$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa File: 611c5848-7847-37af-bcd8-ea93e742fac5.roa (raw, json) Hash identifier: MSxmkJXiOWwiN2qxTnIs7a7BCE6/eSp1wcR0Kftf/uk= Subject key identifier: 26:E8:B4:4E:31:A5:A2:84:DB:B6:DA:0D:AF:94:C7:3D:A1:2A:B9:23 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F432858458B088BB0C2D0DA7383626B00 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa Signing time: Sun 14 Apr 2024 13:00:34 +0000 ROA not before: Sun 14 Apr 2024 13:00:34 +0000 ROA not after: Sat 13 Jul 2024 13:00:34 +0000 asID: 136473 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8b:08:8b:b0:c2:d0:da:73:83:62:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Apr 14 13:00:34 2024 GMT Not After : Jul 13 13:00:34 2024 GMT Subject: CN=0d4855ee-14f2-4b04-b813-76393951090f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:59:b2:89:74:86:92:20:39:8a:66:e7:76: 68:dd:9a:df:36:24:83:19:4e:87:56:b8:cb:f9:43: 46:f0:88:23:ef:b4:47:0d:7f:dc:a8:32:f9:50:c3: a6:2e:ef:17:50:29:e2:6a:ec:5d:c0:5e:45:5e:f6: 45:32:14:74:45:06:a4:9d:98:d0:5f:cd:e1:22:2c: e0:b9:08:0d:b4:bf:6a:b0:c6:36:af:cf:c0:50:7f: cb:b8:7e:ce:d2:df:b8:fa:3c:27:86:40:cd:d9:99: 34:3d:ad:e2:30:0c:57:b0:2f:3c:39:b1:84:dc:34: a0:1f:1f:c2:7f:2d:87:c4:48:3a:10:9e:36:ef:f9: d9:ca:72:07:94:d3:35:16:48:c8:f8:0e:57:41:40: 07:ec:67:90:cd:ce:6e:d4:23:00:65:f7:6a:9e:74: 18:3e:94:a0:b6:a2:ab:a8:de:b9:5a:00:88:fc:56: bc:93:63:ea:7d:bc:13:a9:17:0f:1c:b3:9e:7e:eb: 19:c4:a7:a2:65:6e:f1:d1:6f:35:06:58:73:df:ee: ef:9e:62:24:a4:b0:07:7f:24:c4:43:74:a3:e5:d9: 9b:fb:40:47:0a:f7:a5:f8:bc:2f:e3:8f:0a:69:55: 50:0c:7c:27:d5:f6:50:6f:9d:69:f3:01:1d:94:4c: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:B4:4E:31:A5:A2:84:DB:B6:DA:0D:AF:94:C7:3D:A1:2A:B9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:53:2f:c8:dd:13:72:c3:23:a0:e1:a6:72:3c:41:23:32:3a: 94:54:6d:d4:c9:ee:79:d6:51:15:07:57:fa:36:14:6b:e9:08: 41:9e:d8:1f:b2:2f:17:6d:f2:df:60:9a:5f:ac:09:86:f9:61: b9:66:f1:5b:46:29:ad:27:9c:ff:66:c1:47:56:18:79:29:54: ca:2c:c8:0d:15:f1:e5:a4:ed:e3:30:d4:ed:b8:20:b7:70:12: ef:de:aa:6c:37:79:18:4a:87:93:fd:bc:2a:67:fc:56:3f:6b: 1c:d3:d7:05:20:79:57:a0:8f:48:ef:48:b1:b4:a2:c2:2f:f9: c6:31:80:ed:6f:0f:4d:b7:da:d5:b5:bb:97:b1:27:74:41:f6: 0e:3d:e2:30:69:42:cd:78:4c:53:82:7c:86:49:df:9f:e1:3f: ea:86:f3:03:cc:eb:84:05:0f:8e:0e:a5:bc:44:b0:b4:85:bb: d7:4d:c7:53:2b:a9:be:2f:41:08:e1:7f:a7:49:3c:02:87:bd: 5c:3f:99:3b:76:47:bb:de:e4:8b:d3:63:6b:7b:1d:cb:43:d5: fe:f8:7c:19:2a:b0:c2:ad:7c:89:c7:9b:75:64:8a:77:90:f9: bc:69:82:aa:46:00:e8:f6:4e:9b:c8:62:6e:44:f0:48:68:c6: 88:6f:89:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWLCIuwwtDac4NiawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk MGQ0ODU1ZWUtMTRmMi00YjA0LWI4MTMtNzYzOTM5NTEwOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+9Zsol0hpIgOYpm53Zo3ZrfNiSDGU6HVrjL +UNG8Igj77RHDX/cqDL5UMOmLu8XUCniauxdwF5FXvZFMhR0RQaknZjQX83hIizg uQgNtL9qsMY2r8/AUH/LuH7O0t+4+jwnhkDN2Zk0Pa3iMAxXsC88ObGE3DSgHx/C fy2HxEg6EJ427/nZynIHlNM1FkjI+A5XQUAH7GeQzc5u1CMAZfdqnnQYPpSgtqKr qN65WgCI/Fa8k2PqfbwTqRcPHLOefusZxKeiZW7x0W81Blhz3+7vnmIkpLAHfyTE Q3Sj5dmb+0BHCvel+Lwv448KaVVQDHwn1fZQb51p8wEdlEz1rQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCbotE4xpaKE27baDa+Uxz2hKrkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNjExYzU4NDgtNzg0Ny0z N2FmLWJjZDgtZWE5M2U3NDJmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFUy/I3RNywyOg4aZyPEEjMjqUVG3Uye551lEVB1f6NhRr6QhBntgf si8XbfLfYJpfrAmG+WG5ZvFbRimtJ5z/ZsFHVhh5KVTKLMgNFfHlpO3jMNTtuCC3 cBLv3qpsN3kYSoeT/bwqZ/xWP2sc09cFIHlXoI9I70ixtKLCL/nGMYDtbw9Nt9rV tbuXsSd0QfYOPeIwaULNeExTgnyGSd+f4T/qhvMDzOuEBQ+ODqW8RLC0hbvXTcdT K6m+L0EI4X+nSTwCh71cP5k7dke73uSL02Nrex3LQ9X++HwZKrDCrXyJx5t1ZIp3 kPm8aYKqRgDo9k6byGJuRPBIaMaIb4ld -----END CERTIFICATE-----Generated at Thu May 2 04:21:11 2024 by rpki-client on console-ams.rpki-client.org