$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa File: 2189e87f-7779-3596-9c34-f01904d2e2a0.roa (raw, json) Hash identifier: fhvgJctPe92n1g4aWs/ehHH2dRLn1HllBRl375LU2Pc= Subject key identifier: 42:99:09:F6:98:54:DD:0B:7E:04:AF:49:E3:1E:62:19:9D:13:BD:E9 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285845347D46558437125CC1B1D700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa Signing time: Thu 14 Mar 2024 13:00:30 +0000 ROA not before: Thu 14 Mar 2024 13:00:30 +0000 ROA not after: Wed 12 Jun 2024 13:00:30 +0000 asID: 852 IP address blocks: 2001:56b:3f60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:34:7d:46:55:84:37:12:5c:c1:b1:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 14 13:00:30 2024 GMT Not After : Jun 12 13:00:30 2024 GMT Subject: CN=2779fa26-7161-4162-9bad-21cff3ee22c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:5c:92:ec:5d:7d:77:8c:1e:e8:75:cc:5f: 9f:5e:11:de:b5:46:b3:dd:42:a9:dd:44:3d:c8:1b: 25:3d:54:c2:ac:9b:1e:61:e0:98:98:ba:6e:0e:21: f6:d5:bc:b8:38:e7:4a:5f:f2:5d:3e:f9:42:74:d2: ce:71:56:18:2a:cd:a0:94:41:e4:2e:88:01:f0:05: 35:c8:8d:30:c3:ad:6f:46:f2:5c:98:c9:8b:1e:80: af:c7:b3:82:13:2f:65:fc:60:75:8a:27:7f:06:d9: 22:64:e0:8e:ba:43:b1:3b:09:f0:44:de:62:d1:01: 2a:d7:9f:50:63:87:18:2a:26:41:94:7c:21:ae:c1: c6:80:00:3f:0a:fc:50:91:a0:ae:55:18:e8:f5:10: 86:15:a1:97:ce:1f:c9:a1:6a:cb:aa:af:cd:c9:7c: 06:f7:3c:69:b5:31:15:fe:22:f3:74:50:5a:30:5e: fd:1c:ec:c2:f7:a0:8f:6f:c1:57:88:92:03:cb:a3: 3d:5b:bc:a1:df:83:c5:d4:eb:f4:df:da:de:3a:95: 02:df:62:0b:5d:db:17:4b:0c:c7:47:9c:42:9a:d7: 80:11:a7:6f:5d:9a:fa:b3:a1:05:55:5b:52:02:c8: 59:6c:5f:88:35:6f:ac:7b:02:90:42:33:0a:9d:fd: 36:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:99:09:F6:98:54:DD:0B:7E:04:AF:49:E3:1E:62:19:9D:13:BD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:3f60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cd:33:a0:a2:c4:fc:90:0a:d5:c7:0d:13:d9:f9:c9:38:7f: 34:4a:41:19:47:5b:cb:92:86:b0:4c:33:23:50:7a:a6:b4:45: 9e:88:df:0d:6f:fd:ea:e5:95:36:73:51:09:ad:85:cd:ad:3d: 2f:64:f4:97:bb:c0:95:b1:79:b2:90:b4:4d:5b:84:15:2b:23: a5:4b:c4:07:34:af:84:50:e0:94:8f:57:c8:c4:97:b3:ce:d9: 02:87:e2:07:d4:a6:19:8d:0d:79:02:c6:44:b8:3b:a8:eb:72: 93:f0:5b:55:e4:d4:60:3b:2d:cd:a9:e6:9b:78:6e:36:5b:bf: cb:35:e3:83:fa:cf:e7:19:d5:0d:35:6d:49:e7:21:18:ad:64: c9:4f:fa:d6:36:9b:de:a4:96:fa:9d:f2:da:79:27:ae:7b:b2: 2e:b5:1a:43:58:97:6e:b2:89:b0:f6:7d:d0:20:d9:50:33:2f: 11:2b:87:0a:e6:fc:a4:42:6b:ea:42:8e:b9:d0:cb:bb:af:51: 9e:c2:52:46:2a:34:9a:21:2b:8e:f1:af:c1:cd:6a:43:f6:b9: 14:3a:76:6b:95:e6:a6:ef:0e:70:6d:19:89:31:1c:27:a2:b3: a8:41:fa:18:e4:00:b3:c2:5c:50:6b:01:26:16:ef:d0:f0:13: 49:40:bb:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU0fUZVhDcSXMGx1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk Mjc3OWZhMjYtNzE2MS00MTYyLTliYWQtMjFjZmYzZWUyMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLtckuxdfXeMHuh1zF+fXhHetUaz3UKp3UQ9 yBslPVTCrJseYeCYmLpuDiH21by4OOdKX/JdPvlCdNLOcVYYKs2glEHkLogB8AU1 yI0ww61vRvJcmMmLHoCvx7OCEy9l/GB1iid/BtkiZOCOukOxOwnwRN5i0QEq159Q Y4cYKiZBlHwhrsHGgAA/CvxQkaCuVRjo9RCGFaGXzh/JoWrLqq/NyXwG9zxptTEV /iLzdFBaMF79HOzC96CPb8FXiJIDy6M9W7yh34PF1Ov039reOpUC32ILXdsXSwzH R5xCmteAEadvXZr6s6EFVVtSAshZbF+INW+sewKQQjMKnf02PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKZCfaYVN0LfgSvSeMeYhmdE73pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjE4OWU4N2YtNzc3OS0z NTk2LTljMzQtZjAxOTA0ZDJlMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaz9g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHNM6CixPyQCtXHDRPZ+ck4fzRKQRlHW8uShrBMMyNQeqa0RZ6I 3w1v/erllTZzUQmthc2tPS9k9Je7wJWxebKQtE1bhBUrI6VLxAc0r4RQ4JSPV8jE l7PO2QKH4gfUphmNDXkCxkS4O6jrcpPwW1Xk1GA7Lc2p5pt4bjZbv8s144P6z+cZ 1Q01bUnnIRitZMlP+tY2m96klvqd8tp5J657si61GkNYl26yibD2fdAg2VAzLxEr hwrm/KRCa+pCjrnQy7uvUZ7CUkYqNJohK47xr8HNakP2uRQ6dmuV5qbvDnBtGYkx HCeis6hB+hjkALPCXFBrASYW79DwE0lAu9k= -----END CERTIFICATE-----Generated at Sun May 26 01:57:59 2024 by rpki-client on console-ams.rpki-client.org