$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa File: 350e89e8-f525-316a-9d14-11c96a99c5a0.roa (raw, json) Hash identifier: jzT4ANA47ZMck4YDWEhL4GiHgD6E7lI/pQ2bPNdLJQc= Subject key identifier: 53:82:9D:7D:B3:5A:35:38:66:B1:E4:E6:5A:FC:1C:A2:33:BA:46:70 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F432858457D133859787277E13EDAC980 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 63145 IP address blocks: 2606:ae40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:38:59:78:72:77:e1:3e:da:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=bdef50be-48b3-4c03-a4b2-80c6d6111a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:1f:82:49:f3:63:8b:81:5a:90:f2:aa:b2: 80:fb:bc:00:dc:74:0e:f0:c7:da:71:2b:e3:4f:61: 8f:c6:be:be:f2:75:11:89:2a:8d:d2:4e:cf:18:07: e0:3f:87:c1:03:e5:f4:c5:1f:3f:b8:d0:39:86:ad: 5b:b8:89:ac:b6:c8:1f:3d:76:a7:12:fa:d0:af:31: f6:da:1d:12:91:2c:30:7a:44:34:8c:74:a7:e3:f1: 95:03:44:8a:9a:09:71:c4:35:73:fc:83:5d:f6:95: 2c:bd:97:36:f9:7d:51:87:e0:74:3b:9b:52:d6:cc: 96:79:ce:50:2a:ee:1e:93:19:85:11:9b:2c:30:56: 65:09:13:47:b8:97:78:57:6b:a1:51:73:7e:f3:31: 62:19:11:06:41:18:64:89:db:be:8f:36:40:9e:95: 1c:18:09:a3:5d:37:09:94:86:b1:50:97:ef:4d:f7: a6:36:c8:aa:66:a6:ad:4e:eb:99:cb:3c:66:af:22: 81:6c:6b:05:95:79:9f:31:a8:a0:83:b7:5a:4a:e8: 30:22:19:50:34:16:e2:b7:a0:59:40:0c:ac:23:ec: 85:a3:99:09:d2:e3:f9:2f:51:da:77:44:6d:bf:ab: ee:05:84:d7:0b:67:51:f7:80:bd:cf:77:12:0f:7c: 36:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:9D:7D:B3:5A:35:38:66:B1:E4:E6:5A:FC:1C:A2:33:BA:46:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/350e89e8-f525-316a-9d14-11c96a99c5a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv6: 2606:ae40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b1:77:e1:06:15:88:0c:38:87:78:cb:43:e0:16:ba:06:40: db:2b:52:0f:b7:88:3b:d7:7d:46:52:46:cc:4c:32:26:a2:db: 79:96:f1:e5:27:5d:4a:f0:69:92:a8:33:f1:ad:5e:40:8f:7f: 93:9f:e4:bc:09:f8:9b:d9:49:26:e7:66:1a:9e:cd:52:d5:b8: ca:ff:42:c7:23:bd:cc:75:36:b3:85:69:d8:63:e1:35:68:19: 1b:a9:58:af:66:d5:1a:ba:53:7c:83:4e:54:38:75:62:ab:e1: 2c:57:5a:f7:6d:29:59:f7:01:77:35:1b:58:1a:9c:6a:29:07: 30:66:5e:46:cd:c8:94:8c:79:b9:c7:4d:41:4e:fb:f4:3d:25: 20:ff:59:3d:36:2a:91:51:b5:bb:a6:06:a5:68:71:ec:7a:92: d8:90:d7:ee:9d:6f:ec:4d:c1:ef:71:6d:ef:ae:b9:64:65:19: eb:b3:48:96:9e:1b:7b:90:a2:ee:b9:e7:77:ef:85:87:10:0e: bc:fc:2f:8e:ea:fe:17:f5:4f:68:48:f4:f8:a4:9a:53:7f:43: 1a:59:b1:b9:17:14:84:53:ad:70:78:76:e0:5e:00:f3:b5:18: ef:76:e1:83:25:2b:85:8a:97:75:09:94:0f:c7:95:84:06:c2: 03:77:ed:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEV9EzhZeHJ34T7ayYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk YmRlZjUwYmUtNDhiMy00YzAzLWE0YjItODBjNmQ2MTExYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTofgknzY4uBWpDyqrKA+7wA3HQO8MfacSvj T2GPxr6+8nURiSqN0k7PGAfgP4fBA+X0xR8/uNA5hq1buImstsgfPXanEvrQrzH2 2h0SkSwwekQ0jHSn4/GVA0SKmglxxDVz/INd9pUsvZc2+X1Rh+B0O5tS1syWec5Q Ku4ekxmFEZssMFZlCRNHuJd4V2uhUXN+8zFiGREGQRhkidu+jzZAnpUcGAmjXTcJ lIaxUJfvTfemNsiqZqatTuuZyzxmryKBbGsFlXmfMaigg7daSugwIhlQNBbit6BZ QAysI+yFo5kJ0uP5L1Had0Rtv6vuBYTXC2dR94C9z3cSD3w2PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFOCnX2zWjU4ZrHk5lr8HKIzukZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMzUwZTg5ZTgtZjUyNS0z MTZhLTlkMTQtMTFjOTZhOTljNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgauQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4sXfhBhWIDDiHeMtD4Ba6BkDbK1IPt4g7131GUkbMTDImott5lvHl J11K8GmSqDPxrV5Aj3+Tn+S8Cfib2Ukm52Yans1S1bjK/0LHI73MdTazhWnYY+E1 aBkbqVivZtUaulN8g05UOHViq+EsV1r3bSlZ9wF3NRtYGpxqKQcwZl5GzciUjHm5 x01BTvv0PSUg/1k9NiqRUbW7pgalaHHsepLYkNfunW/sTcHvcW3vrrlkZRnrs0iW nht7kKLuued374WHEA68/C+O6v4X9U9oSPT4pJpTf0MaWbG5FxSEU61weHbgXgDz tRjvduGDJSuFipd1CZQPx5WEBsIDd+0d -----END CERTIFICATE-----Generated at Sat May 4 15:02:13 2024 by rpki-client on console-ams.rpki-client.org