$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa File: aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa (raw, json) Hash identifier: 3lzFKuBAG2lohRsswAd1BVf8SQ6kd9K7tmc9NHKrpLk= Subject key identifier: 75:5B:65:10:BB:23:E3:1F:94:9C:86:18:10:CF:AF:D2:51:0E:1A:D2 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285845936892A0D24C7E67592BA000 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 0 IP address blocks: 2607:6000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:92:a0:d2:4c:7e:67:59:2b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=3facfd47-5009-4b39-a3f2-22be41fb5a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:9c:45:98:e4:02:85:d3:88:7f:9b:30:cf: 65:f0:e9:98:da:20:b2:a8:fe:1a:1e:05:8e:01:ff: 70:01:da:af:d6:c3:c7:6e:61:69:ea:88:21:a7:77: 3f:87:94:9d:0f:1f:f2:51:ab:1e:00:36:b8:86:37: 24:6c:5e:1b:58:82:f4:93:06:ba:24:53:e7:e0:31: 84:e0:a8:cc:26:ed:ba:5a:25:8e:72:69:50:91:3d: a3:0a:88:06:63:9c:e4:05:cc:ac:21:6b:e6:4e:4e: e0:2c:d0:e5:02:56:77:a1:a3:2d:76:1e:09:fa:c0: 32:66:c1:5c:c0:2f:7b:1e:7d:19:c7:05:10:06:dc: f9:96:4b:f0:01:13:ed:1f:29:52:80:73:3c:9a:c5: c8:cb:fb:c4:50:5a:91:05:56:8c:f5:e3:bb:58:74: 06:b6:6c:5d:29:f4:bf:14:40:c4:e9:4a:33:31:b7: 73:fb:aa:d5:39:d1:db:ea:7c:ce:d1:97:c2:c2:28: ca:1e:78:f4:fc:15:45:2a:9d:32:ba:37:74:63:76: 91:b7:33:1c:20:da:6a:2b:de:cb:95:e8:17:1b:9e: b5:5a:fd:1b:fb:fd:1e:09:a8:7f:e2:8f:a7:8d:cf: eb:b6:2c:46:15:5d:c1:89:4e:23:93:89:33:08:05: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5B:65:10:BB:23:E3:1F:94:9C:86:18:10:CF:AF:D2:51:0E:1A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:13:d5:e7:f6:cd:0d:27:bc:79:4d:f3:06:8b:5a:c5:a2:e0: d1:49:c3:d1:29:d5:35:2c:1c:71:0a:b7:3d:5a:69:f2:34:b0: 9e:5d:f8:7d:39:ac:8a:1d:05:e5:39:a2:9d:73:7a:31:0e:9d: 5b:2e:4d:dd:47:6a:9c:65:32:64:92:e8:a1:75:4b:17:7f:15: 11:41:1f:77:0d:0c:5d:c1:33:90:c6:54:24:99:d4:99:df:29: 4c:02:7c:29:bb:ca:ee:07:ab:b5:d0:f5:2a:c3:5c:38:59:41: 37:2a:4d:2f:d5:28:49:4d:e8:99:37:d1:d3:76:b2:a0:f0:9c: 84:ea:60:f1:a2:dd:68:46:c7:c4:5e:ca:20:60:65:83:36:fd: 15:2f:66:d1:ea:4a:60:40:e1:87:9c:b3:6a:d1:2a:be:2d:7b: 89:4f:1f:93:4a:d4:70:35:6b:5a:74:40:79:2b:80:09:3f:18: 17:6a:86:3c:53:99:16:b8:44:b9:8b:11:6c:e7:fc:c5:0a:31: 76:b3:e9:9c:4c:82:53:a5:56:87:df:68:45:89:29:26:79:9d: 20:59:5d:09:2f:5b:7c:6c:bb:cd:9b:df:63:19:51:da:8f:d4: e4:02:83:98:e0:70:ec:41:4e:2f:33:df:de:f8:66:37:46:10: 29:f5:27:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWTaJKg0kx+Z1kroAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk M2ZhY2ZkNDctNTAwOS00YjM5LWEzZjItMjJiZTQxZmI1YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls2cRZjkAoXTiH+bMM9l8OmY2iCyqP4aHgWO Af9wAdqv1sPHbmFp6oghp3c/h5SdDx/yUaseADa4hjckbF4bWIL0kwa6JFPn4DGE 4KjMJu26WiWOcmlQkT2jCogGY5zkBcysIWvmTk7gLNDlAlZ3oaMtdh4J+sAyZsFc wC97Hn0ZxwUQBtz5lkvwARPtHylSgHM8msXIy/vEUFqRBVaM9eO7WHQGtmxdKfS/ FEDE6UozMbdz+6rVOdHb6nzO0ZfCwijKHnj0/BVFKp0yujd0Y3aRtzMcINpqK97L legXG561Wv0b+/0eCah/4o+njc/rtixGFV3BiU4jk4kzCAUlfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHVbZRC7I+MflJyGGBDPr9JRDhrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWE1MDM1ZjMtMmQyMS0z NTc0LThmYTMtOGU5YTM5NzNlMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgdgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNE9Xn9s0NJ7x5TfMGi1rFouDRScPRKdU1LBxxCrc9WmnyNLCeXfh9 OayKHQXlOaKdc3oxDp1bLk3dR2qcZTJkkuihdUsXfxURQR93DQxdwTOQxlQkmdSZ 3ylMAnwpu8ruB6u10PUqw1w4WUE3Kk0v1ShJTeiZN9HTdrKg8JyE6mDxot1oRsfE XsogYGWDNv0VL2bR6kpgQOGHnLNq0Sq+LXuJTx+TStRwNWtadEB5K4AJPxgXaoY8 U5kWuES5ixFs5/zFCjF2s+mcTIJTpVaH32hFiSkmeZ0gWV0JL1t8bLvNm99jGVHa j9TkAoOY4HDsQU4vM9/e+GY3RhAp9Sen -----END CERTIFICATE-----Generated at Fri Apr 26 11:16:12 2024 by rpki-client on console-ams.rpki-client.org