$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa File: bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa (raw, json) Hash identifier: QNRHqJAcgSCmr4VmNp51qYM27tZdXUyo/WClHk1bSxY= Subject key identifier: A7:67:05:1D:FF:B0:9A:2A:72:DA:D6:F7:6A:AA:02:E0:FA:F6:31:4C Certificate issuer: /CN=1380a44d-7851-4eb6-8887-413917dcdc12 Certificate serial: 010D0C9F4328584510502860AB45512F84312840 Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa Signing time: Fri 01 Mar 2024 14:00:30 +0000 ROA not before: Fri 01 Mar 2024 14:00:30 +0000 ROA not after: Thu 30 May 2024 13:00:30 +0000 asID: 31972 IP address blocks: 2607:8680::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:10:50:28:60:ab:45:51:2f:84:31:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12 Validity Not Before: Mar 1 14:00:30 2024 GMT Not After : May 30 13:00:30 2024 GMT Subject: CN=3b22a31b-2606-4abe-9b0a-d05130a47bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:1c:a9:64:d4:52:70:36:74:73:47:cf:55: 84:a1:f0:bf:05:34:ba:c9:84:5e:f1:9a:3b:7b:78: 00:8b:4c:7e:9e:e8:85:cc:50:9c:91:49:47:01:5d: 48:4a:48:f3:ea:ca:2e:fb:73:11:48:45:82:8d:d9: 78:07:ac:69:b6:3d:e4:29:73:1c:df:36:0d:ad:8a: 8c:6d:6f:30:be:3c:12:a8:d3:51:80:cc:e6:c7:34: c2:b5:82:a1:ef:ff:bb:86:54:40:8f:26:72:fd:da: a1:5a:55:42:94:d7:40:0e:32:b1:54:48:b6:41:3a: b1:82:c2:a7:fd:63:6f:b4:92:89:63:9d:db:27:9f: 41:bd:37:aa:7f:4a:7e:ef:f4:d4:3c:28:d3:c8:8b: 27:44:9f:91:7d:46:31:ea:14:5e:3c:42:d0:ce:32: a8:b7:ee:25:a9:77:0f:84:01:8b:1c:9b:6c:2b:ed: 3e:5b:20:56:21:49:91:27:cb:7b:ae:42:85:48:d1: 51:49:3f:66:6e:ce:6e:31:5d:11:5b:5f:7c:6b:8f: dc:ce:d1:c6:2b:77:82:26:6e:57:ab:f8:a0:ad:6c: 41:75:1f:79:16:d9:2b:a7:90:07:da:53:12:79:33: 32:71:1b:b1:a7:2f:3f:1c:d2:15:43:a6:54:1a:5f: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:67:05:1D:FF:B0:9A:2A:72:DA:D6:F7:6A:AA:02:E0:FA:F6:31:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl X509v3 Authority Key Identifier: keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer sbgp-ipAddrBlock: critical IPv6: 2607:8680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4a:cb:46:d5:bc:1f:5a:53:3a:a1:26:cc:6c:e0:d4:06:7a: 4a:50:8e:fe:36:d2:6d:ba:e7:88:97:0a:46:0e:3d:71:fd:25: cb:7e:03:24:69:77:7f:e1:dd:82:f4:74:c2:ac:bf:c0:95:ad: ce:2f:67:9c:d6:49:e8:a1:4d:58:47:bb:0e:4a:35:ff:53:17: 79:11:6d:04:76:3e:44:bc:3c:57:65:10:a8:09:78:16:01:ff: 0f:d0:59:48:0e:2a:b0:8d:f8:5b:36:3a:c0:70:ed:02:00:2c: ce:92:ec:e5:2c:1e:e0:4f:03:d1:a0:75:2c:ca:df:7d:30:de: 5d:81:d2:46:80:a8:74:06:b3:61:31:87:1b:51:7e:31:0b:1d: 88:c6:6e:09:cd:34:f9:6e:ba:7a:b0:f1:f4:84:44:f9:b1:62: 69:f1:ea:12:80:da:b8:e9:46:90:09:b5:b3:f2:79:73:cf:49: e9:b6:de:f3:72:6a:29:6c:a5:f1:2f:8e:88:77:47:70:68:76: 68:13:ba:d9:a2:67:70:cb:b4:67:82:e2:06:c6:fd:a0:88:c3: d3:88:17:2e:c4:61:9b:2c:32:61:9a:79:19:0d:c0:9e:a3:e0: c3:fa:6e:01:3a:f4:af:39:b8:cf:ee:b4:6f:4c:c2:69:c4:40: eb:a6:f0:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUQUChgq0VRL4QxKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MGE0NGQtNzg1MS00ZWI2LTg4ODctNDEzOTE3ZGNk YzEyMB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk M2IyMmEzMWItMjYwNi00YWJlLTliMGEtZDA1MTMwYTQ3YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2McqWTUUnA2dHNHz1WEofC/BTS6yYRe8Zo7 e3gAi0x+nuiFzFCckUlHAV1ISkjz6sou+3MRSEWCjdl4B6xptj3kKXMc3zYNrYqM bW8wvjwSqNNRgMzmxzTCtYKh7/+7hlRAjyZy/dqhWlVClNdADjKxVEi2QTqxgsKn /WNvtJKJY53bJ59BvTeqf0p+7/TUPCjTyIsnRJ+RfUYx6hRePELQzjKot+4lqXcP hAGLHJtsK+0+WyBWIUmRJ8t7rkKFSNFRST9mbs5uMV0RW198a4/cztHGK3eCJm5X q/igrWxBdR95Ftkrp5AH2lMSeTMycRuxpy8/HNIVQ6ZUGl9G2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKdnBR3/sJoqctrW92qqAuD69jFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgw YTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5MTdkY2RjMTIvYmQ4YmVjNmYtMWE3MC0z Mzc4LTkxYjUtY2IyMWM1NTMzZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM4MGE0NGQtNzg1MS00ZWI2LTg4 ODctNDEzOTE3ZGNkYzEyLzEzODBhNDRkLTc4NTEtNGViNi04ODg3LTQxMzkxN2Rj ZGMxMi5jcmwwHwYDVR0jBBgwFoAUbDfhYWi0z4hkEcto6UplckqWVJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzgwYTQ0ZC03ODUxLTRlYjYtODg4Ny00MTM5 MTdkY2RjMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeGgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5SstG1bwfWlM6oSbMbODUBnpKUI7+NtJtuueIlwpGDj1x/SXLfgMk aXd/4d2C9HTCrL/Ala3OL2ec1knooU1YR7sOSjX/Uxd5EW0Edj5EvDxXZRCoCXgW Af8P0FlIDiqwjfhbNjrAcO0CACzOkuzlLB7gTwPRoHUsyt99MN5dgdJGgKh0BrNh MYcbUX4xCx2Ixm4JzTT5brp6sPH0hET5sWJp8eoSgNq46UaQCbWz8nlzz0nptt7z cmopbKXxL46Id0dwaHZoE7rZomdwy7RnguIGxv2giMPTiBcuxGGbLDJhmnkZDcCe o+DD+m4BOvSvObjP7rRvTMJpxEDrpvC6 -----END CERTIFICATE-----Generated at Sat May 4 20:39:08 2024 by rpki-client on console-fra.rpki-client.org