$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa File: a43a41c8-9815-3189-85dc-d60e1985a8f9.roa (raw, json) Hash identifier: 34nnnpwnaq3BXnkZn3P2hJJgkQFNIgCZKH0sCNF2JD4= Subject key identifier: 26:88:F7:F0:B0:7A:FE:65:95:F3:E3:EB:0E:6F:EE:E3:9F:64:E0:39 Certificate issuer: /CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Certificate serial: 010D0C9F4328584566BDBCC369861E1F52C95700 Authority key identifier: CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa Signing time: Mon 01 Apr 2024 13:00:36 +0000 ROA not before: Mon 01 Apr 2024 13:00:36 +0000 ROA not after: Sun 30 Jun 2024 13:00:36 +0000 asID: 16430 IP address blocks: 2620:f4:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:66:bd:bc:c3:69:86:1e:1f:52:c9:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7971b5-882f-48cc-b123-b84d7b9b8c5b Validity Not Before: Apr 1 13:00:36 2024 GMT Not After : Jun 30 13:00:36 2024 GMT Subject: CN=533a4155-fbb7-4c1f-bd1e-ad8f0341eba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:bb:9b:ca:9b:b4:25:f5:ba:b9:17:a1:81: 2f:27:3d:16:a8:79:f0:49:29:01:e3:ce:0d:86:8f: 28:95:57:78:4c:5b:97:ba:fc:1a:c1:e4:7c:68:69: 54:e9:a0:67:d7:8c:a5:c9:48:26:85:15:61:a4:4b: 2e:3c:1f:f4:a0:01:2a:bd:6b:16:be:8e:a4:b3:2f: 5b:d2:01:12:95:07:13:d3:f9:a7:bc:b7:d3:87:a3: 8f:2e:30:d5:8c:18:c2:50:07:02:ca:e1:d2:14:a4: 6b:ee:2c:18:4c:ff:1c:0c:fc:60:0d:09:ee:2b:30: c2:e1:1e:96:e3:31:96:96:fe:41:8e:b8:60:d1:1d: 04:80:32:2f:c6:eb:fc:09:6a:99:76:39:73:9b:0b: 35:a6:24:46:d5:03:48:52:2e:b1:7e:43:5b:da:61: 63:e8:d0:22:5d:29:1b:50:21:7a:a5:41:33:e8:79: d1:e9:57:17:6a:d5:eb:4d:4a:70:b5:c6:94:fa:ce: af:fb:b1:c0:db:0f:b1:ff:3d:75:80:cb:c7:fe:50: 58:56:cb:0e:31:89:6e:3a:3f:6f:2a:0c:f0:b5:dd: ab:b9:8a:ed:6e:55:c1:23:fb:8c:9e:53:69:45:d1: e1:56:be:b4:b0:e8:76:74:b8:68:24:8f:39:b1:48: fb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:88:F7:F0:B0:7A:FE:65:95:F3:E3:EB:0E:6F:EE:E3:9F:64:E0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/a43a41c8-9815-3189-85dc-d60e1985a8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.crl X509v3 Authority Key Identifier: keyid:CB:96:D4:21:6F:16:90:CC:EA:79:7D:13:9F:E7:93:BF:FC:1D:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe7971b5-882f-48cc-b123-b84d7b9b8c5b.cer sbgp-ipAddrBlock: critical IPv6: 2620:f4:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:74:b4:89:f4:bb:61:68:ad:84:a8:62:01:c7:a8:0d:b1:33: 07:0e:d5:d1:0d:04:8c:81:e6:8b:1d:88:27:7a:bc:03:e2:5e: 