$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf02595f-d1d5-3e6d-9fc4-0df5512b4498.roa File: cf02595f-d1d5-3e6d-9fc4-0df5512b4498.roa (raw, json) Hash identifier: 9dplzEBy0+0Wfk6M4WVvNG4vT20/hhekZFU++A+/+Ac= Subject key identifier: 5E:73:DF:EF:58:B2:D0:D7:6E:56:A7:23:23:03:BB:17:2C:D8:3F:B9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285841C2E15173062D58D96CDF9880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf02595f-d1d5-3e6d-9fc4-0df5512b4498.roa Signing time: Tue 02 May 2023 12:00:00 +0000 ROA not before: Tue 02 May 2023 12:00:00 +0000 ROA not after: Sun 10 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 2620:10c:5001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:c2:e1:51:73:06:2d:58:d9:6c:df:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 2 12:00:00 2023 GMT Not After : Mar 10 05:00:00 2030 GMT Subject: CN=793ccba5-3ebd-47a0-9b1e-3614d4d539ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:66:89:7f:55:b9:f4:94:68:1f:e0:c3:34: 6a:7b:5b:de:e0:5d:61:a8:bf:98:62:fc:6c:62:44: 83:52:52:d5:4e:68:c6:78:80:af:0c:55:34:f4:3b: ad:ae:ab:b2:33:d1:0d:41:d6:ad:31:48:24:8d:a8: 02:8c:81:88:23:e9:60:c3:97:46:ed:38:f7:4d:e7: 4c:4d:bb:b1:06:a9:46:a5:8c:0e:b7:18:9f:c5:ea: a6:c5:3a:a4:24:6f:8b:a4:be:47:98:90:50:f5:5f: 5f:64:06:04:e6:ff:97:0f:1d:92:32:ad:53:bc:85: a2:e6:95:30:d8:79:b6:67:e7:27:11:d1:c3:28:8b: ce:bc:04:e7:4f:a3:d4:57:d4:43:e3:8d:71:9a:88: f3:de:7a:17:5c:74:64:74:d3:54:e2:96:38:ea:41: e0:ab:98:39:c7:05:96:a2:93:cc:0b:85:f2:ee:cb: 79:3c:3e:18:75:9e:35:d0:7f:a7:d1:eb:a7:ff:7e: 82:30:1f:e5:e7:fd:75:ef:56:f1:a8:ff:da:a1:05: 48:b6:55:3f:a7:ab:e7:aa:7d:42:1e:f7:32:ad:47: c2:e1:65:49:c4:55:44:a4:c7:c9:57:38:01:31:f7: 2f:60:ba:4d:5e:6c:bb:ff:46:f1:82:7e:53:7b:86: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:73:DF:EF:58:B2:D0:D7:6E:56:A7:23:23:03:BB:17:2C:D8:3F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf02595f-d1d5-3e6d-9fc4-0df5512b4498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2620:10c:5001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:18:40:42:8d:39:b2:12:07:1e:65:66:f6:96:6c:a9:31:d0: 63:ea:93:68:06:9b:41:c8:2a:36:d9:d0:95:25:e9:95:3b:6e: 0d:66:2d:8e:a4:d0:e5:ce:6c:ce:d3:d0:80:bb:6f:09:e3:d3: 86:b4:4c:6d:28:8a:b4:6e:fd:0b:e7:05:51:dc:b4:14:9a:f3: 65:49:4c:ae:e8:0a:f5:54:54:18:19:fb:d2:b1:a4:f4:9e:f0: b6:20:ea:09:5a:3c:ce:a1:44:43:d9:76:22:26:ba:7a:b7:9c: b7:99:3c:07:c5:ee:83:94:c1:73:5f:1f:77:d7:86:08:56:09: 61:86:5d:76:75:57:4a:49:33:09:a1:8f:b3:56:47:99:c9:88: 57:5b:23:76:c0:fe:e0:dd:6e:9a:0c:c6:6b:8d:a5:f1:a1:7b: 86:fe:d0:53:44:70:12:99:46:1c:cb:b9:34:08:b0:5d:f8:55: cb:db:c3:da:1c:51:29:94:4e:2c:14:2a:f7:12:87:cd:61:56: d7:6c:51:e3:f0:80:9b:01:30:84:3a:0f:83:23:c9:bc:e3:a6: 54:1e:5c:72:93:c1:2d:58:04:3a:31:84:a7:fc:de:64:ac:d7: 21:1c:6e:8e:f1:6a:f4:fc:64:c5:05:81:da:b3:88:61:51:ee: 98:8f:82:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEHC4VFzBi1Y2WzfmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIzMDUwMjEyMDAwMFoXDTMwMDMxMDA1MDAwMFowLzEtMCsGA1UEAxMk NzkzY2NiYTUtM2ViZC00N2EwLTliMWUtMzYxNGQ0ZDUzOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7lmiX9VufSUaB/gwzRqe1ve4F1hqL+YYvxs YkSDUlLVTmjGeICvDFU09DutrquyM9ENQdatMUgkjagCjIGII+lgw5dG7Tj3TedM TbuxBqlGpYwOtxifxeqmxTqkJG+LpL5HmJBQ9V9fZAYE5v+XDx2SMq1TvIWi5pUw 2Hm2Z+cnEdHDKIvOvATnT6PUV9RD441xmojz3noXXHRkdNNU4pY46kHgq5g5xwWW opPMC4Xy7st5PD4YdZ410H+n0eun/36CMB/l5/1171bxqP/aoQVItlU/p6vnqn1C HvcyrUfC4WVJxFVEpMfJVzgBMfcvYLpNXmy7/0bxgn5Te4YFNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5z3+9YstDXblanIyMDuxcs2D+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2YwMjU5NWYtZDFkNS0z ZTZkLTlmYzQtMGRmNTUxMmI0NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABDFAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMYQEKNObISBx5lZvaWbKkx0GPqk2gGm0HIKjbZ0JUl6ZU7bg1m LY6k0OXObM7T0IC7bwnj04a0TG0oirRu/QvnBVHctBSa82VJTK7oCvVUVBgZ+9Kx pPSe8LYg6glaPM6hREPZdiImunq3nLeZPAfF7oOUwXNfH3fXhghWCWGGXXZ1V0pJ Mwmhj7NWR5nJiFdbI3bA/uDdbpoMxmuNpfGhe4b+0FNEcBKZRhzLuTQIsF34Vcvb w9ocUSmUTiwUKvcSh81hVtdsUePwgJsBMIQ6D4MjybzjplQeXHKTwS1YBDoxhKf8 3mSs1yEcbo7xavT8ZMUFgdqziGFR7piPgjQ= -----END CERTIFICATE-----Generated at Mon May 20 15:00:18 2024 by rpki-client on console-ams.rpki-client.org