$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa File: 253905c7-5040-3e96-8afb-d1fd24d275f9.roa (raw, json) Hash identifier: A2EY5/9UOiWJvVR5f6Ea+P5oFzh0mViVQ6vl7CINAmU= Subject key identifier: 6C:33:9D:07:A8:71:76:1B:DE:01:45:55:A0:BE:B9:DF:A5:33:11:6F Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F43285844F2FFF980C0CEC9E3CE45D880 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa Signing time: Tue 20 Feb 2024 02:00:26 +0000 ROA not before: Tue 20 Feb 2024 02:00:26 +0000 ROA not after: Mon 20 May 2024 01:00:26 +0000 asID: 16509 IP address blocks: 2620:116:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f2:ff:f9:80:c0:ce:c9:e3:ce:45:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Feb 20 02:00:26 2024 GMT Not After : May 20 01:00:26 2024 GMT Subject: CN=4a328434-a7ea-4946-8d32-77bedf348e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:7a:3d:18:41:35:f3:56:63:30:bf:02:43: 99:07:ef:4b:40:5b:7b:09:ce:16:c3:8d:fe:71:80: 26:0e:b8:1b:ff:18:88:6b:5e:33:2d:6e:66:d9:c7: da:84:88:69:47:7b:23:c1:a0:d9:9e:ad:d8:0a:86: 06:db:fe:31:3d:ee:f6:c9:87:aa:4d:23:e8:34:34: 0c:17:9a:d3:7c:d2:9f:ca:aa:70:4b:22:a4:ab:24: 7e:41:dc:5c:96:9a:f2:4c:74:b6:8e:2d:3c:e5:64: 20:e3:10:50:3d:7b:52:21:6f:8b:22:d9:35:e6:98: 42:16:c6:00:ac:ab:a4:26:8a:33:8a:2c:13:a1:36: 3c:7a:7d:7f:e0:fd:30:77:fb:17:c5:1e:73:4c:69: 5c:54:bb:6f:5e:fa:58:c8:90:52:09:5e:dc:af:3a: 2f:5a:0f:38:7a:c7:ca:6d:6f:10:3a:bb:d5:28:a5: 69:a8:f7:e6:1c:ea:a9:04:cd:4d:89:6e:44:8b:6b: b9:18:e4:c4:06:08:bf:d5:b1:0e:98:ae:d4:b3:1f: 9b:b1:43:10:cb:12:49:42:fb:b5:e1:d8:0a:5f:43: 40:86:f1:b7:0f:5c:1e:99:9b:bd:90:cd:2c:5e:22: 05:f2:77:dc:fc:6a:46:5b:96:d0:30:13:14:e5:ee: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:9D:07:A8:71:76:1B:DE:01:45:55:A0:BE:B9:DF:A5:33:11:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:79:51:7d:aa:17:a1:77:f3:d3:0d:17:f3:cf:4e:79:dd:43: 5d:97:f0:d9:ef:5b:9d:a7:e2:34:8c:4b:5d:01:54:e5:c2:48: 4b:08:13:e2:0f:31:cc:d2:0d:9f:5d:52:c8:df:76:5c:aa:c0: d1:aa:6d:f2:7e:af:ee:58:0c:77:8e:aa:0f:8b:c8:00:b6:21: 29:a4:e9:68:1d:90:d7:b2:dc:82:ac:e9:63:9a:f7:c5:bd:f1: f9:ba:7a:18:6a:ba:17:55:48:69:6d:a9:e1:27:3c:f9:21:ff: 84:64:94:5e:95:2e:44:e6:f8:d8:f8:44:03:d8:4d:11:70:a3: 2b:a7:60:65:a2:59:99:e2:c2:80:23:c2:d0:37:47:20:4a:97: 39:e5:a3:f0:7f:2a:3c:f7:7f:46:46:2c:91:cd:a8:93:cc:d4: 5a:6a:94:cd:5d:24:a2:0f:9c:3c:3b:e7:bb:b6:9d:1e:a1:82: b9:d7:02:50:07:d6:15:70:6a:22:ac:aa:b2:a5:48:5c:95:24: 77:8d:56:26:fd:e8:9b:4d:bc:b9:ae:86:63:18:1b:00:aa:b2: 3a:14:f8:ac:cf:96:4b:77:cf:66:ab:86:66:72:e0:f9:92:0e: 4b:1a:48:89:1e:1b:05:b5:ed:ef:6c:d1:ee:e9:4d:8e:be:44: 8e:59:65:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETy//mAwM7J485F2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI0MDIyMDAyMDAyNloXDTI0MDUyMDAxMDAyNlowLzEtMCsGA1UEAxMk NGEzMjg0MzQtYTdlYS00OTQ2LThkMzItNzdiZWRmMzQ4ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUh6PRhBNfNWYzC/AkOZB+9LQFt7Cc4Ww43+ cYAmDrgb/xiIa14zLW5m2cfahIhpR3sjwaDZnq3YCoYG2/4xPe72yYeqTSPoNDQM F5rTfNKfyqpwSyKkqyR+QdxclpryTHS2ji085WQg4xBQPXtSIW+LItk15phCFsYA rKukJooziiwToTY8en1/4P0wd/sXxR5zTGlcVLtvXvpYyJBSCV7crzovWg84esfK bW8QOrvVKKVpqPfmHOqpBM1NiW5Ei2u5GOTEBgi/1bEOmK7Usx+bsUMQyxJJQvu1 4dgKX0NAhvG3D1wemZu9kM0sXiIF8nfc/GpGW5bQMBMU5e5A6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGwznQeocXYb3gFFVaC+ud+lMxFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMjUzOTA1YzctNTA0MC0z ZTk2LThhZmItZDFmZDI0ZDI3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZ5UX2qF6F389MNF/PPTnndQ12X8NnvW52n4jSMS10BVOXCSEsI E+IPMczSDZ9dUsjfdlyqwNGqbfJ+r+5YDHeOqg+LyAC2ISmk6WgdkNey3IKs6WOa 98W98fm6ehhquhdVSGltqeEnPPkh/4RklF6VLkTm+Nj4RAPYTRFwoyunYGWiWZni woAjwtA3RyBKlznlo/B/Kjz3f0ZGLJHNqJPM1FpqlM1dJKIPnDw757u2nR6hgrnX AlAH1hVwaiKsqrKlSFyVJHeNVib96JtNvLmuhmMYGwCqsjoU+KzPlkt3z2arhmZy 4PmSDksaSIkeGwW17e9s0e7pTY6+RI5ZZbE= -----END CERTIFICATE-----Generated at Thu May 2 15:00:00 2024 by rpki-client on console-fra.rpki-client.org