$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa File: 8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa (raw, json) Hash identifier: P54scLx7uJSalya5khGI8m6WuBanKD9yPFg3fR7GuY0= Subject key identifier: A5:91:70:55:76:D8:93:27:E1:47:0B:18:3E:E5:73:FD:A4:07:24:8C Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F43285845C873A9F2BF1BA2A60A5CEE80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa Signing time: Mon 06 May 2024 13:00:34 +0000 ROA not before: Mon 06 May 2024 13:00:34 +0000 ROA not after: Sun 04 Aug 2024 13:00:34 +0000 asID: 20253 IP address blocks: 2606:bc40:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c8:73:a9:f2:bf:1b:a2:a6:0a:5c:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: May 6 13:00:34 2024 GMT Not After : Aug 4 13:00:34 2024 GMT Subject: CN=2a0cc4c1-4e35-448e-92b2-37e8fffde540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:71:1a:51:59:ed:0a:5b:c2:ea:21:74:de: d3:e8:a1:3c:ba:79:05:03:73:17:1b:96:57:ad:24: fd:29:45:6b:d8:b9:a1:a7:aa:62:50:85:e2:c3:22: 56:6c:c4:4d:ff:b7:37:77:66:59:68:2a:3e:83:4c: 6d:94:01:53:25:84:a7:72:d1:e8:07:12:46:44:97: 53:d2:3a:b4:0a:91:04:2c:b4:db:69:a5:c6:6d:9c: 3d:6a:e9:64:a0:35:f9:ec:60:35:25:be:ca:1e:5a: f2:62:d5:0c:f3:b2:97:37:3f:aa:9a:9e:bf:63:79: 4c:76:38:ef:88:90:f2:db:49:ad:ed:38:b3:d4:5c: 78:a8:12:bc:36:0d:1f:6b:61:00:85:19:7c:38:ee: f2:04:dc:fc:e7:c1:31:ee:50:02:2c:5a:48:e6:a0: 5a:25:f3:c2:f6:5c:8e:3a:46:92:f4:e3:b1:16:89: cb:09:52:18:09:27:5c:2e:b9:ea:09:a5:e2:b8:ff: 80:8f:e2:12:fe:27:cc:ed:2f:72:f3:5d:5f:af:c0: ff:2a:00:46:8d:f3:f8:92:7a:fa:68:44:e3:3f:ba: 86:c6:aa:4d:10:c7:56:81:e3:fb:20:96:40:a8:6d: 33:66:32:08:a8:ae:3e:d8:d8:80:c0:cd:de:6b:2e: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:91:70:55:76:D8:93:27:E1:47:0B:18:3E:E5:73:FD:A4:07:24:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d6:b1:73:4c:a4:d1:b4:7d:e1:fb:08:2b:22:f6:0a:64:de: e9:bd:f8:2e:b1:c1:07:e6:c0:80:2a:99:a9:11:0f:20:e8:fe: 1c:85:68:58:f4:26:26:72:c1:81:72:7e:ec:8e:26:fd:92:29: c7:a6:56:79:d0:86:e6:50:82:82:fa:7a:b2:2c:89:70:b0:96: 7e:ba:1f:0a:d1:92:4d:fc:06:fb:71:5f:64:1a:bf:37:f3:d7: 80:25:f9:fa:65:e8:10:f6:55:5b:93:56:d4:ff:c3:55:62:13: 55:67:a9:97:62:6c:a0:00:dd:b9:ff:b4:42:73:eb:79:e2:99: 67:4e:73:39:8a:80:ff:5c:b7:98:96:1c:8a:f6:8c:59:88:c3: f1:76:52:93:30:97:04:d5:2b:9c:d6:38:1b:de:0c:df:4b:4c: a7:1c:e3:cb:e5:5d:52:a4:3a:06:9c:63:b6:ca:d1:df:c7:60: 69:ef:d3:50:88:6f:7a:9e:5c:ee:54:fc:80:b9:70:bf:7b:b5: 25:a6:03:b9:5c:5c:8f:5c:1c:f2:e1:40:99:04:26:d6:f0:61: 20:9a:78:9d:25:0b:16:de:50:50:da:c6:0b:75:80:24:06:68: 76:fd:d0:f4:07:46:44:c3:73:f9:8d:46:4b:8c:c5:38:a4:05: a3:2f:85:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXIc6nyvxuipgpc7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk MmEwY2M0YzEtNGUzNS00NDhlLTkyYjItMzdlOGZmZmRlNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZdxGlFZ7QpbwuohdN7T6KE8unkFA3MXG5ZX rST9KUVr2Lmhp6piUIXiwyJWbMRN/7c3d2ZZaCo+g0xtlAFTJYSnctHoBxJGRJdT 0jq0CpEELLTbaaXGbZw9aulkoDX57GA1Jb7KHlryYtUM87KXNz+qmp6/Y3lMdjjv iJDy20mt7Tiz1Fx4qBK8Ng0fa2EAhRl8OO7yBNz858Ex7lACLFpI5qBaJfPC9lyO OkaS9OOxFonLCVIYCSdcLrnqCaXiuP+Aj+IS/ifM7S9y811fr8D/KgBGjfP4knr6 aETjP7qGxqpNEMdWgeP7IJZAqG0zZjIIqK4+2NiAwM3eay7IgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWRcFV22JMn4UcLGD7lc/2kBySMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvOGY1M2UwYjQtYjdjZi0z NjlhLWEzYWEtYzI0MWUyZjk5YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC3WsXNMpNG0feH7CCsi9gpk3um9+C6xwQfmwIAqmakRDyDo/hyF aFj0JiZywYFyfuyOJv2SKcemVnnQhuZQgoL6erIsiXCwln66HwrRkk38BvtxX2Qa vzfz14Al+fpl6BD2VVuTVtT/w1ViE1VnqZdibKAA3bn/tEJz63nimWdOczmKgP9c t5iWHIr2jFmIw/F2UpMwlwTVK5zWOBveDN9LTKcc48vlXVKkOgacY7bK0d/HYGnv 01CIb3qeXO5U/IC5cL97tSWmA7lcXI9cHPLhQJkEJtbwYSCaeJ0lCxbeUFDaxgt1 gCQGaHb90PQHRkTDc/mNRkuMxTikBaMvhWQ= -----END CERTIFICATE-----Generated at Sat Jun 1 14:59:43 2024 by rpki-client on console-fra.rpki-client.org