$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa File: 3af3cf4a-452f-3c16-a0c5-87928368d443.roa (raw, json) Hash identifier: RzH3kZYdFLrwxJE/t7O6eZotbniSUqfFC0wC0xbBopQ= Subject key identifier: 59:2B:31:08:7C:5A:23:1B:28:70:49:24:35:6F:7B:20:4B:6A:E4:D0 Certificate issuer: /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Certificate serial: 010D0C9F43285845B4E8D3BE7421DD42ABB3DF80 Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa Signing time: Mon 29 Apr 2024 13:00:33 +0000 ROA not before: Mon 29 Apr 2024 13:00:33 +0000 ROA not after: Sun 28 Jul 2024 13:00:33 +0000 asID: 16509 IP address blocks: 2605:32c0:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b4:e8:d3:be:74:21:dd:42:ab:b3:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5 Validity Not Before: Apr 29 13:00:33 2024 GMT Not After : Jul 28 13:00:33 2024 GMT Subject: CN=2f655ed9-81a1-4d02-a6bc-161840042bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:8e:fa:75:f8:0a:42:eb:98:a2:a9:0a:2d: 76:b6:7c:22:33:43:1f:7c:5a:21:67:e8:97:10:2b: b5:04:f1:d6:00:6f:95:49:44:3a:43:27:ff:8d:4e: a8:16:f9:5a:96:a1:01:e6:98:50:80:bb:61:8a:39: df:9f:35:1f:34:a0:8d:09:8f:34:c3:c7:e4:69:6f: 75:4d:80:40:4a:93:e7:57:67:93:fd:a1:a0:20:fa: fa:6b:3c:77:64:87:7d:b7:80:4b:80:49:82:9a:85: 20:34:50:81:72:ae:cd:4c:28:3c:ac:97:87:9f:85: a7:26:c2:66:53:55:f5:97:b4:10:ae:6b:51:fe:e3: 32:e6:d0:1c:45:03:6b:3c:a5:92:88:fd:41:2c:c8: 72:7a:f5:e3:89:d7:73:50:6f:ab:8e:58:48:25:1d: fc:d6:ce:ea:d0:f6:0d:5c:66:01:af:8c:38:4c:00: 78:2c:d5:bf:7f:d3:bb:53:7c:74:04:d8:b9:67:ca: b9:80:62:d4:e9:02:80:d6:95:16:67:00:b6:3f:4b: ac:1a:bc:0d:c4:d5:39:17:b4:1f:f8:39:7e:ae:bc: 0a:96:81:91:e5:eb:bc:eb:45:84:c2:3c:a6:88:64: 6c:9a:87:02:cc:c5:87:b2:18:29:e3:a9:fe:b5:51: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:31:08:7C:5A:23:1B:28:70:49:24:35:6F:7B:20:4B:6A:E4:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/3af3cf4a-452f-3c16-a0c5-87928368d443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl X509v3 Authority Key Identifier: keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer sbgp-ipAddrBlock: critical IPv6: 2605:32c0:a000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2b:03:f1:26:72:0d:db:51:07:2d:37:f9:fc:54:d9:12:4a: 11:63:d4:6d:fa:da:04:c3:da:0f:b5:e6:d6:eb:df:60:e4:e2: 9d:44:f1:aa:4e:10:16:f8:e3:78:74:45:d5:7e:eb:30:bf:87: 13:e2:48:ea:f9:e3:6b:6f:99:b1:19:58:ea:94:8a:22:ff:1b: d1:12:42:ee:a1:bd:69:15:03:ba:33:b4:26:c3:39:62:04:57: 69:68:bf:7c:99:dc:63:9f:98:8d:46:65:3f:71:64:8f:9e:13: 49:21:02:6f:63:82:da:1a:ec:11:b7:a8:ae:8f:c6:8c:15:60: 96:03:c7:36:a6:e1:98:e4:46:c4:c7:95:71:c7:55:c6:3b:a6: 43:62:ea:b2:c8:88:77:de:61:73:8f:d0:39:96:d2:37:5a:fc: d4:df:b9:47:4a:e2:70:76:10:1b:d9:e5:b5:c3:d1:1e:ba:ed: b6:a0:be:d4:99:af:93:76:d1:7c:bf:e8:ea:12:b9:98:2c:bb: 1a:c6:74:f4:7e:39:5f:5c:c5:46:eb:7a:81:e5:c5:b7:0d:f1: 11:51:17:6a:3d:51:45:51:4c:5a:0a:bc:da:50:38:04:eb:c1: 7a:8f:a5:8b:1f:ab:73:84:7f:1d:5f:2b:d0:73:67:ce:4f:3f: 89:21:ea:9d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEW06NO+dCHdQquz34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjMmZjYjUtODIyNC00MGFhLWJhY2UtMjMwZmNkZWZi YWE1MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk MmY2NTVlZDktODFhMS00ZDAyLWE2YmMtMTYxODQwMDQyYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLGO+nX4CkLrmKKpCi12tnwiM0MffFohZ+iX ECu1BPHWAG+VSUQ6Qyf/jU6oFvlalqEB5phQgLthijnfnzUfNKCNCY80w8fkaW91 TYBASpPnV2eT/aGgIPr6azx3ZId9t4BLgEmCmoUgNFCBcq7NTCg8rJeHn4WnJsJm U1X1l7QQrmtR/uMy5tAcRQNrPKWSiP1BLMhyevXjiddzUG+rjlhIJR381s7q0PYN XGYBr4w4TAB4LNW/f9O7U3x0BNi5Z8q5gGLU6QKA1pUWZwC2P0usGrwNxNU5F7Qf +Dl+rrwKloGR5eu860WEwjymiGRsmocCzMWHshgp46n+tVHiyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFkrMQh8WiMbKHBJJDVveyBLauTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMy ZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBmY2RlZmJhYTUvM2FmM2NmNGEtNDUyZi0z YzE2LWEwYzUtODc5MjgzNjhkNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzFjMmZjYjUtODIyNC00MGFhLWJh Y2UtMjMwZmNkZWZiYWE1L2MxYzJmY2I1LTgyMjQtNDBhYS1iYWNlLTIzMGZjZGVm YmFhNS5jcmwwHwYDVR0jBBgwFoAUsyEefqI73O8Sc7jmR075Z0ZYYLEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMWMyZmNiNS04MjI0LTQwYWEtYmFjZS0yMzBm Y2RlZmJhYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgUywKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXCsD8SZyDdtRBy03+fxU2RJKEWPUbfraBMPaD7Xm1uvfYOTinUTx qk4QFvjjeHRF1X7rML+HE+JI6vnja2+ZsRlY6pSKIv8b0RJC7qG9aRUDujO0JsM5 YgRXaWi/fJncY5+YjUZlP3Fkj54TSSECb2OC2hrsEbeoro/GjBVglgPHNqbhmORG xMeVccdVxjumQ2LqssiId95hc4/QOZbSN1r81N+5R0ricHYQG9nltcPRHrrttqC+ 1Jmvk3bRfL/o6hK5mCy7GsZ09H45X1zFRut6geXFtw3xEVEXaj1RRVFMWgq82lA4 BOvBeo+lix+rc4R/HV8r0HNnzk8/iSHqnQ== -----END CERTIFICATE-----Generated at Thu May 2 15:00:08 2024 by rpki-client on console-fra.rpki-client.org