$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa File: 02490b1e-0527-346f-a427-fa83c48a1597.roa (raw, json) Hash identifier: y0Xn+w2FGLTjj55CMo1nvn9Md7hosMDCw1d6jdg6F8I= Subject key identifier: 4E:48:25:D8:43:25:4D:D1:15:D8:F0:96:46:B3:82:92:DE:9E:FD:54 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285845462F6DBFFE7143FC28022620 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa Signing time: Wed 20 Mar 2024 21:08:13 +0000 ROA not before: Wed 20 Mar 2024 21:08:13 +0000 ROA not after: Tue 18 Jun 2024 21:08:13 +0000 asID: 15169 IP address blocks: 2607:f8b0:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:2f:6d:bf:fe:71:43:fc:28:02:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 21:08:13 2024 GMT Not After : Jun 18 21:08:13 2024 GMT Subject: CN=baf31c44-7063-48a2-9766-cf172aba72f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:27:bc:27:64:99:05:3e:3f:f3:e7:ee:46: 34:01:34:4a:29:ff:02:31:d2:8c:a4:70:f0:c6:6c: 8f:a7:49:26:df:16:d6:10:16:9a:60:47:ee:d8:19: b0:b1:b5:2b:d5:2e:00:c8:63:69:80:be:9d:04:31: 87:ea:5c:65:48:cc:86:1e:e1:6b:24:28:63:0b:a9: d8:17:36:40:93:51:73:51:f4:43:98:07:35:97:a0: 4f:a5:a8:84:04:f6:75:c3:2e:c0:ce:7c:04:75:46: da:6c:91:47:ef:7e:77:93:d6:9c:1c:a1:40:23:70: 8a:3f:16:ae:6a:ef:27:05:ff:9e:5f:4d:87:57:1f: c8:f2:ae:e5:9a:ea:b0:0b:18:b0:b3:f0:e6:0a:4a: 3c:ef:38:f3:1e:e8:ba:20:8e:51:6c:c1:84:50:2e: 2e:14:d5:e9:d0:fe:1b:8e:f9:8d:63:b4:fc:22:48: 8e:78:c4:dd:32:ba:88:57:12:33:4b:55:b2:b9:cf: ea:89:3a:33:56:32:1e:83:36:db:d9:cb:c0:db:42: 7c:ad:ae:96:cb:35:e9:2b:d2:9e:30:8e:3a:c7:2f: 27:f6:e4:aa:59:8e:33:fe:64:8d:1b:bb:c6:98:87: 5b:9f:08:89:af:d8:1f:d5:72:14:df:3d:92:96:5e: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:25:D8:43:25:4D:D1:15:D8:F0:96:46:B3:82:92:DE:9E:FD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1c:32:48:d8:a6:21:97:77:75:d6:d7:e2:b0:ed:0a:37:54: af:11:7b:d7:64:3e:fc:a3:82:04:27:55:f3:0e:37:43:0e:00: de:b7:01:60:95:69:38:c0:68:3b:38:5c:65:dc:ad:bd:34:02: 7e:40:b4:4b:19:db:54:92:e8:1b:65:70:93:f4:34:b4:5c:bf: 4b:de:cf:d0:8e:65:68:b9:6b:6a:26:0a:a7:76:4f:3b:f9:73: 53:bd:95:93:dc:11:14:45:5e:84:a2:51:81:ac:fe:cf:a5:e8: dd:b5:5e:b4:00:d9:62:84:92:77:a1:3e:78:ba:9e:2f:66:10: 2d:fd:01:cc:78:8f:20:f3:65:a6:ab:a9:77:46:5e:2d:98:b1: 5f:51:44:49:f4:f3:e4:30:53:e1:29:31:e7:13:72:72:54:24: 9b:49:ab:52:22:ff:89:2d:15:95:6d:3a:d5:bd:18:7a:2b:7c: 5a:5e:3a:9f:c8:49:7c:6d:d9:b4:b1:ad:52:ae:a7:c8:0f:b0: ab:0e:30:32:45:84:73:38:04:cd:80:77:d4:d4:f7:f5:cc:04: d3:ee:7d:14:0a:fc:71:f2:08:87:74:35:72:13:9d:63:64:41: c0:f3:1b:91:eb:b1:e6:3e:e0:73:1c:ed:6d:d6:fc:65:ef:d9: 10:ba:a5:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVGL22//nFD/CgCJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIxMDgxM1oXDTI0MDYxODIxMDgxM1owLzEtMCsGA1UEAxMk YmFmMzFjNDQtNzA2My00OGEyLTk3NjYtY2YxNzJhYmE3MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw0nvCdkmQU+P/Pn7kY0ATRKKf8CMdKMpHDw xmyPp0km3xbWEBaaYEfu2BmwsbUr1S4AyGNpgL6dBDGH6lxlSMyGHuFrJChjC6nY FzZAk1FzUfRDmAc1l6BPpaiEBPZ1wy7AznwEdUbabJFH7353k9acHKFAI3CKPxau au8nBf+eX02HVx/I8q7lmuqwCxiws/DmCko87zjzHui6II5RbMGEUC4uFNXp0P4b jvmNY7T8IkiOeMTdMrqIVxIzS1Wyuc/qiTozVjIegzbb2cvA20J8ra6WyzXpK9Ke MI46xy8n9uSqWY4z/mSNG7vGmIdbnwiJr9gf1XIU3z2Sll7UwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE5IJdhDJU3RFdjwlkazgpLenv1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI0OTBiMWUtMDUyNy0z NDZmLWE0MjctZmE4M2M0OGExNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFUcMkjYpiGXd3XW1+Kw7Qo3VK8Re9dkPvyjggQnVfMON0MOAN63 AWCVaTjAaDs4XGXcrb00An5AtEsZ21SS6BtlcJP0NLRcv0vez9COZWi5a2omCqd2 Tzv5c1O9lZPcERRFXoSiUYGs/s+l6N21XrQA2WKEknehPni6ni9mEC39Acx4jyDz ZaarqXdGXi2YsV9RREn08+QwU+EpMecTcnJUJJtJq1Ii/4ktFZVtOtW9GHorfFpe Op/ISXxt2bSxrVKup8gPsKsOMDJFhHM4BM2Ad9TU9/XMBNPufRQK/HHyCId0NXIT nWNkQcDzG5HrseY+4HMc7W3W/GXv2RC6pfA= -----END CERTIFICATE-----Generated at Sat May 18 01:44:16 2024 by rpki-client on console-fra.rpki-client.org