$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa File: 254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa (raw, json) Hash identifier: 5C6bazXXJzbD2COpnlbctjB53qOqz3dg73jzwrvMLbs= Subject key identifier: 83:23:EF:21:66:A2:2A:B6:EE:4E:0F:A9:AC:E6:74:E8:0F:FD:27:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858452BD78C9339121F7F40D51EE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa Signing time: Mon 11 Mar 2024 10:40:08 +0000 ROA not before: Mon 11 Mar 2024 10:40:08 +0000 ROA not after: Sun 09 Jun 2024 10:40:08 +0000 asID: 20940 IP address blocks: 2600:1488:6480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2b:d7:8c:93:39:12:1f:7f:40:d5:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 11 10:40:08 2024 GMT Not After : Jun 9 10:40:08 2024 GMT Subject: CN=09186efa-18e2-4203-a0ff-00abc7570a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8f:f8:c8:ef:9d:0e:eb:f0:bb:b7:2b:0b:19: 41:67:47:29:72:ab:ce:7a:5c:d0:23:4b:ee:6c:a1: 11:8c:8c:3b:30:f7:f9:a7:50:0d:e5:1b:b1:9f:60: be:b4:e6:ca:92:d2:20:77:5d:bc:c8:05:1b:d5:53: 07:7f:21:8b:a5:71:c7:ec:c1:df:3e:99:7f:4c:be: aa:6f:20:37:d8:ed:91:b0:12:43:5e:16:91:fd:3b: 32:88:50:86:8a:2f:7c:80:b3:af:ee:05:5a:db:30: ad:5c:45:2a:9c:27:87:79:3f:b7:8c:46:eb:d6:96: bc:82:22:8e:c8:46:fb:78:92:83:e1:2c:f1:35:5e: 20:52:7f:20:27:ef:00:5e:c8:48:20:3a:e3:a3:f5: 65:8c:2d:0a:f2:72:7a:e1:45:11:7f:4e:16:21:69: 81:01:01:a0:3c:a3:11:b7:2a:f8:24:8b:18:5e:1d: 80:8a:a6:53:33:0e:04:aa:db:97:60:0a:a0:47:6c: 06:11:01:93:74:97:bf:4c:cc:c8:dd:52:00:69:17: f8:cc:c9:29:a5:ae:58:7f:75:04:89:c0:fb:1b:43: 33:21:0e:dd:97:7d:ae:ce:11:fb:50:00:c3:00:36: 1a:7e:ae:56:6e:25:51:b1:9f:b1:eb:41:58:f4:b5: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:EF:21:66:A2:2A:B6:EE:4E:0F:A9:AC:E6:74:E8:0F:FD:27:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6480::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e4:08:f0:f4:60:0c:48:9b:ac:40:c7:e4:18:b8:d1:25:ab: 05:27:a9:84:ad:56:0c:c6:4c:fd:fe:a0:2d:17:47:b7:62:79: 31:60:29:0e:49:54:1a:bb:99:2e:d8:c9:86:8b:56:31:e8:27: 86:6b:7b:9b:9a:de:e4:ea:69:40:61:33:4c:66:1d:56:27:10: 65:60:be:32:f3:0d:68:54:c9:57:b3:c9:d2:5c:49:11:4b:d8: 9b:6f:8a:7e:dd:33:7e:ea:f3:50:7a:ea:54:23:fd:fc:de:f8: 78:13:5d:ed:82:f8:6d:0f:52:3d:88:91:07:88:8e:81:9e:49: c8:42:be:31:74:98:ba:94:7b:5c:82:60:7d:d6:00:36:9f:33: fa:8d:36:23:e0:86:ed:ad:5e:29:5c:6a:c4:c3:86:61:0c:9c: de:b8:75:d3:e6:eb:70:bd:88:e0:87:79:43:14:62:21:35:4b: e2:21:38:08:47:10:44:55:36:e7:ab:b7:97:d0:d6:05:6e:a4: 2c:d5:b9:e2:69:66:25:c9:42:30:17:55:cc:ad:e6:99:dd:39: 21:63:32:71:ff:34:77:89:00:f8:5d:e1:4b:d9:2f:99:a7:2f: 3c:23:73:ad:49:bc:2d:c1:ae:6d:b8:78:05:d0:06:20:90:1e: 80:25:a6:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUr14yTORIff0DVHuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMxMTEwNDAwOFoXDTI0MDYwOTEwNDAwOFowLzEtMCsGA1UEAxMk MDkxODZlZmEtMThlMi00MjAzLWEwZmYtMDBhYmM3NTcwYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+I/4yO+dDuvwu7crCxlBZ0cpcqvOelzQI0vu bKERjIw7MPf5p1AN5Ruxn2C+tObKktIgd128yAUb1VMHfyGLpXHH7MHfPpl/TL6q byA32O2RsBJDXhaR/TsyiFCGii98gLOv7gVa2zCtXEUqnCeHeT+3jEbr1pa8giKO yEb7eJKD4SzxNV4gUn8gJ+8AXshIIDrjo/VljC0K8nJ64UURf04WIWmBAQGgPKMR tyr4JIsYXh2AiqZTMw4EqtuXYAqgR2wGEQGTdJe/TMzI3VIAaRf4zMkppa5Yf3UE icD7G0MzIQ7dl32uzhH7UADDADYafq5WbiVRsZ+x60FY9LVJ9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIMj7yFmoiq27k4PqazmdOgP/ScrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjU0YTUwYjYtNWQ5Zi0z MTA2LThiYjctYjY1ZjQ0OWMxYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHkCPD0YAxIm6xAx+QYuNElqwUnqYStVgzGTP3+oC0XR7dieTFg KQ5JVBq7mS7YyYaLVjHoJ4Zre5ua3uTqaUBhM0xmHVYnEGVgvjLzDWhUyVezydJc SRFL2Jtvin7dM37q81B66lQj/fze+HgTXe2C+G0PUj2IkQeIjoGeSchCvjF0mLqU e1yCYH3WADafM/qNNiPghu2tXilcasTDhmEMnN64ddPm63C9iOCHeUMUYiE1S+Ih OAhHEERVNuert5fQ1gVupCzVueJpZiXJQjAXVcyt5pndOSFjMnH/NHeJAPhd4UvZ L5mnLzwjc61JvC3Brm24eAXQBiCQHoAlpoM= -----END CERTIFICATE-----Generated at Fri May 17 02:15:19 2024 by rpki-client on console-ams.rpki-client.org