$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa File: a5022391-3d98-3475-9d45-50bc5466d06d.roa (raw, json) Hash identifier: /HzH581eu78jTaUtLc8WX71Gs72DUxk24XY9QoWwqUI= Subject key identifier: C0:02:2A:F0:02:73:FE:3A:EC:C4:23:23:59:66:82:77:F2:AB:96:99 Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d Certificate serial: 010D0C9F432858453E42A18A9C53E5E4C66EA340 Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa Signing time: Mon 18 Mar 2024 01:00:25 +0000 ROA not before: Mon 18 Mar 2024 01:00:25 +0000 ROA not after: Sun 16 Jun 2024 01:00:25 +0000 asID: 395700 IP address blocks: 2620:10f:b000::/47 maxlen: 48 2620:10f:b070::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3e:42:a1:8a:9c:53:e5:e4:c6:6e:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d Validity Not Before: Mar 18 01:00:25 2024 GMT Not After : Jun 16 01:00:25 2024 GMT Subject: CN=6ead7030-611a-41ff-802b-eb8b60c84217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:d4:05:71:d1:22:ec:66:24:08:59:db:d2: 62:a0:63:ea:57:c4:92:32:54:3f:57:ab:59:9e:fc: 34:15:27:e8:02:22:97:a0:51:d5:dd:4a:ca:65:db: 88:31:0b:27:28:a6:5e:71:00:a5:5c:8b:ea:22:eb: ec:49:5b:7a:30:0c:67:8c:45:23:ae:17:05:2f:b9: 07:5d:96:0e:3f:99:e6:4c:b5:c6:32:7e:0a:3e:ab: 9e:63:48:87:b2:91:ab:d1:eb:00:27:3b:7e:db:21: 1d:6b:3e:61:00:7c:6b:16:ae:e1:d1:60:6f:dc:7f: 23:fe:32:e6:0a:94:9b:3f:e6:0e:e3:d1:03:e3:66: ac:e3:12:41:f4:a8:5f:ac:1c:8c:d8:66:40:b2:31: 6f:85:83:ec:68:b2:39:d4:60:e3:67:f1:a9:4b:71: 13:bd:ff:67:7f:98:d7:a4:74:1c:4a:3d:63:10:05: e2:bd:d2:5d:24:e1:66:83:40:ae:00:76:53:68:e9: 4e:fb:57:c0:c6:76:e3:93:1e:46:10:b8:7e:fa:7e: d0:cd:9a:0a:d5:99:20:d5:c5:b2:97:60:e3:ae:22: 99:4e:ae:2d:5e:1f:dd:5c:78:1c:44:e8:5c:f8:3f: 2f:d2:ce:64:41:99:11:90:5f:40:53:9b:f2:95:86: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:02:2A:F0:02:73:FE:3A:EC:C4:23:23:59:66:82:77:F2:AB:96:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/a5022391-3d98-3475-9d45-50bc5466d06d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl X509v3 Authority Key Identifier: keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:b000::/47 2620:10f:b070::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ed:1e:fe:cf:b4:97:cf:20:ec:6b:4c:ac:b5:9b:da:bc:0a: 2a:51:ae:dd:66:b4:07:37:1b:4e:c5:1e:09:e5:6c:e4:a0:1b: ac:c4:8e:79:ea:e3:af:95:48:e1:b3:29:bd:bb:08:03:aa:77: e9:7e:3a:7a:8b:ab:70:46:d6:8a:9b:69:b1:22:bd:7e:5a:b6: bc:c8:73:ca:73:2e:5f:98:d4:e8:8b:60:f4:bf:78:1a:66:6f: d2:1f:a9:dd:1e:e8:f0:9e:e9:19:bf:5c:94:03:a8:dd:39:48: f1:b7:64:56:f5:0d:5a:25:92:3b:52:e0:95:12:ff:f4:02:cc: 4c:93:d0:65:8c:08:7a:ec:9d:16:27:eb:22:55:3f:28:f5:2d: 4c:b7:c3:1d:d5:24:87:1b:31:3c:8b:5e:23:93:ca:c7:4d:50: 37:07:33:a8:f4:8a:86:a7:e3:38:d1:70:04:2e:d6:7a:0c:89: c8:c5:88:35:28:cd:ab:37:f1:15:e3:8f:d1:c8:ae:0a:18:11: e9:a2:fb:89:0c:f4:8e:5b:19:a4:95:a1:29:44:ec:4f:98:2f: b6:0d:8e:0b:1d:91:4e:3b:d2:18:58:80:59:80:a1:2f:2b:1f: f1:bd:37:bd:aa:46:9e:aa:6f:b7:77:b6:bb:88:ac:6d:4f:89: f1:fc:9c:c5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEU+QqGKnFPl5MZuo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz ZjBkMB4XDTI0MDMxODAxMDAyNVoXDTI0MDYxNjAxMDAyNVowLzEtMCsGA1UEAxMk NmVhZDcwMzAtNjExYS00MWZmLTgwMmItZWI4YjYwYzg0MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN/UBXHRIuxmJAhZ29JioGPqV8SSMlQ/V6tZ nvw0FSfoAiKXoFHV3UrKZduIMQsnKKZecQClXIvqIuvsSVt6MAxnjEUjrhcFL7kH XZYOP5nmTLXGMn4KPqueY0iHspGr0esAJzt+2yEdaz5hAHxrFq7h0WBv3H8j/jLm CpSbP+YO49ED42as4xJB9KhfrByM2GZAsjFvhYPsaLI51GDjZ/GpS3ETvf9nf5jX pHQcSj1jEAXivdJdJOFmg0CuAHZTaOlO+1fAxnbjkx5GELh++n7QzZoK1Zkg1cWy l2DjriKZTq4tXh/dXHgcROhc+D8v0s5kQZkRkF9AU5vylYbDfwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMACKvACc/467MQjI1lmgnfyq5aZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvYTUwMjIzOTEtM2Q5OC0z NDc1LTlkNDUtNTBiYzU0NjZkMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1 M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz MzQ0NTNmMGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBJiABD7AA AwcBJiABD7BwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAvtHv7PtJfPIOxrTKy1m9q8CipRrt1mtAc3G07F HgnlbOSgG6zEjnnq46+VSOGzKb27CAOqd+l+OnqLq3BG1oqbabEivX5atrzIc8pz Ll+Y1OiLYPS/eBpmb9Ifqd0e6PCe6Rm/XJQDqN05SPG3ZFb1DVolkjtS4JUS//QC zEyT0GWMCHrsnRYn6yJVPyj1LUy3wx3VJIcbMTyLXiOTysdNUDcHM6j0ioan4zjR cAQu1noMicjFiDUozas38RXjj9HIrgoYEemi+4kM9I5bGaSVoSlE7E+YL7YNjgsd kU470hhYgFmAoS8rH/G9N72qRp6qb7d3truIrG1PifH8nMU= -----END CERTIFICATE-----Generated at Sat Jun 1 00:15:56 2024 by rpki-client on console-ams.rpki-client.org