$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa File: 53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json) Hash identifier: sA2FNeoU5c6A7RROSxLoV/x4M6izbPzLXx1aqK6jwAY= Subject key identifier: 11:D4:91:33:FD:B3:5D:61:63:FE:4D:C1:23:D9:39:C3:C3:70:CC:61 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584582A88C6B983D3585C3A49AC0 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 32181 IP address blocks: 2001:1850::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:8c:6b:98:3d:35:85:c3:a4:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=d92e67bd-7a2d-4abd-bd97-87b739c127d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:70:f2:73:c3:cd:1c:10:5b:30:cb:39:01: 9b:ea:35:b6:d1:ed:2b:bf:61:a2:07:d4:47:26:79: 9c:5c:3d:ca:2b:5a:64:4e:77:04:e9:a5:c2:f3:4a: 2e:c6:5e:93:91:ca:3a:10:0c:22:bf:8c:47:ef:81: c5:97:36:96:8e:43:be:7d:d0:43:e0:1a:b7:82:6a: d1:81:e2:20:c4:de:59:73:b7:e6:06:b0:e0:73:9b: 99:f5:89:11:af:06:65:30:59:a3:49:36:c2:ec:33: b4:11:b8:84:e3:9b:77:2d:44:2a:19:63:f5:9e:96: 8b:38:e9:08:ac:3d:23:9c:d5:ff:44:30:8f:99:bf: 6b:5b:ad:ce:dc:ec:2f:06:cf:20:eb:19:9d:c8:06: ab:11:f5:e0:b7:69:ac:bf:25:bf:77:94:ec:fd:66: 35:15:e4:e7:4c:b1:23:0d:00:00:7a:61:b7:3c:8e: b2:da:34:1f:08:06:03:2f:d8:06:8e:5b:73:13:30: 15:71:6d:36:71:fd:13:d6:9e:ee:4b:df:56:8b:da: 5b:f1:1b:d6:3e:e0:95:72:9d:fa:a7:c7:05:37:a6: ae:3d:19:4c:4b:49:2d:8e:a0:cc:cc:3c:f4:f7:f0: 87:a8:db:5d:a0:1a:13:ae:e9:80:67:46:69:9b:d4: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:91:33:FD:B3:5D:61:63:FE:4D:C1:23:D9:39:C3:C3:70:CC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv6: 2001:1850::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0b:67:79:6e:8f:19:74:dc:bc:aa:ea:56:42:20:fa:49:94: c5:02:39:08:3e:63:5c:e1:6a:cf:86:6a:5d:24:14:1e:4d:35: 5a:f8:9a:bb:e4:f8:ca:af:43:13:7c:b6:09:2e:ba:21:08:d9: 87:83:a1:c2:8d:f2:de:f9:b5:59:ff:5b:a2:b5:d4:2f:50:e1: 79:f7:85:bb:3d:34:cb:5a:eb:11:4e:e5:43:2e:30:24:0e:6b: df:e7:47:01:43:40:fd:e9:76:7c:6f:e0:38:e4:6d:13:b9:ee: 15:29:1d:51:5c:2f:2e:e9:5c:07:8b:9f:75:83:0d:82:73:3b: 1b:01:5e:cf:17:f1:da:76:f2:05:e5:b2:0d:67:3c:e8:fc:55: 46:09:c8:c2:cc:da:b9:35:2d:43:34:16:bc:e9:d6:56:90:c1: 88:71:69:a2:56:a8:c8:9c:af:25:63:23:8c:44:71:59:bd:7c: 6a:9d:a7:00:65:57:e1:b6:42:ac:c9:13:e4:08:7a:f3:71:71: 07:3d:93:f6:ff:84:9c:1a:9b:88:11:44:ff:59:d6:5c:28:19: f7:cb:fa:68:e4:6a:cd:e9:aa:bc:f0:91:56:52:53:29:44:d3: 67:7b:35:4c:c9:8e:df:34:63:e7:a0:7e:2d:37:fc:95:7c:2c: 41:20:d5:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWCqIxrmD01hcOkmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk ZDkyZTY3YmQtN2EyZC00YWJkLWJkOTctODdiNzM5YzEyN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs5w8nPDzRwQWzDLOQGb6jW20e0rv2GiB9RH JnmcXD3KK1pkTncE6aXC80ouxl6Tkco6EAwiv4xH74HFlzaWjkO+fdBD4Bq3gmrR geIgxN5Zc7fmBrDgc5uZ9YkRrwZlMFmjSTbC7DO0EbiE45t3LUQqGWP1npaLOOkI rD0jnNX/RDCPmb9rW63O3OwvBs8g6xmdyAarEfXgt2msvyW/d5Ts/WY1FeTnTLEj DQAAemG3PI6y2jQfCAYDL9gGjltzEzAVcW02cf0T1p7uS99Wi9pb8RvWPuCVcp36 p8cFN6auPRlMS0ktjqDMzDz09/CHqNtdoBoTrumAZ0Zpm9S6mwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBHUkTP9s11hY/5NwSPZOcPDcMxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTNkN2VhNjgtMzUxZS0z OGMzLTkzN2UtOGYyZTQ4ZTcwYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARC2d5bo8ZdNy8qupWQiD6SZTFAjkIPmNc4WrPhmpdJBQeTTVa+Jq7 5PjKr0MTfLYJLrohCNmHg6HCjfLe+bVZ/1uitdQvUOF594W7PTTLWusRTuVDLjAk Dmvf50cBQ0D96XZ8b+A45G0Tue4VKR1RXC8u6VwHi591gw2CczsbAV7PF/HadvIF 5bINZzzo/FVGCcjCzNq5NS1DNBa86dZWkMGIcWmiVqjInK8lYyOMRHFZvXxqnacA ZVfhtkKsyRPkCHrzcXEHPZP2/4ScGpuIEUT/WdZcKBn3y/po5GrN6aq88JFWUlMp RNNnezVMyY7fNGPnoH4tN/yVfCxBINVQ -----END CERTIFICATE-----Generated at Sun May 19 00:38:09 2024 by rpki-client on console-ams.rpki-client.org