$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa File: 15971b5a-708e-36a4-9675-d45099021eac.roa (raw, json) Hash identifier: b5s3qUy4GPlsUXi4fqnvYMzFm6Ntx/X8Yl9I94SRkUc= Subject key identifier: E3:74:D4:31:91:10:69:AC:AD:83:A2:0C:17:53:67:05:05:ED:AB:85 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F43285844F5CAAD06B675542271FBF680 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa Signing time: Wed 21 Feb 2024 02:00:25 +0000 ROA not before: Wed 21 Feb 2024 02:00:25 +0000 ROA not after: Tue 21 May 2024 01:00:25 +0000 asID: 13849 IP address blocks: 2602:fbb5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f5:ca:ad:06:b6:75:54:22:71:fb:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Feb 21 02:00:25 2024 GMT Not After : May 21 01:00:25 2024 GMT Subject: CN=7a5dcaf2-771d-415e-9d02-a85ad240c182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:d8:c8:2a:16:18:36:aa:71:c0:7e:40:79: 4f:91:0e:b6:ec:59:61:17:4d:39:d5:45:56:93:26: d4:ab:4b:8f:2d:9f:4a:99:a3:13:b7:2d:45:9c:86: 71:2a:13:88:70:8a:3d:7b:04:b4:4f:35:30:12:b8: 42:1e:5e:f1:93:db:7d:26:4b:70:61:bf:ed:d4:cd: 55:b1:62:98:7c:70:b0:24:87:69:4d:51:ce:ea:ca: 60:f7:0c:da:de:a9:61:a2:8c:b0:57:d1:6b:89:69: 49:c6:0c:46:79:ca:0d:e7:c7:37:fa:6b:e9:c6:c1: 35:f9:d9:d0:0b:6a:6c:52:4b:f6:39:9a:3e:fb:39: ce:12:8e:f1:23:9d:27:7c:73:e1:25:2c:a9:32:ee: fe:5c:92:e1:50:8f:ec:a8:f2:d1:a1:59:7a:ce:fa: 41:37:17:45:97:d3:87:ca:49:d6:0f:6f:96:9a:5e: 15:fc:fb:9b:6f:b2:a0:05:58:d4:5a:88:80:0a:77: aa:c0:81:15:e5:03:21:a0:5f:5a:64:59:58:4a:d6: b9:ba:af:60:15:5d:be:d6:10:89:01:d9:e5:66:f0: 69:d8:fa:03:f9:a9:f2:81:f6:31:e2:5d:1a:ff:da: f6:76:35:af:fe:21:07:7e:44:c2:56:21:70:40:9f: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:74:D4:31:91:10:69:AC:AD:83:A2:0C:17:53:67:05:05:ED:AB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:99:e7:d3:0b:aa:19:e4:71:e0:8f:95:25:8a:c6:f1:f3:d0: 19:de:a4:36:b5:d1:c2:0f:43:1a:29:cf:dc:0c:ed:eb:22:88: d2:ef:39:6c:78:31:69:73:50:f9:98:6a:51:38:1c:94:f3:4d: c0:6e:d1:49:29:20:b1:7b:0b:22:3e:6e:81:2d:a3:07:32:4f: e2:08:da:ca:7e:2c:97:69:95:2c:02:d9:29:5d:8c:99:bb:58: d5:53:a8:6e:1a:6d:00:47:57:0d:9e:4e:47:46:69:13:7b:57: 25:63:27:3d:d0:65:56:84:7c:3f:67:00:0e:96:d1:d7:ed:51: 69:78:ea:7e:fb:18:73:ee:0d:24:75:69:ec:36:14:81:79:5f: f6:ec:a4:4c:52:d2:78:7a:ed:da:4e:8c:b2:91:af:7d:31:59: e2:f2:a2:2a:6d:a4:a6:bc:a0:61:d4:97:44:84:b0:d3:75:36: eb:e2:5b:f7:d8:99:be:64:f8:cb:6c:03:fd:7b:f7:bb:38:41: cf:ae:3d:07:a8:21:7a:34:e9:55:b8:85:03:b2:92:f3:ad:2c: 86:18:db:2a:9e:08:2a:fa:c1:36:09:57:0c:05:14:3a:10:39: 9d:22:7b:8e:7e:70:63:52:9c:76:ad:a6:e0:46:5b:01:7a:dc: 1a:fb:53:8f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWET1yq0GtnVUInH79oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI0MDIyMTAyMDAyNVoXDTI0MDUyMTAxMDAyNVowLzEtMCsGA1UEAxMk N2E1ZGNhZjItNzcxZC00MTVlLTlkMDItYTg1YWQyNDBjMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6HYyCoWGDaqccB+QHlPkQ627FlhF0051UVW kybUq0uPLZ9KmaMTty1FnIZxKhOIcIo9ewS0TzUwErhCHl7xk9t9JktwYb/t1M1V sWKYfHCwJIdpTVHO6spg9wza3qlhooywV9FriWlJxgxGecoN58c3+mvpxsE1+dnQ C2psUkv2OZo++znOEo7xI50nfHPhJSypMu7+XJLhUI/sqPLRoVl6zvpBNxdFl9OH yknWD2+Wml4V/Pubb7KgBVjUWoiACneqwIEV5QMhoF9aZFlYSta5uq9gFV2+1hCJ AdnlZvBp2PoD+anygfYx4l0a/9r2djWv/iEHfkTCViFwQJ8AhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFON01DGREGmsrYOiDBdTZwUF7auFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvMTU5NzFiNWEtNzA4ZS0z NmE0LTk2NzUtZDQ1MDk5MDIxZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQZnn0wuqGeRx4I+VJYrG8fPQGd6kNrXRwg9DGinP3Azt6yKI0u85 bHgxaXNQ+ZhqUTgclPNNwG7RSSkgsXsLIj5ugS2jBzJP4gjayn4sl2mVLALZKV2M mbtY1VOobhptAEdXDZ5OR0ZpE3tXJWMnPdBlVoR8P2cADpbR1+1RaXjqfvsYc+4N JHVp7DYUgXlf9uykTFLSeHrt2k6MspGvfTFZ4vKiKm2kprygYdSXRISw03U26+Jb 99iZvmT4y2wD/Xv3uzhBz649B6ghejTpVbiFA7KS860shhjbKp4IKvrBNglXDAUU OhA5nSJ7jn5wY1Kcdq2m4EZbAXrcGvtTjw== -----END CERTIFICATE-----Generated at Thu May 9 15:21:20 2024 by rpki-client on console-ams.rpki-client.org