZE5hqM4zeavXvgo6IumRvZHQEp7wjFF Xc+PqKNxvcdDpQ6JIRzbNh2qBEcDsbK9bow= -----END CERTIFICATE-----Generated at Thu May 2 20:21:24 2024 by rpki-client on console-ams.rpki-client.org