$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa File: 9702962a-413b-3010-b92e-0a8efd3e158d.roa (raw, json) Hash identifier: jc/IdOsgpmsIKSA9VLog/0ciPA5cb5bspDEhYToaoZo= Subject key identifier: 50:DC:87:A7:0D:8C:CA:47:04:76:A3:8E:81:0E:89:AA:E1:71:56:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584582A88A455E7FE8C90171BA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 12222 IP address blocks: 2001:4878:c242::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:8a:45:5e:7f:e8:c9:01:71:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=294f5f6b-5919-4c15-87e1-eeef664479fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:17:3b:85:8c:10:3f:7f:d5:b4:5d:45:ca: fc:32:40:bc:03:f9:aa:fa:a6:11:f7:5a:3d:cc:87: 42:55:19:24:ae:aa:f8:2f:7f:c3:20:c4:94:59:b0: 28:ed:36:61:2d:a6:7e:10:8d:77:b6:1c:e5:42:9f: db:66:83:69:7a:de:52:9b:ec:11:2f:1a:a0:69:1c: 48:aa:cc:41:05:4d:ed:1c:19:fb:66:65:41:79:c2: 30:90:0a:04:3d:46:25:1d:4c:b2:74:66:b7:f3:ec: 2c:28:77:47:bc:d0:01:eb:c7:12:c2:1d:ab:13:b1: 09:1b:43:02:c5:5c:69:90:6b:0f:87:d9:5a:da:c8: f0:d9:2e:7a:ed:ed:fc:cd:8a:68:58:d3:3c:c8:7e: ce:62:38:fa:28:82:1a:17:df:22:9e:cb:5e:66:c1: 06:62:b3:c8:72:d7:70:69:8e:11:f3:5b:75:9a:1e: fc:d6:58:27:da:14:45:b1:3c:71:1c:d3:c2:60:a3: f5:ff:06:a8:80:08:81:bd:63:fd:e9:f9:5b:02:e2: 11:2e:88:70:a6:21:8d:a5:d1:12:57:60:57:77:52: e3:bb:6a:15:ee:3e:68:43:b5:92:89:b8:83:b4:a5: e3:39:c1:59:15:a3:c7:ca:6e:0a:f8:1b:60:ea:e0: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:87:A7:0D:8C:CA:47:04:76:A3:8E:81:0E:89:AA:E1:71:56:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c242::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e4:3b:bf:9d:fb:c0:ea:35:72:72:0a:71:4e:5c:d9:41:1f: 03:6b:d2:92:f9:e2:a1:be:50:6b:a3:e8:4e:d9:04:64:28:4c: d1:15:0e:3e:cb:d0:29:bb:ff:8f:75:a4:9a:b6:09:a1:ff:2b: 2a:12:de:98:db:41:62:9f:eb:ad:8d:28:44:cc:06:4d:8f:bb: e0:f3:c2:aa:48:27:d6:f4:67:d4:54:02:12:82:93:9f:a8:0e: 8d:55:d4:73:f0:8e:42:ee:41:78:87:3f:03:b6:4a:eb:19:fe: 00:8f:c7:5a:71:10:43:a1:a3:53:12:b0:ac:ba:71:2e:33:a0: e9:1b:2b:f6:d6:2d:6d:6a:7a:bc:6f:f9:88:8f:2c:b1:bc:f9: 57:9d:df:51:03:28:f0:df:a1:45:59:0f:d6:50:e9:5f:5d:b7: 5e:cb:ab:62:d6:49:51:f3:15:d5:58:b7:11:8a:62:12:c3:21: 9d:03:98:6a:1c:a5:5f:91:f4:05:24:28:cb:69:78:9a:83:d3: 0e:f3:a7:ba:f5:85:c3:bb:5a:ac:45:13:fc:96:e1:f5:35:ba: 23:3f:77:85:0e:e9:73:97:e0:34:f5:06:7c:fc:b9:48:2b:24: be:fc:f6:a3:70:82:9d:54:3d:b4:84:1d:c0:20:fe:4d:b1:41: 81:d6:7a:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWCqIpFXn/oyQFxugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk Mjk0ZjVmNmItNTkxOS00YzE1LTg3ZTEtZWVlZjY2NDQ3OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouAXO4WMED9/1bRdRcr8MkC8A/mq+qYR91o9 zIdCVRkkrqr4L3/DIMSUWbAo7TZhLaZ+EI13thzlQp/bZoNpet5Sm+wRLxqgaRxI qsxBBU3tHBn7ZmVBecIwkAoEPUYlHUyydGa38+wsKHdHvNAB68cSwh2rE7EJG0MC xVxpkGsPh9la2sjw2S567e38zYpoWNM8yH7OYjj6KIIaF98insteZsEGYrPIctdw aY4R81t1mh781lgn2hRFsTxxHNPCYKP1/waogAiBvWP96flbAuIRLohwpiGNpdES V2BXd1Lju2oV7j5oQ7WSibiDtKXjOcFZFaPHym4K+Btg6uAbEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDch6cNjMpHBHajjoEOiarhcVZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTcwMjk2MmEtNDEzYi0z MDEwLWI5MmUtMGE4ZWZkM2UxNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMJC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvkO7+d+8DqNXJyCnFOXNlBHwNr0pL54qG+UGuj6E7ZBGQoTNEV Dj7L0Cm7/491pJq2CaH/KyoS3pjbQWKf662NKETMBk2Pu+DzwqpIJ9b0Z9RUAhKC k5+oDo1V1HPwjkLuQXiHPwO2SusZ/gCPx1pxEEOho1MSsKy6cS4zoOkbK/bWLW1q erxv+YiPLLG8+Ved31EDKPDfoUVZD9ZQ6V9dt17Lq2LWSVHzFdVYtxGKYhLDIZ0D mGocpV+R9AUkKMtpeJqD0w7zp7r1hcO7WqxFE/yW4fU1uiM/d4UO6XOX4DT1Bnz8 uUgrJL789qNwgp1UPbSEHcAg/k2xQYHWeiw= -----END CERTIFICATE-----Generated at Sat May 18 01:58:13 2024 by rpki-client on console-ams.rpki-client.org