$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fb27918a-b34d-3590-9056-ecf2a5fdf411.roa File: fb27918a-b34d-3590-9056-ecf2a5fdf411.roa (raw, json) Hash identifier: rea2yykfdn9PkJewAsaAPuouOS2WJhsv7QoFKZhXJUE= Subject key identifier: 67:09:4C:F0:DD:DB:2C:06:14:D6:66:E9:9F:6F:2F:DB:42:9F:ED:29 Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F432858457D1335146FD4F12D26D689C0 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fb27918a-b34d-3590-9056-ecf2a5fdf411.roa Signing time: Tue 09 Apr 2024 13:00:34 +0000 ROA not before: Tue 09 Apr 2024 13:00:34 +0000 ROA not after: Mon 08 Jul 2024 13:00:34 +0000 asID: 397444 IP address blocks: 2620:6e:a000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:13:35:14:6f:d4:f1:2d:26:d6:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Apr 9 13:00:34 2024 GMT Not After : Jul 8 13:00:34 2024 GMT Subject: CN=35c1f566-90e5-4dca-b6d7-523cec2f312a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:20:55:37:45:63:e1:c9:c8:e5:9c:2b:d5: ed:53:75:4f:2b:1d:1e:f9:9e:6a:28:aa:d4:a0:24: ff:a4:7c:aa:87:63:c8:4b:b8:61:06:e3:9b:70:eb: cd:67:ea:dc:b4:9d:bb:e6:41:19:7c:5a:bf:98:0b: db:c1:bd:ab:25:9b:64:46:df:e9:29:96:19:e2:33: e4:8a:7f:d6:99:47:0e:c6:0d:cf:4c:63:65:a1:76: 11:35:29:59:6b:19:13:51:8f:99:b4:ed:d9:ce:8b: 0d:68:fe:ab:4f:66:35:29:f8:da:ce:b9:7c:ea:39: 74:e7:fc:79:86:b8:5b:98:e2:6e:cc:76:2b:3e:27: b5:c5:8b:65:57:7d:9e:51:50:40:3e:90:23:83:ca: 83:4b:83:be:81:bf:a9:cc:a3:53:f3:ca:99:2e:37: 6f:36:e6:37:4d:77:04:f7:22:01:8d:2d:2f:19:00: ba:72:88:09:a4:aa:b0:fe:fd:e7:16:a6:be:bc:8e: 16:5d:9e:11:24:a3:20:65:ed:5d:3e:ab:d5:c5:d5: 62:23:c7:13:23:a6:ba:67:4c:7c:b5:1f:90:eb:34: b3:2f:80:51:60:8b:f0:5a:42:0f:70:8e:93:89:da: 25:a0:db:ae:e4:20:36:4e:56:4f:fa:ea:48:20:8a: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:09:4C:F0:DD:DB:2C:06:14:D6:66:E9:9F:6F:2F:DB:42:9F:ED:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fb27918a-b34d-3590-9056-ecf2a5fdf411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv6: 2620:6e:a000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:8f:ab:c4:fe:67:37:64:80:71:80:fc:5a:fb:28:b1:53:bd: 77:de:6c:b1:91:9b:fc:ca:68:45:99:6f:96:39:d6:df:23:97: 71:30:b2:b0:37:be:81:71:72:ce:6d:d0:17:98:37:1b:12:2c: 9f:0e:05:ca:71:ca:e8:63:ee:2f:34:db:41:6e:49:8a:ca:50: b2:92:8f:86:c6:05:62:dc:73:ba:e4:91:61:61:db:25:19:9c: e8:43:32:be:13:3f:13:c1:0a:7f:9d:36:04:e8:cc:f7:a9:b0: 64:66:c6:26:f0:2a:b6:72:82:95:2a:2e:6e:01:7d:76:ea:18: 4a:fa:af:01:91:15:32:f6:52:7b:76:b7:94:c1:37:1f:38:f4: 87:f7:1c:74:5b:63:a8:40:b0:bc:6a:5f:70:9f:45:5b:7a:75: 4c:8f:a1:f9:39:49:ba:e6:84:47:88:8a:5b:f0:33:17:64:23: 9e:5e:96:e9:10:8b:62:ef:69:a7:2f:47:52:58:c1:25:0a:2f: 2d:1b:e3:c7:ec:49:61:12:14:a0:17:1a:50:61:35:96:ae:69: 90:89:03:4f:33:af:86:af:f1:b5:30:1b:9b:7d:d7:b6:29:02: d2:c2:4d:56:3f:27:1f:a6:24:14:8f:ba:d1:36:c6:03:f4:2b: d7:b7:f2:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEV9EzUUb9TxLSbWicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk MzVjMWY1NjYtOTBlNS00ZGNhLWI2ZDctNTIzY2VjMmYzMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qMgVTdFY+HJyOWcK9XtU3VPKx0e+Z5qKKrU oCT/pHyqh2PIS7hhBuObcOvNZ+rctJ275kEZfFq/mAvbwb2rJZtkRt/pKZYZ4jPk in/WmUcOxg3PTGNloXYRNSlZaxkTUY+ZtO3ZzosNaP6rT2Y1Kfjazrl86jl05/x5 hrhbmOJuzHYrPie1xYtlV32eUVBAPpAjg8qDS4O+gb+pzKNT88qZLjdvNuY3TXcE 9yIBjS0vGQC6cogJpKqw/v3nFqa+vI4WXZ4RJKMgZe1dPqvVxdViI8cTI6a6Z0x8 tR+Q6zSzL4BRYIvwWkIPcI6TidoloNuu5CA2TlZP+upIIIpeDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGcJTPDd2ywGFNZm6Z9vL9tCn+0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvZmIyNzkxOGEtYjM0ZC0z NTkwLTkwNTYtZWNmMmE1ZmRmNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAbqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWPq8T+ZzdkgHGA/Fr7KLFTvXfebLGRm/zKaEWZb5Y51t8jl3Ew srA3voFxcs5t0BeYNxsSLJ8OBcpxyuhj7i8020FuSYrKULKSj4bGBWLcc7rkkWFh 2yUZnOhDMr4TPxPBCn+dNgTozPepsGRmxibwKrZygpUqLm4BfXbqGEr6rwGRFTL2 Unt2t5TBNx849If3HHRbY6hAsLxqX3CfRVt6dUyPofk5SbrmhEeIilvwMxdkI55e lukQi2LvaacvR1JYwSUKLy0b48fsSWESFKAXGlBhNZauaZCJA08zr4av8bUwG5t9 17YpAtLCTVY/Jx+mJBSPutE2xgP0K9e38gs= -----END CERTIFICATE-----Generated at Wed Apr 24 05:37:32 2024 by rpki-client on console-ams.rpki-client.org