$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa File: 7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa (raw, json) Hash identifier: a6lMyqvvKwrpU5YI4c7cZ9TGdeLznWaw3l7WRpVaGcw= Subject key identifier: 98:1C:31:FB:37:19:6B:5E:9A:4E:95:68:EB:B8:02:9C:6E:12:D3:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584523BB5A7112688936ACBE3580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa Signing time: Fri 08 Mar 2024 12:56:52 +0000 ROA not before: Fri 08 Mar 2024 12:56:52 +0000 ROA not after: Thu 06 Jun 2024 11:56:52 +0000 asID: 20940 IP address blocks: 2600:140b:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:23:bb:5a:71:12:68:89:36:ac:be:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 8 12:56:52 2024 GMT Not After : Jun 6 11:56:52 2024 GMT Subject: CN=667f7d81-281e-488b-8fde-a044ea9428fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:de:76:71:1f:e1:1e:7a:ae:dc:97:8f:77:75: e2:93:e2:98:e7:36:40:e2:b5:b4:8f:e8:e2:c6:0c: 1c:1b:eb:04:5b:62:03:e2:30:43:d1:17:46:c8:a4: 3b:7c:a6:94:d0:4f:6d:29:ef:37:43:ea:72:4d:cc: c6:b7:95:03:f9:d2:de:3e:9d:87:ae:d5:66:70:d4: 9a:f4:1a:85:38:a5:c0:36:4b:69:de:22:1b:e5:75: 98:97:85:59:80:93:45:b8:30:6c:c6:60:b1:18:0c: c9:ca:a7:67:1b:57:fb:0a:02:f3:4f:7c:c0:13:fb: e0:cf:ba:e3:62:58:80:63:60:b2:32:4f:c8:9c:a1: c3:c9:ee:6d:55:64:7f:6f:9c:60:9d:40:57:70:55: 6d:dd:c2:0a:ee:a6:21:1b:3a:61:fb:47:63:fc:55: cb:f3:6e:46:2f:cb:d3:9a:95:75:fe:2e:67:c8:74: 47:4b:8a:ee:48:b4:78:32:64:be:9b:6d:cf:8a:96: b7:28:39:09:ce:81:8d:d8:7f:cb:3a:29:8f:e7:d7: 87:1c:81:6e:1f:73:91:5c:38:e4:19:82:76:75:86: b7:9c:0a:ec:2b:26:b0:98:1f:eb:b2:77:76:e7:12: ac:fc:bf:2c:95:f7:b4:eb:17:fe:58:7f:aa:7d:57: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1C:31:FB:37:19:6B:5E:9A:4E:95:68:EB:B8:02:9C:6E:12:D3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:c800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c7:2d:af:08:08:53:97:7e:2e:e0:72:23:7a:6d:9b:f2:b3: 94:c8:be:e7:41:0f:7d:84:74:80:aa:d1:93:90:c3:da:c8:c1: 70:a4:34:c4:5a:48:11:07:9a:71:5b:89:90:5b:04:7b:0e:21: 73:22:bb:35:ce:8f:27:82:da:5b:df:86:29:50:57:52:ff:9b: 5a:e6:d4:82:6d:fb:b0:be:6d:74:89:f4:f8:bb:a6:8b:f0:5e: c2:60:ac:9a:1c:66:b4:cb:b9:ee:95:aa:64:11:a0:5f:d8:c7: 58:44:15:2f:de:26:04:ef:d4:ec:33:6b:57:e6:2c:b8:d8:62: 64:b8:95:b6:31:ce:f6:23:f6:a8:fd:45:33:d0:86:30:0c:8d: 26:a2:b6:ab:2e:9d:68:20:65:0e:e9:b8:91:12:e1:a0:30:3b: 0f:30:de:62:0e:a0:ca:8f:48:ae:f5:22:cb:a7:41:db:7b:08: ca:3e:8b:cd:20:d1:4c:73:50:9b:4a:ef:13:c1:df:50:bb:c9: 16:e9:3d:80:26:7e:4b:bf:5a:ee:25:07:1d:71:91:81:4a:24: a2:9d:df:45:4c:12:e1:bf:40:cb:bd:2a:60:fc:33:e5:e9:70: 4f:e9:9a:12:69:8b:8e:9b:ed:2a:86:1d:d3:28:6d:3d:96:84: b5:00:2d:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUju1pxEmiJNqy+NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDMwODEyNTY1MloXDTI0MDYwNjExNTY1MlowLzEtMCsGA1UEAxMk NjY3ZjdkODEtMjgxZS00ODhiLThmZGUtYTA0NGVhOTQyOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt52cR/hHnqu3JePd3Xik+KY5zZA4rW0j+ji xgwcG+sEW2ID4jBD0RdGyKQ7fKaU0E9tKe83Q+pyTczGt5UD+dLePp2HrtVmcNSa 9BqFOKXANktp3iIb5XWYl4VZgJNFuDBsxmCxGAzJyqdnG1f7CgLzT3zAE/vgz7rj YliAY2CyMk/InKHDye5tVWR/b5xgnUBXcFVt3cIK7qYhGzph+0dj/FXL825GL8vT mpV1/i5nyHRHS4ruSLR4MmS+m23Pipa3KDkJzoGN2H/LOimP59eHHIFuH3ORXDjk GYJ2dYa3nArsKyawmB/rsnd25xKs/L8slfe06xf+WH+qfVcrhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJgcMfs3GWtemk6VaOu4ApxuEtNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2QzYzNiYTEtMWUxMi0z YmQzLTgyZGItYTc3ZjhiNjExNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC8gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADHLa8ICFOXfi7gciN6bZvys5TIvudBD32EdICq0ZOQw9rIwXCk NMRaSBEHmnFbiZBbBHsOIXMiuzXOjyeC2lvfhilQV1L/m1rm1IJt+7C+bXSJ9Pi7 povwXsJgrJocZrTLue6VqmQRoF/Yx1hEFS/eJgTv1Owza1fmLLjYYmS4lbYxzvYj 9qj9RTPQhjAMjSaitqsunWggZQ7puJES4aAwOw8w3mIOoMqPSK71IsunQdt7CMo+ i80g0UxzUJtK7xPB31C7yRbpPYAmfku/Wu4lBx1xkYFKJKKd30VMEuG/QMu9KmD8 M+XpcE/pmhJpi46b7SqGHdMobT2WhLUALao= -----END CERTIFICATE-----Generated at Fri May 17 11:07:50 2024 by rpki-client on console-ams.rpki-client.org