$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa File: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (raw, json) Hash identifier: NTrPa9zyC2cc9to9hQHrjylkEdXR5fbXYCvbZwnyjWo= Subject key identifier: 4B:AF:7A:BF:A9:1F:FB:C9:83:C2:2B:6D:76:9A:AF:E2:D5:80:C3:8D Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F432858451BECC4A3A63A57034C4A3B80 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa Signing time: Tue 05 Mar 2024 17:49:58 +0000 ROA not before: Tue 05 Mar 2024 17:49:58 +0000 ROA not after: Mon 03 Jun 2024 16:49:58 +0000 asID: 77 IP address blocks: 2620:0:320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1b:ec:c4:a3:a6:3a:57:03:4c:4a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Mar 5 17:49:58 2024 GMT Not After : Jun 3 16:49:58 2024 GMT Subject: CN=146206b0-e132-4026-b983-661aa9466f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:64:fa:49:51:48:df:c0:83:4e:d4:5b:80: ef:1e:03:6f:b7:9f:db:ee:55:8b:ad:89:81:14:d5: 28:b0:19:36:02:db:1a:30:2c:bb:63:25:61:b5:b0: 39:7b:2a:9e:28:e3:07:da:59:39:ea:81:35:79:44: 20:be:55:4d:56:75:ee:9b:ca:71:10:3d:e5:5a:ff: e3:72:1c:3f:92:79:9c:27:ee:59:f1:72:74:3f:1c: d5:d0:2a:ad:16:a5:ff:23:23:62:84:8d:6e:e4:e8: a7:54:9e:f7:a3:52:0c:5f:08:35:c1:e3:05:36:8f: fb:28:7b:68:db:9c:c1:c4:22:2d:e1:3a:c5:77:36: 80:ec:04:e7:f6:dd:26:c4:27:b4:23:af:ce:99:1b: 5d:47:b0:59:79:e5:21:70:95:b2:b4:f4:09:3a:44: be:f4:de:67:80:49:c9:ff:6b:f7:5d:58:ce:a0:52: fc:03:cb:4a:80:0d:3b:c6:80:23:ce:40:fd:eb:8f: 85:5c:df:65:e1:3e:16:f7:96:6b:21:a6:1a:2d:fb: c4:c0:38:b7:55:e1:56:20:61:85:ce:73:84:aa:e4: 9c:5d:9c:2a:35:8b:90:42:e3:54:17:26:53:73:ad: 1a:50:a7:f1:96:53:f0:f3:0c:f4:a1:ce:ca:65:63: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AF:7A:BF:A9:1F:FB:C9:83:C2:2B:6D:76:9A:AF:E2:D5:80:C3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:32:6f:cc:87:5e:9c:cf:d3:e2:8c:12:67:d5:ca:3c:b2:ba: 68:05:72:2b:1f:ab:8d:ea:81:54:ca:27:16:71:4d:9b:21:36: fb:80:04:36:b9:01:85:03:7b:3b:c3:eb:b5:92:64:b9:4d:c9: 8f:f7:c4:5f:3e:b9:3a:9b:d2:eb:bd:a8:6d:54:4e:fe:cb:ad: 05:c1:5b:94:4f:69:5c:13:41:aa:60:71:e9:1d:5b:06:11:bc: a8:fa:41:0c:9a:20:40:6d:d6:55:2e:8b:7c:58:ec:c1:7e:82: a0:64:fd:23:48:bf:3a:4c:d8:6d:91:bd:08:a1:01:a6:f7:94: d6:6a:28:75:df:e4:9e:0f:0c:be:46:90:b6:79:30:08:f3:9a: 8a:00:4b:b5:87:3f:50:46:5d:8e:08:9e:29:d2:f8:da:2c:36: b4:dc:5f:5f:61:52:ac:25:ea:e4:81:bf:ae:6f:4f:68:39:9e: f9:9f:ca:75:1c:47:55:55:17:7c:e4:62:28:88:9d:02:d2:7b: b5:57:ee:6d:a5:c8:57:b5:5f:df:80:51:e5:83:70:7b:ed:3c: e1:34:cb:12:6f:72:31:5e:b8:10:b3:5c:a9:f9:06:15:82:69: 26:67:18:20:92:fd:5e:37:08:0c:ed:2f:96:c7:e6:08:76:76: 27:f8:19:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUb7MSjpjpXA0xKO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI0MDMwNTE3NDk1OFoXDTI0MDYwMzE2NDk1OFowLzEtMCsGA1UEAxMk MTQ2MjA2YjAtZTEzMi00MDI2LWI5ODMtNjYxYWE5NDY2ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJk+klRSN/Ag07UW4DvHgNvt5/b7lWLrYmB FNUosBk2AtsaMCy7YyVhtbA5eyqeKOMH2lk56oE1eUQgvlVNVnXum8pxED3lWv/j chw/knmcJ+5Z8XJ0PxzV0CqtFqX/IyNihI1u5OinVJ73o1IMXwg1weMFNo/7KHto 25zBxCIt4TrFdzaA7ATn9t0mxCe0I6/OmRtdR7BZeeUhcJWytPQJOkS+9N5ngEnJ /2v3XVjOoFL8A8tKgA07xoAjzkD964+FXN9l4T4W95ZrIaYaLfvEwDi3VeFWIGGF znOEquScXZwqNYuQQuNUFyZTc60aUKfxllPw8wz0oc7KZWMp/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuver+pH/vJg8IrbXaar+LVgMONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvM2ZiN2NkNGEtZGZhMS0z MmUxLWEzMTEtYWIxOGFlYjFiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANgyb8yHXpzP0+KMEmfVyjyyumgFcisfq43qgVTKJxZxTZshNvuA BDa5AYUDezvD67WSZLlNyY/3xF8+uTqb0uu9qG1UTv7LrQXBW5RPaVwTQapgcekd WwYRvKj6QQyaIEBt1lUui3xY7MF+gqBk/SNIvzpM2G2RvQihAab3lNZqKHXf5J4P DL5GkLZ5MAjzmooAS7WHP1BGXY4IninS+NosNrTcX19hUqwl6uSBv65vT2g5nvmf ynUcR1VVF3zkYiiInQLSe7VX7m2lyFe1X9+AUeWDcHvtPOE0yxJvcjFeuBCzXKn5 BhWCaSZnGCCS/V43CAztL5bH5gh2dif4Gcc= -----END CERTIFICATE-----Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org