$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa File: 5aff0123-c654-3a1d-bbad-1e7208a52d23.roa (raw, json) Hash identifier: tOQSGX/sOwYhK5sE735Qx+FVC8kIDsgK6xdYBaokFNg= Subject key identifier: 27:1A:22:ED:AC:ED:97:0A:37:F9:2E:1B:97:80:B4:E8:53:19:D2:E3 Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F43285845F51E863061AE502C02924680 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa Signing time: Wed 22 May 2024 13:00:33 +0000 ROA not before: Wed 22 May 2024 13:00:33 +0000 ROA not after: Tue 20 Aug 2024 13:00:33 +0000 asID: 32723 IP address blocks: 2607:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f5:1e:86:30:61:ae:50:2c:02:92:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: May 22 13:00:33 2024 GMT Not After : Aug 20 13:00:33 2024 GMT Subject: CN=7b36e0a7-a9d5-4d9d-be94-854f9ad4e668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:7f:fc:3e:34:ec:45:58:8d:05:92:93:d7: 69:85:ac:fb:f8:02:3f:3f:cb:a4:bb:4e:52:ba:94: c4:6a:5d:85:f7:a4:f3:22:23:be:12:4d:39:f7:2e: 0a:59:d9:56:75:09:c6:7a:46:3a:93:2a:ae:e9:eb: 96:a2:2c:20:6b:9e:24:88:55:47:bf:3a:44:d9:51: 77:41:67:11:06:4f:63:2f:98:62:ac:d6:90:27:9a: 8b:83:12:fd:af:7e:b7:3a:6f:27:2d:12:49:95:27: 25:10:7d:ee:69:e8:86:49:7f:35:1b:8d:98:22:f0: f3:2c:1c:aa:ab:c3:e9:f3:92:5b:d8:b7:51:03:00: 8e:88:2b:16:55:3b:55:88:f3:df:d9:e0:86:1f:29: 8e:05:00:a3:8b:2a:c8:39:25:45:da:9d:ae:47:c4: f5:53:d0:cb:04:be:71:ce:17:e9:3b:f1:54:ea:1c: 9d:26:ba:45:f4:9d:40:80:60:76:7f:bf:05:11:aa: 2a:3b:15:7e:18:e9:a8:dc:76:df:36:1e:60:02:78: 38:d0:34:dd:9b:99:36:f8:d6:54:b0:69:c2:83:f9: af:1c:91:14:4f:4e:de:64:33:a7:0f:8f:2d:4c:2b: 23:7b:4d:e6:3c:d2:e8:f3:f3:16:ee:6f:a0:7b:e8: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1A:22:ED:AC:ED:97:0A:37:F9:2E:1B:97:80:B4:E8:53:19:D2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv6: 2607:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:41:80:56:24:e0:a5:e2:7a:72:ee:67:2d:ee:a9:b7:ce:87: d7:96:eb:df:84:a0:d7:bb:ca:b0:ff:f6:a4:de:8d:33:af:dc: 92:93:15:90:a5:48:45:88:2f:9f:55:6f:bd:8d:f0:3b:63:e8: 1c:cb:12:48:ae:fa:5a:44:87:7d:71:e2:0b:42:91:0d:f5:52: ea:79:68:75:e4:e3:51:11:06:ed:6a:64:55:06:c6:3e:6f:85: eb:f9:84:16:77:66:ac:1c:a6:ed:5c:64:62:db:30:50:be:2d: c3:2a:09:ce:de:a2:c7:8a:4d:6c:b1:90:99:2d:19:31:d1:f6: a8:86:97:2b:51:05:19:32:fa:13:b9:b6:15:57:1b:d5:34:8d: 15:68:0c:b3:0c:c2:7f:c9:6e:b0:58:2d:5d:7f:89:d4:cb:58: f0:03:00:7c:bc:e7:f3:47:e3:52:d0:ae:f7:5b:c9:bc:ab:56: d2:dd:e4:b6:3a:32:5b:56:38:28:a3:7b:1e:38:93:58:6b:44: c3:76:6e:74:18:8a:a4:72:66:c6:82:f0:3e:ec:7f:56:d2:1f: 44:64:56:52:71:d3:6a:37:48:c0:7b:b8:fb:bb:a3:86:6d:07: 66:39:e2:4f:55:ef:a3:c1:68:ca:75:a0:54:91:ff:6d:3f:db: 12:07:ca:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEX1HoYwYa5QLAKSRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk N2IzNmUwYTctYTlkNS00ZDlkLWJlOTQtODU0ZjlhZDRlNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/t//D407EVYjQWSk9dphaz7+AI/P8uku05S upTEal2F96TzIiO+Ek059y4KWdlWdQnGekY6kyqu6euWoiwga54kiFVHvzpE2VF3 QWcRBk9jL5hirNaQJ5qLgxL9r363Om8nLRJJlSclEH3uaeiGSX81G42YIvDzLByq q8Pp85Jb2LdRAwCOiCsWVTtViPPf2eCGHymOBQCjiyrIOSVF2p2uR8T1U9DLBL5x zhfpO/FU6hydJrpF9J1AgGB2f78FEaoqOxV+GOmo3HbfNh5gAng40DTdm5k2+NZU sGnCg/mvHJEUT07eZDOnD48tTCsje03mPNLo8/MW7m+ge+h6RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCcaIu2s7ZcKN/kuG5eAtOhTGdLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvNWFmZjAxMjMtYzY1NC0z YTFkLWJiYWQtMWU3MjA4YTUyZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKQYBWJOCl4npy7mct7qm3zofXluvfhKDXu8qw//ak3o0zr9ySkxWQ pUhFiC+fVW+9jfA7Y+gcyxJIrvpaRId9ceILQpEN9VLqeWh15ONREQbtamRVBsY+ b4Xr+YQWd2asHKbtXGRi2zBQvi3DKgnO3qLHik1ssZCZLRkx0faohpcrUQUZMvoT ubYVVxvVNI0VaAyzDMJ/yW6wWC1df4nUy1jwAwB8vOfzR+NS0K73W8m8q1bS3eS2 OjJbVjgoo3seOJNYa0TDdm50GIqkcmbGgvA+7H9W0h9EZFZScdNqN0jAe7j7u6OG bQdmOeJPVe+jwWjKdaBUkf9tP9sSB8rF -----END CERTIFICATE-----Generated at Mon May 27 01:57:50 2024 by rpki-client on console-fra.rpki-client.org