$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa File: 866cb69c-61bb-348f-b43f-d2139e02ac3e.roa (raw, json) Hash identifier: UGQpW8GYaMQBrQ7T2p+e7BkJyYotyEKbktAl50bqZVc= Subject key identifier: F7:CF:5B:F7:BB:08:E3:15:3B:13:EE:E1:94:4D:50:C3:07:A9:A0:A8 Certificate issuer: /CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Certificate serial: 010D0C9F43285845174ADB6E60D44C9F6271CF40 Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa Signing time: Mon 04 Mar 2024 02:00:26 +0000 ROA not before: Mon 04 Mar 2024 02:00:26 +0000 ROA not after: Sun 02 Jun 2024 01:00:26 +0000 asID: 14618 IP address blocks: 2607:b40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:17:4a:db:6e:60:d4:4c:9f:62:71:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Validity Not Before: Mar 4 02:00:26 2024 GMT Not After : Jun 2 01:00:26 2024 GMT Subject: CN=3e8128a9-ed5d-46b8-84cf-668f810ce68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:6b:cb:5f:6c:ca:df:c4:7a:b6:07:e2:64: 66:61:77:2b:39:56:b0:11:2e:36:54:44:37:a9:fd: 96:12:65:aa:38:72:6d:7d:88:a2:22:bf:6c:8b:40: e9:51:6e:83:13:51:65:fa:94:ba:b5:de:90:07:e2: d4:bc:e1:05:02:70:bb:a4:f1:4e:0a:c1:a9:05:e9: 59:d4:26:d6:87:d2:66:54:f6:61:76:32:49:cb:36: 9e:cd:ad:2b:fe:8c:c7:58:51:ec:3d:27:ee:ef:46: 11:85:eb:0f:d8:c8:27:3b:8c:dd:f1:8f:df:76:48: 78:dc:67:4b:ed:f3:71:b6:2c:ba:8c:bd:c6:8b:eb: 2a:b3:4f:25:27:bf:6a:0b:96:a7:ff:0b:85:a4:8a: 6a:90:ff:ea:0b:01:f0:a8:26:1d:f3:ba:66:ee:b1: c6:f6:2d:84:28:7b:3c:ea:9e:68:b3:81:18:21:b4: 08:4c:39:ed:5b:5e:3c:ff:41:51:43:20:57:99:07: a3:12:89:7f:ee:5c:19:fe:69:db:22:4a:b3:d7:d8: 75:ab:f1:b7:da:e7:9c:9b:d1:52:bb:55:94:db:df: cb:77:38:79:ea:96:17:d4:eb:b7:cf:d7:ca:1e:19: e1:f7:2e:49:03:4e:eb:77:8c:f1:b3:02:30:96:45: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CF:5B:F7:BB:08:E3:15:3B:13:EE:E1:94:4D:50:C3:07:A9:A0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl X509v3 Authority Key Identifier: keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer sbgp-ipAddrBlock: critical IPv6: 2607:b40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9f:d0:3e:c7:0d:45:a1:6c:d7:1f:b3:4f:52:40:6f:a3:0a: 67:27:d4:f2:0d:c5:f7:98:0d:88:1c:90:d9:05:be:80:61:bf: 78:c7:cc:7b:a5:9f:fa:fb:76:0c:52:bc:c0:8e:f6:1c:3d:45: 73:2c:65:df:4f:86:82:f6:18:1a:5b:02:87:95:7b:aa:14:21: f7:c3:e1:b6:10:de:4b:52:74:ae:71:b3:2d:58:20:50:69:b1: 45:87:bf:15:19:2a:bf:5d:79:b5:0f:d6:5b:d5:50:57:d1:e0: 60:d1:00:5e:60:91:16:4f:93:0a:b7:0b:d3:9a:ad:8d:c9:8c: 3c:90:4f:05:19:de:c2:c2:e8:a1:06:e9:72:dc:f5:8e:3b:3c: df:06:01:99:81:53:13:52:76:e0:f7:e9:60:47:c6:fc:5e:1d: 2b:8a:8b:a1:d9:4e:4c:17:70:5b:36:5d:1c:a5:39:51:ad:92: c9:36:d0:fb:fb:38:c9:e0:03:64:da:83:69:bd:7c:89:6a:89: 7a:63:69:9e:f1:11:eb:ed:0b:c2:6e:3c:b5:aa:3f:83:3b:8b: f7:d9:27:e1:23:43:67:de:b5:79:83:45:12:8e:19:f2:aa:91: 6d:2c:f0:e3:5e:07:d2:1b:3c:69:4a:61:fd:82:b1:31:e6:c4: a0:26:7d:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUXSttuYNRMn2Jxz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjYTdiNDUtODNlMS00YTFjLTg3MTMtMzE3YWRlYTBl MjcwMB4XDTI0MDMwNDAyMDAyNloXDTI0MDYwMjAxMDAyNlowLzEtMCsGA1UEAxMk M2U4MTI4YTktZWQ1ZC00NmI4LTg0Y2YtNjY4ZjgxMGNlNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg01ry19syt/EerYH4mRmYXcrOVawES42VEQ3 qf2WEmWqOHJtfYiiIr9si0DpUW6DE1Fl+pS6td6QB+LUvOEFAnC7pPFOCsGpBelZ 1CbWh9JmVPZhdjJJyzaeza0r/ozHWFHsPSfu70YRhesP2MgnO4zd8Y/fdkh43GdL 7fNxtiy6jL3Gi+sqs08lJ79qC5an/wuFpIpqkP/qCwHwqCYd87pm7rHG9i2EKHs8 6p5os4EYIbQITDntW148/0FRQyBXmQejEol/7lwZ/mnbIkqz19h1q/G32uecm9FS u1WU29/Ldzh56pYX1Ou3z9fKHhnh9y5JA07rd4zxswIwlkWReQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPfPW/e7COMVOxPu4ZRNUMMHqaCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xN2Nh N2I0NS04M2UxLTRhMWMtODcxMy0zMTdhZGVhMGUyNzAvODY2Y2I2OWMtNjFiYi0z NDhmLWI0M2YtZDIxMzllMDJhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTdjYTdiNDUtODNlMS00YTFjLTg3 MTMtMzE3YWRlYTBlMjcwLzE3Y2E3YjQ1LTgzZTEtNGExYy04NzEzLTMxN2FkZWEw ZTI3MC5jcmwwHwYDVR0jBBgwFoAUXaYc3mxg/ha1PG9fmN+RwddkQOUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xN2NhN2I0NS04M2UxLTRhMWMtODcxMy0zMTdh ZGVhMGUyNzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgcLQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqf0D7HDUWhbNcfs09SQG+jCmcn1PINxfeYDYgckNkFvoBhv3jH zHuln/r7dgxSvMCO9hw9RXMsZd9PhoL2GBpbAoeVe6oUIffD4bYQ3ktSdK5xsy1Y IFBpsUWHvxUZKr9debUP1lvVUFfR4GDRAF5gkRZPkwq3C9OarY3JjDyQTwUZ3sLC 6KEG6XLc9Y47PN8GAZmBUxNSduD36WBHxvxeHSuKi6HZTkwXcFs2XRylOVGtksk2 0Pv7OMngA2Tag2m9fIlqiXpjaZ7xEevtC8JuPLWqP4M7i/fZJ+EjQ2fetXmDRRKO GfKqkW0s8ONeB9IbPGlKYf2CsTHmxKAmfWg= -----END CERTIFICATE-----Generated at Sun May 5 15:15:07 2024 by rpki-client on console-fra.rpki-client.org