$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json) Hash identifier: W1eJmE56t6AywswkxbpumShmGq0Ff8sbEJj/bjJicmo= Subject key identifier: 55:AD:6F:8E:19:B8:5D:F4:E7:93:6B:2F:4C:51:80:77:C1:0A:98:28 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584546A2B4E2DD0EF2B48FB21D80 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa Signing time: Thu 21 Mar 2024 01:00:25 +0000 ROA not before: Thu 21 Mar 2024 01:00:25 +0000 ROA not after: Wed 19 Jun 2024 01:00:25 +0000 asID: 0 IP address blocks: 2001:504:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:a2:b4:e2:dd:0e:f2:b4:8f:b2:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Mar 21 01:00:25 2024 GMT Not After : Jun 19 01:00:25 2024 GMT Subject: CN=152a869a-2642-4ee9-8d43-f6b29d390677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:92:a6:d7:c8:87:ea:78:a8:39:ed:bf:38: c1:b8:f0:88:92:2a:c6:c8:35:df:57:92:3a:3e:3e: 22:b8:a5:b4:11:9f:e7:17:01:4e:31:0b:86:c2:cf: f3:09:d3:ba:98:ce:ef:d7:4b:a3:9c:71:88:82:9e: 7a:24:21:76:d7:e2:4a:47:9f:54:dd:20:9b:e8:6d: 4c:15:85:9c:b1:e6:04:55:1c:f5:12:28:2f:c9:d0: ff:81:7b:40:ae:1e:43:d3:1e:6c:01:4d:de:72:1a: 14:75:f8:11:e8:c8:db:8b:da:6b:36:9f:d7:0d:59: 90:25:d6:80:d1:31:15:07:a9:b6:33:e0:93:97:05: 8c:4f:11:7b:e6:a7:9b:70:b4:49:4f:d6:1f:c9:57: bd:70:e2:8e:d7:a3:ef:2d:be:a3:92:1d:ba:69:25: ea:a9:1b:24:ae:98:a1:8f:d7:85:b9:99:b7:59:e6: b0:25:d5:04:b7:31:e7:8f:f9:9a:cd:b4:26:97:9e: 8c:6e:68:ca:bd:48:07:e4:97:c9:66:39:8d:4b:e5: c1:dd:a0:93:1f:ec:dc:6a:32:6e:f5:8a:a2:c0:d6: 90:c1:ca:b7:84:11:09:da:ed:6e:ca:af:c2:fc:20: fa:2b:4b:bc:c4:bb:b0:b1:23:80:0a:65:f7:65:cb: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AD:6F:8E:19:B8:5D:F4:E7:93:6B:2F:4C:51:80:77:C1:0A:98:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:46:ea:a5:2e:36:78:15:f1:32:ae:1a:c0:d2:fd:c8:80:c4: 72:7e:5a:b5:b5:5f:67:db:8a:a9:d9:d4:2f:de:67:8e:aa:2b: 38:b6:0c:ad:aa:a6:cb:2f:5b:47:43:65:ba:92:23:a8:20:5d: 2d:2e:c0:58:01:b9:6d:b4:60:f0:b1:54:9e:6e:37:02:32:8b: 00:7a:5f:52:0a:8d:82:3d:58:f8:b8:23:40:3a:e8:9a:18:50: be:3a:7c:c9:69:56:96:fd:a4:b9:ab:78:1c:cc:d4:08:db:2d: 46:79:35:8e:25:a6:f2:59:32:a6:bd:2e:d5:e7:d0:3e:c5:61: 0f:15:35:a4:82:9e:29:88:9b:87:5b:c4:4a:1a:b0:9c:7d:c2: 33:79:58:99:00:08:55:3f:0e:17:72:ed:14:9e:10:b7:1f:fe: 89:0b:56:49:bd:4f:22:8b:56:44:ea:ac:b8:52:46:71:53:e6: 71:65:3d:01:22:e7:06:a7:80:13:b4:a2:0a:1c:1f:28:46:71: 9d:74:3b:7b:54:16:1a:ee:2f:a5:d1:9e:b9:df:29:af:10:20: ef:67:f9:eb:70:bf:9a:5c:42:d2:db:e1:e3:ba:20:81:25:da: d4:26:94:80:20:0a:51:ce:e4:01:b7:c5:0d:e9:22:e5:24:17: db:87:69:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVGorTi3Q7ytI+yHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI0MDMyMTAxMDAyNVoXDTI0MDYxOTAxMDAyNVowLzEtMCsGA1UEAxMk MTUyYTg2OWEtMjY0Mi00ZWU5LThkNDMtZjZiMjlkMzkwNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGiSptfIh+p4qDntvzjBuPCIkirGyDXfV5I6 Pj4iuKW0EZ/nFwFOMQuGws/zCdO6mM7v10ujnHGIgp56JCF21+JKR59U3SCb6G1M FYWcseYEVRz1EigvydD/gXtArh5D0x5sAU3echoUdfgR6Mjbi9prNp/XDVmQJdaA 0TEVB6m2M+CTlwWMTxF75qebcLRJT9YfyVe9cOKO16PvLb6jkh26aSXqqRskrpih j9eFuZm3WeawJdUEtzHnj/mazbQml56MbmjKvUgH5JfJZjmNS+XB3aCTH+zcajJu 9YqiwNaQwcq3hBEJ2u1uyq/C/CD6K0u8xLuwsSOACmX3ZctDhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFWtb44ZuF3055NrL0xRgHfBCpgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFlG6qUuNngV8TKuGsDS/ciAxHJ+WrW1X2fbiqnZ1C/eZ46qKzi2 DK2qpssvW0dDZbqSI6ggXS0uwFgBuW20YPCxVJ5uNwIyiwB6X1IKjYI9WPi4I0A6 6JoYUL46fMlpVpb9pLmreBzM1AjbLUZ5NY4lpvJZMqa9LtXn0D7FYQ8VNaSCnimI m4dbxEoasJx9wjN5WJkACFU/Dhdy7RSeELcf/okLVkm9TyKLVkTqrLhSRnFT5nFl PQEi5wangBO0ogocHyhGcZ10O3tUFhruL6XRnrnfKa8QIO9n+etwv5pcQtLb4eO6 IIEl2tQmlIAgClHO5AG3xQ3pIuUkF9uHaU0= -----END CERTIFICATE-----Generated at Sat May 4 03:00:49 2024 by rpki-client on console-fra.rpki-client.org