$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa File: 9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa (raw, json) Hash identifier: nl4C2FkYP4kgPyMa6e/tIUeE+o07AHYarnUKKCtdqbY= Subject key identifier: 72:DD:C1:F2:77:7A:C8:88:F0:A1:56:33:0B:6B:78:6D:E7:99:0C:F3 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F4328584555FD898E8E3E9FCDCD08B200 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa Signing time: Tue 26 Mar 2024 13:00:35 +0000 ROA not before: Tue 26 Mar 2024 13:00:35 +0000 ROA not after: Mon 24 Jun 2024 13:00:35 +0000 asID: 393732 IP address blocks: 2620:11d:500c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:55:fd:89:8e:8e:3e:9f:cd:cd:08:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Mar 26 13:00:35 2024 GMT Not After : Jun 24 13:00:35 2024 GMT Subject: CN=a0c4f75d-97f0-4bbd-943e-4e2c7b1d5cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:3f:25:7f:c8:8e:6f:fd:4f:99:65:b5:f9: c3:41:10:34:6a:60:9a:c4:68:ff:4b:32:28:b8:87: 3e:85:a1:ee:a3:5f:9f:97:c4:50:24:99:9a:a0:2b: f9:8b:be:7b:54:eb:e0:f9:fb:67:d7:8e:a8:e5:c6: bb:53:1e:37:f5:b3:21:ca:a2:fa:81:10:18:15:ef: c1:6f:57:3d:83:e7:5c:b9:02:ab:de:ac:32:15:c7: 75:d3:d2:ad:e1:7b:60:4a:7d:71:0f:58:98:cb:2a: ad:69:e8:d2:b8:5a:25:23:f5:53:0b:1a:7d:ca:e7: ae:d2:07:ad:ef:e6:55:3e:fd:39:d8:ba:44:69:00: 5f:a4:38:bc:15:9f:3e:53:52:d3:ec:c5:21:f9:f5: 28:55:46:30:b8:53:a0:5c:51:f7:56:99:27:16:19: cf:fc:c1:1e:96:6f:48:b5:09:48:e7:eb:4f:c7:ca: 09:65:81:9a:42:56:01:bb:98:c1:79:c2:f5:4a:7c: ed:12:15:d0:41:54:1e:11:fc:74:ce:c8:7a:2f:58: 26:19:ab:e2:c3:08:68:9a:f9:1a:03:dd:65:d9:9b: 45:28:8b:7f:36:10:ac:46:4e:79:51:ab:e2:65:7e: c8:23:7e:23:9d:6f:41:d4:94:fd:59:8d:91:ae:4d: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:C1:F2:77:7A:C8:88:F0:A1:56:33:0B:6B:78:6D:E7:99:0C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/9ca5ed04-3753-31ea-a1e7-257cbc7fb2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:500c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:52:fb:df:39:c2:ac:2a:85:6e:d9:a3:27:ba:fb:4e:97:87: 52:8d:b3:2a:c5:1b:13:39:4c:84:56:b4:6e:e4:3b:7e:53:b9: a3:05:3b:8f:eb:04:75:88:b4:58:9f:5e:49:e1:dc:99:5c:57: de:1b:5b:9e:03:8d:a5:b4:c9:c0:4d:1a:5a:76:22:8b:77:6f: 9e:20:47:95:bd:b4:c2:d0:4d:0b:3d:e4:46:d1:2e:0c:f4:bb: ac:0c:38:a0:5c:ed:b8:66:3b:1c:06:a1:69:6a:d4:7d:16:31: 85:57:04:6a:d1:57:43:77:e8:ad:9b:5a:47:a0:70:e1:a6:6f: d5:bc:f7:30:4f:79:70:87:86:56:18:e8:ea:62:57:46:35:9a: 62:a1:5a:c6:1f:a0:8d:43:b8:12:d1:fb:3d:7c:62:70:89:6c: d9:c6:d8:50:c7:d4:58:46:38:fb:78:8e:6f:19:f5:8f:fd:de: ec:eb:33:92:87:dc:04:31:a9:fa:fe:e1:a4:c7:2b:2c:98:b8: b1:5a:31:5a:34:8a:0f:5c:4f:02:11:d1:e7:c1:1a:4d:b0:1e: f1:fc:72:14:a0:79:89:e7:a8:ca:a8:f4:d0:6b:c7:37:05:fa: 0e:7f:eb:63:95:d0:03:1e:5a:5d:93:d6:8a:43:48:7a:7d:68: 2b:7c:9e:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVV/YmOjj6fzc0IsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI0MDMyNjEzMDAzNVoXDTI0MDYyNDEzMDAzNVowLzEtMCsGA1UEAxMk YTBjNGY3NWQtOTdmMC00YmJkLTk0M2UtNGUyYzdiMWQ1Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpE/JX/Ijm/9T5lltfnDQRA0amCaxGj/SzIo uIc+haHuo1+fl8RQJJmaoCv5i757VOvg+ftn146o5ca7Ux439bMhyqL6gRAYFe/B b1c9g+dcuQKr3qwyFcd109Kt4XtgSn1xD1iYyyqtaejSuFolI/VTCxp9yueu0get 7+ZVPv052LpEaQBfpDi8FZ8+U1LT7MUh+fUoVUYwuFOgXFH3VpknFhnP/MEelm9I tQlI5+tPx8oJZYGaQlYBu5jBecL1SnztEhXQQVQeEfx0zsh6L1gmGaviwwhomvka A91l2ZtFKIt/NhCsRk55UaviZX7II34jnW9B1JT9WY2Rrk0BwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLdwfJ3esiI8KFWMwtreG3nmQzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvOWNhNWVkMDQtMzc1My0z MWVhLWExZTctMjU3Y2JjN2ZiMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiABHVAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtS+985wqwqhW7Zoye6+06Xh1KNsyrFGxM5TIRWtG7kO35TuaMF O4/rBHWItFifXknh3JlcV94bW54DjaW0ycBNGlp2Iot3b54gR5W9tMLQTQs95EbR Lgz0u6wMOKBc7bhmOxwGoWlq1H0WMYVXBGrRV0N36K2bWkegcOGmb9W89zBPeXCH hlYY6OpiV0Y1mmKhWsYfoI1DuBLR+z18YnCJbNnG2FDH1FhGOPt4jm8Z9Y/93uzr M5KH3AQxqfr+4aTHKyyYuLFaMVo0ig9cTwIR0efBGk2wHvH8chSgeYnnqMqo9NBr xzcF+g5/62OV0AMeWl2T1opDSHp9aCt8niM= -----END CERTIFICATE-----Generated at Sat May 4 21:20:22 2024 by rpki-client on console-ams.rpki-client.org