$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa File: 57b2b121-c49d-3287-acea-daa76e44396a.roa (raw, json) Hash identifier: D9JplztO43Ke1o1rSJ97htXmO9KLVUHzPgX2ll3Pto4= Subject key identifier: 87:2D:09:5E:0D:56:E6:F6:AB:B5:57:C4:04:C6:AE:D3:E3:26:C2:08 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F43285845C013864EFD9B267874D2A170 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa Signing time: Fri 03 May 2024 13:00:34 +0000 ROA not before: Fri 03 May 2024 13:00:34 +0000 ROA not after: Thu 01 Aug 2024 13:00:34 +0000 asID: 88 IP address blocks: 2620:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c0:13:86:4e:fd:9b:26:78:74:d2:a1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: May 3 13:00:34 2024 GMT Not After : Aug 1 13:00:34 2024 GMT Subject: CN=d3d7162d-db62-4e81-8ae9-def096410c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:8e:e1:bd:a3:7d:db:ef:b2:64:14:ac:88: 55:13:3b:26:dd:68:17:f1:a0:8c:79:b8:7e:62:b5: a5:fc:10:cd:41:2f:e6:44:3e:c4:2f:b3:1f:b8:d8: f7:4c:35:f8:71:81:d0:4f:60:08:d4:40:fb:2e:72: 75:66:e8:ec:d0:bc:e3:3f:0d:c4:b2:06:63:70:14: 6b:65:5c:ec:a3:fa:80:9e:3b:17:6a:74:56:b4:95: db:62:1f:91:a3:e5:4e:c6:76:0d:6e:e1:d3:83:94: 39:09:33:ea:85:fb:58:07:a9:02:98:22:d3:5a:c6: 14:24:7a:f4:73:48:6e:bd:c5:ce:c0:e3:92:99:78: 70:d8:c8:1f:2a:eb:51:74:61:fe:00:23:f6:7e:58: cd:9f:91:5f:b5:8f:05:8a:cf:96:8a:4a:07:3b:3b: cc:f8:0b:eb:26:cc:63:78:ec:65:93:4a:99:10:33: 23:49:87:61:7e:be:8b:0d:8b:bf:33:da:f1:c4:96: cf:02:fe:04:3e:f6:23:60:00:99:82:b5:a3:f1:b4: 38:5e:0d:96:ad:83:e7:64:21:3d:10:51:e1:67:c5: e8:5b:86:7b:54:30:2b:7a:a4:1e:e0:f7:24:f2:1e: 1b:7a:58:c6:4b:2c:08:26:cf:1c:b9:25:d1:c4:39: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:09:5E:0D:56:E6:F6:AB:B5:57:C4:04:C6:AE:D3:E3:26:C2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2620:c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6c:66:ae:1c:4f:80:8a:1e:92:59:ed:3c:06:b6:76:36:89: 8c:d5:93:4a:27:7b:00:3b:4f:2d:94:7c:18:39:33:31:94:45: e4:a5:39:fd:5f:38:41:0b:86:c2:d9:c9:60:a8:f2:ba:05:f0: d9:28:a6:1c:66:64:64:ea:06:2b:6b:34:b8:e6:3a:7f:bc:44: e4:c3:81:04:25:22:c9:2f:2e:29:34:20:18:3b:d4:f9:10:1c: 65:94:34:c5:40:66:5e:30:a1:d7:98:2f:30:26:d4:85:e9:54: 17:8d:f0:66:65:c4:f4:95:eb:bc:d2:ab:84:01:3c:ea:ac:e7: bb:14:28:9f:39:d1:c1:05:d1:68:54:d2:45:a3:fc:4a:e7:db: ae:2a:75:c5:d9:c2:48:85:35:28:19:53:e6:d1:85:f2:9b:93: 15:39:6e:f6:c4:79:08:6d:ac:c3:46:e4:d8:bd:c9:6f:9c:3b: 88:74:23:fa:c8:74:4c:fe:69:de:a6:7f:11:a0:ec:58:1a:83: 43:18:7c:b8:5b:87:5a:b8:69:73:46:de:35:7d:ab:2e:32:ce: 90:1a:f7:56:bf:f4:aa:b6:11:ca:c8:83:3d:d6:e6:7c:7d:2d: de:2c:73:7f:71:82:04:15:1d:9e:9f:b3:2d:b4:ee:1e:7c:58: 98:ea:25:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXAE4ZO/ZsmeHTSoXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk ZDNkNzE2MmQtZGI2Mi00ZTgxLThhZTktZGVmMDk2NDEwYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneOO4b2jfdvvsmQUrIhVEzsm3WgX8aCMebh+ YrWl/BDNQS/mRD7EL7MfuNj3TDX4cYHQT2AI1ED7LnJ1Zujs0LzjPw3EsgZjcBRr ZVzso/qAnjsXanRWtJXbYh+Ro+VOxnYNbuHTg5Q5CTPqhftYB6kCmCLTWsYUJHr0 c0huvcXOwOOSmXhw2MgfKutRdGH+ACP2fljNn5FftY8Fis+WikoHOzvM+AvrJsxj eOxlk0qZEDMjSYdhfr6LDYu/M9rxxJbPAv4EPvYjYACZgrWj8bQ4Xg2WrYPnZCE9 EFHhZ8XoW4Z7VDAreqQe4Pck8h4beljGSywIJs8cuSXRxDmvnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIctCV4NVub2q7VXxATGrtPjJsIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvNTdiMmIxMjEtYzQ5ZC0z Mjg3LWFjZWEtZGFhNzZlNDQzOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAxAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9sZq4cT4CKHpJZ7TwGtnY2iYzVk0onewA7Ty2UfBg5MzGUReSl Of1fOEELhsLZyWCo8roF8NkophxmZGTqBitrNLjmOn+8ROTDgQQlIskvLik0IBg7 1PkQHGWUNMVAZl4wodeYLzAm1IXpVBeN8GZlxPSV67zSq4QBPOqs57sUKJ850cEF 0WhU0kWj/Ern264qdcXZwkiFNSgZU+bRhfKbkxU5bvbEeQhtrMNG5Ni9yW+cO4h0 I/rIdEz+ad6mfxGg7Fgag0MYfLhbh1q4aXNG3jV9qy4yzpAa91a/9Kq2EcrIgz3W 5nx9Ld4sc39xggQVHZ6fsy207h58WJjqJQg= -----END CERTIFICATE-----Generated at Tue May 7 02:13:51 2024 by rpki-client on console-ams.rpki-client.org