$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa File: 21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa (raw, json) Hash identifier: MYstA0RupoGm1Dk4Y+H5v47tOWVrwPP1ch4hwomRhjw= Subject key identifier: 9A:C1:C0:4B:7F:B8:61:44:FC:EE:48:C6:2B:93:D1:92:49:A3:5D:03 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F43285845A9BE171275FC14B55CF71190 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 6597 IP address blocks: 2607:f948::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:17:12:75:fc:14:b5:5c:f7:11:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=b0a21fee-b0a6-483e-ad49-64c364e5a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1a:02:f4:5a:a8:fd:52:d5:04:cc:2d:a9:e2: 01:eb:10:7e:4c:87:22:28:d3:e3:f2:c0:9d:bf:44: 65:10:9d:28:2c:a3:ab:e7:33:f7:e9:a5:fc:a6:7d: b6:dd:6c:04:ca:b8:96:f4:32:ed:08:78:c7:53:a9: b1:43:16:ed:23:7d:5b:76:f8:3e:9d:2d:2f:93:b5: 45:37:78:31:92:2b:c8:d1:5d:0c:ce:5f:5d:ed:0e: 0c:33:19:cb:fc:f9:06:29:f5:33:6b:1d:b4:17:73: bc:0f:a0:b6:50:79:de:54:e9:8a:b1:53:dd:15:8c: 02:fd:58:44:2f:ee:57:27:e0:c2:7d:10:48:a1:12: a3:08:ab:15:e2:3a:bc:cf:28:0e:3f:f2:96:34:a2: e6:e6:65:9d:f1:7f:e8:aa:d5:33:8c:ad:01:68:72: a6:99:3e:8e:d8:33:b3:cb:19:95:96:14:0b:12:06: e3:74:65:fd:18:e4:4c:3d:86:46:23:97:d4:42:25: 3c:d1:95:0a:73:16:2c:0f:ff:0e:a7:bb:22:46:0e: c5:0e:39:40:fa:27:4d:ce:c3:38:ba:23:72:9e:96: 1d:2e:ec:ae:4c:0d:08:e5:03:e1:6c:c7:16:6d:af: 01:8e:9a:21:ef:2c:54:36:2b:6c:66:33:0e:b8:c9: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C1:C0:4B:7F:B8:61:44:FC:EE:48:C6:2B:93:D1:92:49:A3:5D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/21595d0b-23d2-37e5-a27d-6bb8c3d2c2c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv6: 2607:f948::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bc:12:a0:d7:e0:01:aa:43:40:1e:69:b8:bf:a2:fe:a9:e9: e3:23:1f:df:0d:4a:75:3f:c9:ff:c1:da:d5:7f:51:b8:cd:bb: a0:e4:4e:a7:42:5b:d1:af:4d:c9:04:7b:f1:24:5a:e2:51:ab: cc:15:ef:4c:11:5f:4f:b2:49:df:1f:37:10:7b:10:dc:c1:4e: 60:04:93:4f:1d:6d:0e:0f:02:87:82:46:3e:78:57:0b:e1:64: c2:2c:96:3b:bc:20:d5:7b:c4:34:ed:33:c7:8c:b1:58:4a:e8: a2:48:3d:e7:41:6a:a0:e0:23:39:4e:c3:f9:6a:be:88:4d:08: 17:da:be:2f:58:fa:26:e2:29:43:53:26:ef:b7:54:a3:2a:c8: 30:4d:84:d6:48:78:61:65:22:ba:8c:5a:bf:98:68:bc:2a:87: b5:8a:33:be:b8:a0:bd:4a:ac:c6:cf:d3:77:95:3b:fe:09:4f: 41:1e:67:ff:a3:b1:ee:96:06:0c:48:a7:dd:c6:5f:27:0b:a5: ec:91:a9:6a:9c:54:f4:01:64:5c:d3:78:24:71:ff:36:e3:f7: e6:11:cd:84:ee:a0:f6:ac:ec:3d:e7:84:47:62:fb:24:b4:51: 8b:b4:70:1b:63:e1:3c:33:7a:f9:d6:72:92:b0:71:41:35:b0: 99:b2:57:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWpvhcSdfwUtVz3EZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk YjBhMjFmZWUtYjBhNi00ODNlLWFkNDktNjRjMzY0ZTVhNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBoC9Fqo/VLVBMwtqeIB6xB+TIciKNPj8sCd v0RlEJ0oLKOr5zP36aX8pn223WwEyriW9DLtCHjHU6mxQxbtI31bdvg+nS0vk7VF N3gxkivI0V0Mzl9d7Q4MMxnL/PkGKfUzax20F3O8D6C2UHneVOmKsVPdFYwC/VhE L+5XJ+DCfRBIoRKjCKsV4jq8zygOP/KWNKLm5mWd8X/oqtUzjK0BaHKmmT6O2DOz yxmVlhQLEgbjdGX9GORMPYZGI5fUQiU80ZUKcxYsD/8Op7siRg7FDjlA+idNzsM4 uiNynpYdLuyuTA0I5QPhbMcWba8Bjpoh7yxUNitsZjMOuMnd/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJrBwEt/uGFE/O5IxiuT0ZJJo10DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMjE1OTVkMGItMjNkMi0z N2U1LWEyN2QtNmJiOGMzZDJjMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf5SDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCUvBKg1+ABqkNAHmm4v6L+qenjIx/fDUp1P8n/wdrVf1G4zbug5E6n QlvRr03JBHvxJFriUavMFe9MEV9PsknfHzcQexDcwU5gBJNPHW0ODwKHgkY+eFcL 4WTCLJY7vCDVe8Q07TPHjLFYSuiiSD3nQWqg4CM5TsP5ar6ITQgX2r4vWPom4ilD Uybvt1SjKsgwTYTWSHhhZSK6jFq/mGi8Koe1ijO+uKC9SqzGz9N3lTv+CU9BHmf/ o7HulgYMSKfdxl8nC6XskalqnFT0AWRc03gkcf824/fmEc2E7qD2rOw954RHYvsk tFGLtHAbY+E8M3r51nKSsHFBNbCZsleq -----END CERTIFICATE-----Generated at Sat May 18 16:09:11 2024 by rpki-client on console-ams.rpki-client.org