$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa File: 35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa (raw, json) Hash identifier: iA4TDMVha5WOsmKmHXjCzre/MAbJ9ntdrWsrzKWSc0E= Subject key identifier: 42:A1:86:95:8F:DD:DC:05:45:5F:96:3E:BC:AE:52:94:FE:6F:E1:B9 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F432858450DF93E42841614799D3E40A0 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa Signing time: Thu 29 Feb 2024 17:53:47 +0000 ROA not before: Thu 29 Feb 2024 17:53:47 +0000 ROA not after: Wed 29 May 2024 16:53:47 +0000 asID: 14618 IP address blocks: 2606:9fc0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0d:f9:3e:42:84:16:14:79:9d:3e:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Feb 29 17:53:47 2024 GMT Not After : May 29 16:53:47 2024 GMT Subject: CN=e0ea00a4-49b2-4616-96d8-69e52b4172ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:3a:15:68:e3:0f:d3:45:57:b2:f0:cf:f1: d2:62:3c:a7:dc:fc:3f:b6:c0:13:bf:e1:a3:71:d0: b2:5b:03:a6:83:90:d6:37:e0:f7:cb:e3:ec:1f:9c: 31:60:97:7b:a7:f9:ad:8c:df:5c:81:ef:67:e7:7a: bb:8e:fa:8d:46:67:5f:e4:a3:59:b8:62:04:1e:a6: 50:0f:20:95:ee:25:1b:19:ac:b2:e3:cc:11:17:2d: 01:78:eb:d0:17:32:b1:b5:e6:2a:94:f2:f3:91:e3: 1b:47:8f:f8:ee:07:87:3b:b9:8f:fd:f6:ef:a0:28: 0b:bc:c8:40:1d:6d:2c:42:06:45:f9:f5:48:2a:de: fd:ed:29:83:94:2c:cc:c8:cb:e9:43:b7:00:76:6a: 44:86:b3:ef:f7:fd:8e:0b:79:7f:00:1a:16:3b:f7: 2c:d0:0f:5c:a6:ae:ff:4d:da:6d:4e:ce:94:9d:b7: a5:92:78:e5:dc:e6:61:79:a9:0d:d7:fa:d6:ea:f7: 22:cc:25:20:4e:54:c2:27:43:a0:a6:7c:ac:da:67: 09:dc:9d:ba:a0:a1:a0:de:5b:99:5b:18:a7:6c:6e: 0f:e5:f5:59:93:35:bf:ee:a6:89:1c:2b:42:ae:8f: 8c:ed:04:43:f9:5a:90:42:d5:90:e2:51:20:00:16: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:86:95:8F:DD:DC:05:45:5F:96:3E:BC:AE:52:94:FE:6F:E1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/35ee2a92-a666-338c-a2a2-d4862bf0db9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:37:ae:93:4b:1e:76:20:83:a3:bf:7d:af:db:e5:21:c0:7d: 7b:fb:b0:c9:b8:9b:b9:1c:e4:f4:12:9b:23:ff:f8:4f:8d:3c: 92:7a:58:12:82:ec:64:c7:ba:87:75:26:c9:a1:46:fa:74:86: e1:15:7a:4b:78:1d:19:f8:2b:59:1b:62:2f:43:cd:77:9f:b9: e2:54:4f:3a:36:81:56:a7:ea:3a:b1:e4:18:44:b5:8f:d1:2f: 4b:78:fd:a4:ca:74:47:ad:1f:6d:70:9f:e6:a5:a6:75:3e:45: 65:73:6d:25:80:ed:8f:0a:e5:2f:0a:17:4d:a1:3e:6c:90:48: 00:70:b2:fc:c0:dc:f0:2b:b2:b8:da:bc:f3:23:ce:67:60:bd: 22:d6:10:e3:ad:71:5a:75:33:f5:b7:fd:8e:41:de:23:9c:ab: 42:e9:f8:10:d5:af:40:15:44:55:d3:71:53:7e:e4:b2:7d:af: fc:8b:3f:68:ab:76:bb:d1:86:bf:b3:6d:24:4f:ff:ed:83:75: b1:1f:45:25:29:cc:12:44:a3:6c:74:3a:3f:5d:b0:93:09:36: d1:d5:eb:cf:f0:cd:82:56:45:8d:96:a9:12:7a:42:09:cf:87: 8b:07:75:db:81:18:37:c6:39:63:8b:0a:34:59:22:e7:b2:80: 64:b0:29:d9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUN+T5ChBYUeZ0+QKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI0MDIyOTE3NTM0N1oXDTI0MDUyOTE2NTM0N1owLzEtMCsGA1UEAxMk ZTBlYTAwYTQtNDliMi00NjE2LTk2ZDgtNjllNTJiNDE3MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAE6FWjjD9NFV7Lwz/HSYjyn3Pw/tsATv+Gj cdCyWwOmg5DWN+D3y+PsH5wxYJd7p/mtjN9cge9n53q7jvqNRmdf5KNZuGIEHqZQ DyCV7iUbGayy48wRFy0BeOvQFzKxteYqlPLzkeMbR4/47geHO7mP/fbvoCgLvMhA HW0sQgZF+fVIKt797SmDlCzMyMvpQ7cAdmpEhrPv9/2OC3l/ABoWO/cs0A9cpq7/ TdptTs6Unbelknjl3OZheakN1/rW6vcizCUgTlTCJ0Ogpnys2mcJ3J26oKGg3luZ WxinbG4P5fVZkzW/7qaJHCtCro+M7QRD+VqQQtWQ4lEgABZ4EwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEKhhpWP3dwFRV+WPryuUpT+b+G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMzVlZTJhOTItYTY2Ni0z MzhjLWEyYTItZDQ4NjJiZjBkYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgafwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAsDeuk0sediCDo799r9vlIcB9e/uwybibuRzk9BKbI//4T408knpY EoLsZMe6h3UmyaFG+nSG4RV6S3gdGfgrWRtiL0PNd5+54lRPOjaBVqfqOrHkGES1 j9EvS3j9pMp0R60fbXCf5qWmdT5FZXNtJYDtjwrlLwoXTaE+bJBIAHCy/MDc8Cuy uNq88yPOZ2C9ItYQ461xWnUz9bf9jkHeI5yrQun4ENWvQBVEVdNxU37ksn2v/Is/ aKt2u9GGv7NtJE//7YN1sR9FJSnMEkSjbHQ6P12wkwk20dXrz/DNglZFjZapEnpC Cc+Hiwd124EYN8Y5Y4sKNFki57KAZLAp2Q== -----END CERTIFICATE-----Generated at Wed May 1 23:04:27 2024 by rpki-client on console-ams.rpki-client.org