$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa File: b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json) Hash identifier: EOzK+3Qgl9OTD9xuQx9C0tcueQOwFIORtNnLf2CQuog= Subject key identifier: CE:AB:9A:65:0F:09:38:80:89:59:CA:1C:E9:25:6F:58:58:95:90:3A Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F43285845963354EA517A5B117CD16180 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa Signing time: Thu 18 Apr 2024 13:00:33 +0000 ROA not before: Thu 18 Apr 2024 13:00:33 +0000 ROA not after: Wed 17 Jul 2024 13:00:33 +0000 asID: 53507 IP address blocks: 2604:56c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:33:54:ea:51:7a:5b:11:7c:d1:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: Apr 18 13:00:33 2024 GMT Not After : Jul 17 13:00:33 2024 GMT Subject: CN=9cd65fc8-774a-482d-bde2-93f73828396a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:c3:ac:91:6f:25:d6:d9:63:d3:02:a9:03: 2a:0a:0c:4d:4e:cc:29:32:bc:79:3f:d8:f4:77:98: 21:52:45:d0:4e:db:79:4d:00:c5:45:a3:4a:04:79: 77:34:7f:97:21:13:6b:77:3b:9c:4d:a4:ad:be:9b: 21:0f:f9:88:3a:47:1d:81:f7:45:82:17:cf:70:1a: f5:a5:5b:89:8a:9e:4e:f8:fd:63:b5:79:2a:00:ee: c4:6d:e2:02:e5:d1:1f:f8:9b:dc:97:ab:f9:a1:15: 0b:7a:fd:20:91:ee:ea:b6:56:5e:4d:12:97:c9:6c: 24:70:02:f0:4e:d3:fb:51:f5:03:f8:1d:de:11:cb: 3d:b5:c3:14:10:cb:ae:b5:6d:41:53:ca:69:00:e2: 9e:f0:83:06:16:0d:83:e1:4e:fe:98:78:38:de:f7: 23:ab:6f:eb:3b:4c:fc:4b:5e:ec:1e:3e:d4:43:07: 25:75:e5:28:89:d9:dd:92:28:e2:b1:f6:b3:34:ff: 9f:88:89:c5:2b:50:e1:be:8a:82:0b:37:e3:b9:78: 6f:0a:21:50:2c:d8:15:d2:3f:4c:06:fb:28:3d:6b: 2e:2f:83:d7:db:63:74:46:ab:0f:3f:1d:20:87:19: 32:f5:1c:c2:76:ea:b1:20:f6:78:20:eb:9b:33:55: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AB:9A:65:0F:09:38:80:89:59:CA:1C:E9:25:6F:58:58:95:90:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv6: 2604:56c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a8:bb:7f:0d:d7:68:d0:7e:20:d2:09:f7:9a:a3:00:d6:10: 5f:78:55:e6:87:88:0f:1a:7f:4d:40:65:c1:e0:74:41:d7:c0: 68:80:e5:dc:9a:a6:e6:da:ce:7e:d8:c4:63:78:c3:37:81:64: 0c:5d:99:d0:26:aa:b4:22:ab:48:02:d1:b2:9c:4a:de:1d:c3: 72:76:b9:dc:01:46:c8:4a:a2:29:60:55:5c:c3:b2:3b:73:0f: 7a:9b:17:a1:84:37:2f:c9:62:43:0a:93:0f:ee:c7:10:79:d7: 2e:d0:15:9b:3d:68:f8:b0:f1:35:5c:7b:19:6f:7d:15:56:78: 2d:10:5b:4b:17:88:56:d3:1f:6a:d0:58:80:f9:18:ec:d0:3e: 78:ff:fd:4b:6a:f2:67:02:98:1f:3e:0b:7a:1b:3d:b9:fc:d8: 84:cc:8e:0f:a0:2a:ed:89:7e:a1:67:9f:bd:7f:b3:d2:86:34: 2d:d3:e8:4f:79:7d:cc:22:2a:d5:a0:b4:0d:5e:a4:c7:0f:c7: 1c:f7:70:aa:92:8d:32:ad:02:27:42:38:54:e5:df:1d:d1:8c: bc:f0:f1:c1:9a:ce:57:bb:b4:68:28:a1:21:7a:06:5c:af:fb: 1c:e1:38:86:56:74:e4:c3:da:fc:99:59:54:82:6c:eb:b8:ab: 77:21:a8:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWWM1TqUXpbEXzRYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk OWNkNjVmYzgtNzc0YS00ODJkLWJkZTItOTNmNzM4MjgzOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qvDrJFvJdbZY9MCqQMqCgxNTswpMrx5P9j0 d5ghUkXQTtt5TQDFRaNKBHl3NH+XIRNrdzucTaStvpshD/mIOkcdgfdFghfPcBr1 pVuJip5O+P1jtXkqAO7EbeIC5dEf+Jvcl6v5oRULev0gke7qtlZeTRKXyWwkcALw TtP7UfUD+B3eEcs9tcMUEMuutW1BU8ppAOKe8IMGFg2D4U7+mHg43vcjq2/rO0z8 S17sHj7UQwcldeUoidndkijisfazNP+fiInFK1DhvoqCCzfjuXhvCiFQLNgV0j9M BvsoPWsuL4PX22N0RqsPPx0ghxky9RzCduqxIPZ4IOubM1WEpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM6rmmUPCTiAiVnKHOklb1hYlZA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvYjlhMjZjZjEtZTJhNy0z MDVkLThhYjgtNzFlMDRiNDQ0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPqLt/Dddo0H4g0gn3mqMA1hBfeFXmh4gPGn9NQGXB4HRB18BogOXc mqbm2s5+2MRjeMM3gWQMXZnQJqq0IqtIAtGynEreHcNydrncAUbISqIpYFVcw7I7 cw96mxehhDcvyWJDCpMP7scQedcu0BWbPWj4sPE1XHsZb30VVngtEFtLF4hW0x9q 0FiA+Rjs0D54//1LavJnApgfPgt6Gz25/NiEzI4PoCrtiX6hZ5+9f7PShjQt0+hP eX3MIirVoLQNXqTHD8cc93Cqko0yrQInQjhU5d8d0Yy88PHBms5Xu7RoKKEhegZc r/sc4TiGVnTkw9r8mVlUgmzruKt3Iajm -----END CERTIFICATE-----Generated at Mon May 6 22:49:11 2024 by rpki-client on console-ams.rpki-client.org