97:ca:1a:a5:4a:ea:8f:e5:f8:5d:54:c7:45:16:85:ec:a6:e1: 02:f2:c9:4b:b9:2a:31:1f:55:10:04:15:55:b6:ff:ca:23:52: a1:39:89:a5:63:77:3f:5b:5d:2a:bf:ef:cb:ba:6c:d9:84:5d: ca:62:26:b9:61:0f:ef:5c:53:26:a9:46:11:3a:b2:06:21:cb: d7:3b:20:9d:55:27:5d:b9:ac:3e:a5:5c:4c:58:04:5a:40:1b: 9b:e4:65:c7:c4:c7:e6:95:93:f9:45:8e:c5:37:8c:25:d0:da: 87:e5:16:72:39:b0:b9:29:02:ff:2b:70:20:ba:9d:d1:ed:67: 78:8f:94:a7:75:ad:2d:c8:6d:4e:74:27:fe:81:8a:38:04:87: 32:5c:1d:6a:bb:53:a2:7a:bc:cd:a3:cb:83:2a:13:d5:dc:fc: 98:35:9a:42:c4:da:92:98:03:dc:fc:d1:c1:b2:1d:71:71:cd: 1d:26:39:f4:f6:96:af:fa:80:29:2c:c4:96:62:ac:ce:f2:a8: 7a:1a:cc:57:12:3b:fe:82:e6:71:88:3d:8e:17:3b:81:7d:33: 0e:b5:87:a8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVmvbzDaYYeH1LJVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU3OTcxYjUtODgyZi00OGNjLWIxMjMtYjg0ZDdiOWI4 YzViMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk NTMzYTQxNTUtZmJiNy00YzFmLWJkMWUtYWQ4ZjAzNDFlYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuy7m8qbtCX1urkXoYEvJz0WqHnwSSkB484N ho8olVd4TFuXuvwaweR8aGlU6aBn14ylyUgmhRVhpEsuPB/0oAEqvWsWvo6ksy9b 0gESlQcT0/mnvLfTh6OPLjDVjBjCUAcCyuHSFKRr7iwYTP8cDPxgDQnuKzDC4R6W 4zGWlv5Bjrhg0R0EgDIvxuv8CWqZdjlzmws1piRG1QNIUi6xfkNb2mFj6NAiXSkb UCF6pUEz6HnR6VcXatXrTUpwtcaU+s6v+7HA2w+x/z11gMvH/lBYVssOMYluOj9v Kgzwtd2ruYrtblXBI/uMnlNpRdHhVr60sOh2dLhoJI85sUj7EQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCaI9/Cwev5llfPj6w5v7uOfZOA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5 NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRkN2I5YjhjNWIvYTQzYTQxYzgtOTgxNS0z MTg5LTg1ZGMtZDYwZTE5ODVhOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmU3OTcxYjUtODgyZi00OGNjLWIx MjMtYjg0ZDdiOWI4YzViL2ZlNzk3MWI1LTg4MmYtNDhjYy1iMTIzLWI4NGQ3Yjli OGM1Yi5jcmwwHwYDVR0jBBgwFoAUy5bUIW8WkMzqeX0Tn+eTv/wdqUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZTc5NzFiNS04ODJmLTQ4Y2MtYjEyMy1iODRk N2I5YjhjNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAA9EAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHHS0ifS7YWithKhiAceoDbEzBw7V0Q0EjIHmix2IJ3q8A+Jel8oa pUrqj+X4XVTHRRaF7KbhAvLJS7kqMR9VEAQVVbb/yiNSoTmJpWN3P1tdKr/vy7ps 2YRdymImuWEP71xTJqlGETqyBiHL1zsgnVUnXbmsPqVcTFgEWkAbm+Rlx8TH5pWT +UWOxTeMJdDah+UWcjmwuSkC/ytwILqd0e1neI+Up3WtLchtTnQn/oGKOASHMlwd artTonq8zaPLgyoT1dz8mDWaQsTakpgD3PzRwbIdcXHNHSY59PaWr/qAKSzElmKs zvKoehrMVxI7/oLmcYg9jhc7gX0zDrWHqA== -----END CERTIFICATE-----Generated at Wed May 15 16:06:16 2024 by rpki-client on console-ams.rpki-client.org