$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa File: 3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa (raw, json) Hash identifier: 7D5j03T3aWQ/wKZugfjIm3nAgiiannijpeqsWrJV+cE= Subject key identifier: 1A:E1:B1:84:27:88:4E:74:28:AC:89:84:17:1D:5A:56:E4:E2:D1:8E Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F4328584526A5AB82C7BE4F6B70EFCE60 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa Signing time: Sat 09 Mar 2024 14:00:31 +0000 ROA not before: Sat 09 Mar 2024 14:00:31 +0000 ROA not after: Fri 07 Jun 2024 13:00:31 +0000 asID: 14618 IP address blocks: 2620:135:7018::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:26:a5:ab:82:c7:be:4f:6b:70:ef:ce:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Mar 9 14:00:31 2024 GMT Not After : Jun 7 13:00:31 2024 GMT Subject: CN=abf7f54f-571f-4435-89d4-d0ad4f893d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:e6:05:86:37:d9:33:fa:cc:13:d5:44:f9: 0c:0c:36:af:b3:09:94:19:15:f2:39:a5:c1:b0:60: ed:33:30:20:85:96:91:ac:de:b0:a3:36:cf:23:0d: 65:68:93:57:fc:dd:af:52:8c:33:8c:4e:be:78:62: 91:bd:7f:53:0c:db:e4:c0:b8:13:ee:ce:32:74:b2: 7b:02:41:58:00:44:11:2f:11:3a:52:35:f0:0e:76: ed:79:95:e5:74:63:17:ae:c2:af:2f:5f:7c:94:26: d4:21:ff:7e:01:11:80:bd:ed:21:2d:f8:c5:e5:2f: 60:71:1b:5e:8e:5a:0e:8d:71:6c:a4:aa:46:3e:f6: 92:50:82:89:5a:8b:0e:94:a3:77:4e:b9:64:95:14: 52:01:f6:8d:fc:5e:c8:c6:bc:7e:3b:b6:af:2a:76: 58:2f:56:69:f2:2f:83:56:96:31:54:b5:74:6d:e2: 5b:06:69:be:d5:f4:43:0a:a7:2d:93:24:6f:a5:21: f8:24:e0:6c:ce:22:13:f6:d7:81:af:ba:5b:54:17: 68:9e:4d:c0:01:b3:0e:06:93:d7:a1:d8:02:e7:c3: 31:1d:3d:75:25:b0:d5:c8:af:81:5b:df:8b:69:c5: c5:6e:00:a9:d1:9e:a4:cd:48:67:af:d2:4f:45:d6: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E1:B1:84:27:88:4E:74:28:AC:89:84:17:1D:5A:56:E4:E2:D1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/3a4e1ddc-b802-3982-afa2-4be29cd9fa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7018::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e1:13:46:cf:72:e4:7a:d2:7c:40:79:8d:df:90:25:dd:38: 57:87:83:91:a7:ed:31:ae:21:3b:30:3e:04:13:3c:6f:fa:bd: d6:aa:9b:34:72:1a:b5:c4:c8:48:90:4e:41:ed:f2:5a:58:ff: fc:ea:8e:a4:06:8f:7d:f8:2c:3f:91:86:53:90:9d:49:50:b8: 07:e9:43:9e:18:69:57:e0:fc:58:9a:92:2d:33:bf:33:cc:08: f5:2d:9e:79:82:01:41:48:ac:60:97:61:b4:da:9a:6a:d3:24: eb:ec:e5:be:26:f6:72:96:1f:1c:5d:19:ad:50:32:fa:85:ba: 93:44:52:5d:d8:43:f4:d8:4f:d4:ee:a5:0d:74:cc:77:65:34: 5d:78:22:c4:2b:9e:14:95:e9:c3:bf:d6:d2:ef:58:c8:4f:28: 3f:fd:92:7e:21:44:ff:c8:e4:22:a6:a3:8e:d6:75:dd:c1:de: bd:7c:24:1d:b5:da:df:f8:7b:0f:ae:31:23:8c:23:91:90:a6: 62:c4:b8:0e:d0:9c:0d:0a:b9:ae:95:6b:b7:e0:e5:92:b0:0a: 0e:7d:2e:8e:56:36:16:77:8c:4c:98:ab:06:f4:9e:c6:3f:a2: b3:34:37:0b:f4:c2:30:18:d0:0b:3b:c2:9f:8c:5a:42:d4:1f: 8f:e2:c1:06 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEUmpauCx75Pa3DvzmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI0MDMwOTE0MDAzMVoXDTI0MDYwNzEzMDAzMVowLzEtMCsGA1UEAxMk YWJmN2Y1NGYtNTcxZi00NDM1LTg5ZDQtZDBhZDRmODkzZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY/mBYY32TP6zBPVRPkMDDavswmUGRXyOaXB sGDtMzAghZaRrN6wozbPIw1laJNX/N2vUowzjE6+eGKRvX9TDNvkwLgT7s4ydLJ7 AkFYAEQRLxE6UjXwDnbteZXldGMXrsKvL198lCbUIf9+ARGAve0hLfjF5S9gcRte jloOjXFspKpGPvaSUIKJWosOlKN3TrlklRRSAfaN/F7Ixrx+O7avKnZYL1Zp8i+D VpYxVLV0beJbBmm+1fRDCqctkyRvpSH4JOBsziIT9teBr7pbVBdonk3AAbMOBpPX odgC58MxHT11JbDVyK+BW9+LacXFbgCp0Z6kzUhnr9JPRdZfawIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFBrhsYQniE50KKyJhBcdWlbk4tGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvM2E0ZTFkZGMtYjgwMi0z OTgyLWFmYTItNGJlMjljZDlmYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAY ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA14RNGz3LketJ8QHmN35Al3ThXh4ORp+0xriE7MD4EEzxv+r3W qps0chq1xMhIkE5B7fJaWP/86o6kBo99+Cw/kYZTkJ1JULgH6UOeGGlX4PxYmpIt M78zzAj1LZ55ggFBSKxgl2G02ppq0yTr7OW+JvZylh8cXRmtUDL6hbqTRFJd2EP0 2E/U7qUNdMx3ZTRdeCLEK54UlenDv9bS71jITyg//ZJ+IUT/yOQipqOO1nXdwd69 fCQdtdrf+HsPrjEjjCORkKZixLgO0JwNCrmulWu34OWSsAoOfS6OVjYWd4xMmKsG 9J7GP6KzNDcL9MIwGNALO8KfjFpC1B+P4sEG -----END CERTIFICATE-----Generated at Thu May 2 04:28:17 2024 by rpki-client on console-fra.rpki-client.org