$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b223712-ad39-30a7-bd11-3991a0f851f3.roa File: 3b223712-ad39-30a7-bd11-3991a0f851f3.roa (raw, json) Hash identifier: S4VXod+hwtQHTfKkW309qIa+DkufAUGLhHP1xVAU5zY= Subject key identifier: F9:5B:77:4E:F3:FD:3F:6B:D6:21:23:11:4C:E2:B8:E1:57:2A:EC:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858452C4C02600A65C55CE6F1D940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b223712-ad39-30a7-bd11-3991a0f851f3.roa Signing time: Mon 11 Mar 2024 14:34:47 +0000 ROA not before: Mon 11 Mar 2024 14:34:47 +0000 ROA not after: Sun 09 Jun 2024 14:34:47 +0000 asID: 24319 IP address blocks: 2600:140b:7800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:4c:02:60:0a:65:c5:5c:e6:f1:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 11 14:34:47 2024 GMT Not After : Jun 9 14:34:47 2024 GMT Subject: CN=6a4153ab-a674-45a9-b5d1-9407629395ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:dd:40:8e:ab:d4:62:04:71:44:be:34:0c: 47:a4:19:00:dc:11:2e:09:41:e4:7b:24:c3:d2:c0: 9e:3a:b5:ae:15:c6:38:6e:83:c6:2b:7b:eb:4c:5a: 98:5b:5b:c3:a4:79:fc:b6:f6:6a:c2:59:79:5a:38: d7:49:ec:ff:f4:d0:2f:72:75:4b:51:e0:e7:76:26: eb:bc:6d:bf:05:82:75:f5:c4:b9:8f:c4:dd:af:b3: 47:ea:e1:ed:c8:c3:26:5d:c9:cf:95:21:27:5e:a7: c3:a9:65:b9:6c:26:1a:b5:a8:1f:01:eb:ed:0b:40: 75:52:f4:4a:f8:d6:3b:90:01:2c:9d:17:49:7c:26: bf:7a:41:93:0d:c1:95:b6:8e:5d:12:eb:f7:53:f1: 96:ce:18:4f:54:11:40:0a:33:e7:a2:b0:b6:fb:f8: fe:e7:b8:03:80:39:d7:82:15:98:fa:68:2e:27:0f: 49:93:23:f6:01:7a:49:96:48:16:36:e4:f6:b3:ef: 58:00:19:5a:13:20:7e:c8:15:dc:3f:35:fb:1a:70: be:06:2a:0d:72:5f:f2:95:30:84:3b:95:ec:f5:18: a0:e5:b8:97:e4:e4:1f:88:3a:99:50:ec:88:ce:0c: 2f:30:dc:27:25:d6:d8:53:d4:8a:13:be:48:74:24: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5B:77:4E:F3:FD:3F:6B:D6:21:23:11:4C:E2:B8:E1:57:2A:EC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b223712-ad39-30a7-bd11-3991a0f851f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:7800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9f:f8:8b:dd:bf:fd:d5:b3:30:60:26:aa:f8:06:a8:aa:d3: 0b:3c:fc:b1:f4:22:83:ff:df:4b:10:e9:94:3e:0e:80:49:fe: 74:d2:07:50:c2:1c:93:ca:88:18:f7:d7:48:1a:14:fa:f9:30: 1c:f3:14:9a:5a:96:dd:37:6a:18:b9:03:90:14:ef:1e:3c:dc: 04:70:9e:f3:f2:0a:97:46:2b:1a:b4:2a:e1:ba:08:91:e3:e0: 7c:01:31:97:a3:80:a8:53:69:38:7b:ce:e9:94:cb:26:f7:02: 86:78:45:ef:c4:74:d3:be:ae:f8:aa:9e:0a:ef:49:de:6a:1d: 43:ff:bf:c9:3d:0b:f3:1e:b8:c0:f1:a2:c1:6d:13:ba:ae:be: 0b:08:c5:30:e6:d4:83:f3:e9:53:37:6e:4d:0c:ec:e4:56:1e: 57:79:01:cc:7d:54:24:ab:c7:82:00:22:7e:e8:54:06:11:0e: f2:1b:dd:00:04:a1:24:84:9f:a9:a9:88:7b:4d:e0:bb:cf:2c: 24:99:1c:c1:76:2a:2a:ba:4f:07:73:d2:4c:6f:b6:2a:fe:44: 01:db:56:9f:e2:f8:b3:2b:2e:ca:c1:21:df:a7:69:b9:c2:02: a7:b7:96:52:8f:8e:4e:b2:ed:a4:1a:6b:c0:ab:c4:98:de:22: 8a:fd:e5:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUsTAJgCmXFXObx2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMxMTE0MzQ0N1oXDTI0MDYwOTE0MzQ0N1owLzEtMCsGA1UEAxMk NmE0MTUzYWItYTY3NC00NWE5LWI1ZDEtOTQwNzYyOTM5NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7vdQI6r1GIEcUS+NAxHpBkA3BEuCUHkeyTD 0sCeOrWuFcY4boPGK3vrTFqYW1vDpHn8tvZqwll5WjjXSez/9NAvcnVLUeDndibr vG2/BYJ19cS5j8Tdr7NH6uHtyMMmXcnPlSEnXqfDqWW5bCYatagfAevtC0B1UvRK +NY7kAEsnRdJfCa/ekGTDcGVto5dEuv3U/GWzhhPVBFACjPnorC2+/j+57gDgDnX ghWY+mguJw9JkyP2AXpJlkgWNuT2s+9YABlaEyB+yBXcPzX7GnC+BioNcl/ylTCE O5Xs9Rig5biX5OQfiDqZUOyIzgwvMNwnJdbYU9SKE75IdCR/jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPlbd07z/T9r1iEjEUziuOFXKux2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2IyMjM3MTItYWQzOS0z MGE3LWJkMTEtMzk5MWEwZjg1MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC3gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2f+Ivdv/3VszBgJqr4Bqiq0ws8/LH0IoP/30sQ6ZQ+DoBJ/nTS B1DCHJPKiBj310gaFPr5MBzzFJpalt03ahi5A5AU7x483ARwnvPyCpdGKxq0KuG6 CJHj4HwBMZejgKhTaTh7zumUyyb3AoZ4Re/EdNO+rviqngrvSd5qHUP/v8k9C/Me uMDxosFtE7quvgsIxTDm1IPz6VM3bk0M7ORWHld5Acx9VCSrx4IAIn7oVAYRDvIb 3QAEoSSEn6mpiHtN4LvPLCSZHMF2Kiq6Twdz0kxvtir+RAHbVp/i+LMrLsrBId+n abnCAqe3llKPjk6y7aQaa8CrxJjeIor95bQ= -----END CERTIFICATE-----Generated at Sat May 18 01:43:53 2024 by rpki-client on console-fra.rpki-client.org