$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa File: d1bc157d-452c-3df9-8b8f-0af48916ab94.roa (raw, json) Hash identifier: qZ5A1jjRAZU/kvClE3skIWdFoSr6eHTTvVdIVpuM7ao= Subject key identifier: 88:A0:0F:D6:7E:34:1D:4D:B6:58:21:FF:36:D8:B1:70:EF:02:44:0E Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584574B3172979BE76548295B6D0 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa Signing time: Sat 06 Apr 2024 13:00:35 +0000 ROA not before: Sat 06 Apr 2024 13:00:35 +0000 ROA not after: Fri 05 Jul 2024 13:00:35 +0000 asID: 13984 IP address blocks: 2604:2ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:74:b3:17:29:79:be:76:54:82:95:b6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Apr 6 13:00:35 2024 GMT Not After : Jul 5 13:00:35 2024 GMT Subject: CN=bb206d44-ddff-4642-b80b-a181696dfce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:68:46:45:c6:13:93:5f:6d:af:ca:da:6c: 5c:f8:a6:4f:6a:6a:e7:e7:ed:d0:a9:27:dc:1a:76: fc:9d:ec:11:9b:08:c7:32:16:0a:ce:61:55:93:26: 8b:ce:88:ad:c2:9e:21:c8:62:61:9e:be:16:49:f6: fd:b1:87:d3:01:b9:0c:88:a0:0e:9d:a2:77:4c:dd: 1b:de:e5:da:ee:48:43:dc:41:67:d3:19:af:38:dd: 1e:79:6a:45:02:ad:f9:e8:a2:52:b9:f1:d2:2d:bb: 65:0f:8e:33:1e:ac:bc:f5:a2:e3:55:22:8f:e1:4d: db:bf:fd:91:79:ec:53:ef:06:31:45:e8:1b:f7:e7: a6:fa:a5:1b:9d:a4:dc:f7:81:62:2e:17:f8:87:37: 5b:7d:4d:3f:b1:26:aa:4d:1d:94:72:ce:b6:22:ca: ca:05:76:0e:d0:98:ac:5c:7e:1b:07:1a:81:81:57: 0f:8b:bd:c0:3b:cf:c5:ab:72:1c:e3:f1:0d:66:db: 1c:cb:92:f4:66:a0:63:2d:e5:59:00:b9:c8:cb:7e: dd:50:9d:b1:6d:57:06:d1:14:ee:3b:4c:0f:27:96: d6:82:8c:8d:7c:0e:2f:01:53:10:00:9d:3c:50:41: 23:ab:94:34:bb:2d:d3:fe:ca:c1:6b:c0:00:ca:08: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:0F:D6:7E:34:1D:4D:B6:58:21:FF:36:D8:B1:70:EF:02:44:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d1bc157d-452c-3df9-8b8f-0af48916ab94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv6: 2604:2ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:43:5f:42:f4:88:c0:84:4c:00:57:0a:a7:09:5f:82:e5:45: 4f:29:9a:b8:11:f8:7e:75:ff:12:5d:be:c0:c4:4d:0f:27:c4: 17:c2:0f:71:a1:ff:56:dd:c8:bf:53:bd:27:a4:f3:2f:7d:af: ab:4f:eb:cd:96:b3:ac:31:68:48:12:9c:5e:21:04:73:70:dd: a0:36:47:9b:86:89:01:97:72:a8:ad:fd:e6:85:ea:ca:de:c8: be:2c:91:1f:0c:71:e3:70:c7:66:a6:78:9f:7b:03:b5:c8:66: 38:8c:7b:6c:17:ad:fd:3d:30:ba:c2:e1:92:93:e7:d8:73:24: aa:f2:bd:f4:95:23:dd:2d:53:03:94:5e:e5:8a:1a:53:63:04: cb:b8:72:7f:8c:09:df:61:20:7b:86:ae:b6:19:90:00:cf:94: 08:b7:35:ba:87:94:db:4f:58:6c:24:2f:9d:74:83:50:1a:82: 80:2d:43:dd:76:c5:a3:cd:5e:76:31:00:53:33:8b:d8:05:2f: bb:a2:77:17:5c:f5:6f:2a:9e:08:13:9a:f8:f8:88:34:08:77: 0f:e2:b3:57:c5:4d:60:4e:5c:27:3a:ba:59:57:9d:88:17:0c: f6:85:36:1b:1b:48:8b:e3:82:d7:e5:f2:85:98:c4:92:11:b0: 81:fa:dc:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEV0sxcpeb52VIKVttAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk YmIyMDZkNDQtZGRmZi00NjQyLWI4MGItYTE4MTY5NmRmY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9FoRkXGE5Nfba/K2mxc+KZPamrn5+3QqSfc Gnb8newRmwjHMhYKzmFVkyaLzoitwp4hyGJhnr4WSfb9sYfTAbkMiKAOnaJ3TN0b 3uXa7khD3EFn0xmvON0eeWpFAq356KJSufHSLbtlD44zHqy89aLjVSKP4U3bv/2R eexT7wYxRegb9+em+qUbnaTc94FiLhf4hzdbfU0/sSaqTR2Ucs62IsrKBXYO0Jis XH4bBxqBgVcPi73AO8/Fq3Ic4/ENZtscy5L0ZqBjLeVZALnIy37dUJ2xbVcG0RTu O0wPJ5bWgoyNfA4vAVMQAJ08UEEjq5Q0uy3T/srBa8AAygh0bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIigD9Z+NB1Ntlgh/zbYsXDvAkQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZDFiYzE1N2QtNDUyYy0z ZGY5LThiOGYtMGFmNDg5MTZhYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQuwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCQ19C9IjAhEwAVwqnCV+C5UVPKZq4Efh+df8SXb7AxE0PJ8QXwg9x of9W3ci/U70npPMvfa+rT+vNlrOsMWhIEpxeIQRzcN2gNkebhokBl3Korf3mherK 3si+LJEfDHHjcMdmpnifewO1yGY4jHtsF639PTC6wuGSk+fYcySq8r30lSPdLVMD lF7lihpTYwTLuHJ/jAnfYSB7hq62GZAAz5QItzW6h5TbT1hsJC+ddINQGoKALUPd dsWjzV52MQBTM4vYBS+7oncXXPVvKp4IE5r4+Ig0CHcP4rNXxU1gTlwnOrpZV52I Fwz2hTYbG0iL44LX5fKFmMSSEbCB+tww -----END CERTIFICATE-----Generated at Mon May 6 01:58:40 2024 by rpki-client on console-ams.rpki-client.org