$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa File: 22f1cb91-8ecf-3596-adde-62641e5c004e.roa (raw, json) Hash identifier: cRiN8Dgb4HF53XBTy2MdZIQlGGGCS1Mt2Qvk00PMEeg= Subject key identifier: C5:06:C1:36:43:5B:73:7B:2E:BA:6D:72:62:E8:7B:9A:0D:DB:D4:A4 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285845A4586BE13B710219C57D2140 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa Signing time: Tue 23 Apr 2024 14:36:48 +0000 ROA not before: Tue 23 Apr 2024 14:36:48 +0000 ROA not after: Mon 22 Jul 2024 14:36:48 +0000 asID: 395403 IP address blocks: 2620:4d:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:58:6b:e1:3b:71:02:19:c5:7d:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Apr 23 14:36:48 2024 GMT Not After : Jul 22 14:36:48 2024 GMT Subject: CN=aa9f42c7-4728-4c8f-a1b4-f0f40a60b19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:15:43:2d:99:d6:fc:c4:e0:e6:26:76:44:2a: e1:35:19:3e:6c:fa:33:fb:d3:4b:83:b6:57:5c:da: b1:6f:d4:6b:d5:3e:f6:66:1a:0d:cb:b5:07:69:ab: c3:0c:4f:70:ef:57:35:56:fc:16:ec:46:b0:39:56: 57:52:4c:7a:b7:50:c2:57:e1:b3:67:58:45:d0:9d: bf:8d:6c:55:ec:31:ce:80:e0:80:7d:3b:e9:b8:2d: 3a:2b:52:50:4f:13:d5:f8:3a:1a:2e:9c:e0:ae:10: 35:ec:e3:50:41:27:3b:02:66:7c:f0:b9:81:2c:51: d7:8c:50:9e:74:9c:5f:52:8e:08:58:67:31:7c:6e: 3f:18:24:19:25:82:19:a7:a0:82:4b:94:54:d7:ba: 17:70:9c:e6:3c:2e:37:41:4e:95:0c:63:e1:d9:43: 83:b0:07:1e:ed:c4:64:81:e1:e3:84:7f:ed:4b:dd: 02:ea:4b:98:ab:c5:1a:74:a7:fe:1a:df:44:f4:d1: 5a:2b:34:01:96:f7:70:87:9c:aa:64:ab:a7:7f:cf: dc:8f:41:b6:14:49:de:0a:f6:95:5d:88:cd:c5:fe: 34:8b:dd:38:1f:c0:28:4e:05:ef:c8:47:2f:0f:da: b3:e9:08:bd:3d:98:a2:31:2a:be:85:2e:7a:fb:31: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:06:C1:36:43:5B:73:7B:2E:BA:6D:72:62:E8:7B:9A:0D:DB:D4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4090::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:82:2f:ee:ce:b0:36:cb:b4:b0:49:eb:1f:82:25:e2:ad:1c: 25:55:61:d3:57:a1:98:0c:d9:d2:0d:ab:fa:58:b6:1b:6a:1b: d9:2e:65:c1:ff:bf:9f:24:88:53:43:ce:bc:61:1d:d9:e1:2a: 8a:25:b1:50:cc:66:da:f8:a8:1e:cd:88:4a:63:4c:97:b1:d5: 8c:17:eb:55:df:39:0c:74:9f:f4:79:0b:04:12:32:9a:63:df: 12:6d:7c:17:4d:56:38:56:36:99:07:4d:f9:95:bf:93:4a:e7: 4d:93:8e:95:7f:e0:84:c5:fa:ff:6d:66:6f:be:1b:be:00:3b: 61:44:69:de:2b:df:bc:8e:40:40:93:e6:bc:0f:b7:66:0b:1b: 07:28:6b:9a:15:33:1b:52:40:69:a1:b9:a2:80:c4:5e:c6:6e: 06:07:4c:56:a5:93:9c:03:56:a2:e6:b3:da:33:fa:d3:25:48: db:df:09:3b:7c:e2:ac:72:a7:cf:74:85:b3:b7:f1:6a:75:07: f5:c8:d4:de:79:af:a3:50:ab:57:be:fc:ce:dc:ee:25:bf:42: 85:ce:eb:ce:6a:05:97:14:63:5a:57:24:eb:95:fe:48:44:92: 4a:88:2a:20:9f:c9:23:01:d1:9e:07:77:96:f9:49:8d:59:54: 2c:6d:d6:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWkWGvhO3ECGcV9IUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI0MDQyMzE0MzY0OFoXDTI0MDcyMjE0MzY0OFowLzEtMCsGA1UEAxMk YWE5ZjQyYzctNDcyOC00YzhmLWExYjQtZjBmNDBhNjBiMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRVDLZnW/MTg5iZ2RCrhNRk+bPoz+9NLg7ZX XNqxb9Rr1T72ZhoNy7UHaavDDE9w71c1VvwW7EawOVZXUkx6t1DCV+GzZ1hF0J2/ jWxV7DHOgOCAfTvpuC06K1JQTxPV+DoaLpzgrhA17ONQQSc7AmZ88LmBLFHXjFCe dJxfUo4IWGcxfG4/GCQZJYIZp6CCS5RU17oXcJzmPC43QU6VDGPh2UODsAce7cRk geHjhH/tS90C6kuYq8UadKf+Gt9E9NFaKzQBlvdwh5yqZKunf8/cj0G2FEneCvaV XYjNxf40i904H8AoTgXvyEcvD9qz6Qi9PZiiMSq+hS56+zFXKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUGwTZDW3N7LrptcmLoe5oN29SkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMjJmMWNiOTEtOGVjZi0z NTk2LWFkZGUtNjI2NDFlNWMwMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6CL+7OsDbLtLBJ6x+CJeKtHCVVYdNXoZgM2dINq/pYthtqG9ku ZcH/v58kiFNDzrxhHdnhKoolsVDMZtr4qB7NiEpjTJex1YwX61XfOQx0n/R5CwQS Mppj3xJtfBdNVjhWNpkHTfmVv5NK502TjpV/4ITF+v9tZm++G74AO2FEad4r37yO QECT5rwPt2YLGwcoa5oVMxtSQGmhuaKAxF7GbgYHTFalk5wDVqLms9oz+tMlSNvf CTt84qxyp890hbO38Wp1B/XI1N55r6NQq1e+/M7c7iW/QoXO685qBZcUY1pXJOuV /khEkkqIKiCfySMB0Z4Hd5b5SY1ZVCxt1sA= -----END CERTIFICATE-----Generated at Sat May 18 13:31:29 2024 by rpki-client on console-fra.rpki-client.org