$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/6472db78-1afa-3cae-9a2b-32f414bfc88e.roa File: 6472db78-1afa-3cae-9a2b-32f414bfc88e.roa (raw, json) Hash identifier: 5zf8rpIpiJ4cXVSeKPV+y1cbVAuVjFdkwO/mRnfrd2s= Subject key identifier: 0C:91:8F:11:49:D9:14:0D:41:3D:63:63:8D:A9:4C:D2:EA:01:A2:45 Certificate issuer: /CN=42001a2b-1b4b-4d19-8600-8744ad8103d8 Certificate serial: 010D0C9F432858450C201DF9CCC132D348613500 Authority key identifier: AB:52:0D:F3:47:04:A1:92:CA:DA:8A:09:13:88:46:AB:B0:76:89:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/6472db78-1afa-3cae-9a2b-32f414bfc88e.roa Signing time: Thu 29 Feb 2024 02:00:27 +0000 ROA not before: Thu 29 Feb 2024 02:00:27 +0000 ROA not after: Wed 29 May 2024 01:00:27 +0000 asID: 0 IP address blocks: 2001:504:96::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/42001a2b-1b4b-4d19-8600-8744ad8103d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/42001a2b-1b4b-4d19-8600-8744ad8103d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0c:20:1d:f9:cc:c1:32:d3:48:61:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42001a2b-1b4b-4d19-8600-8744ad8103d8 Validity Not Before: Feb 29 02:00:27 2024 GMT Not After : May 29 01:00:27 2024 GMT Subject: CN=d84a3be6-7a9e-4053-80ae-57a922fceed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:54:c9:8d:a0:90:4d:be:71:e0:c1:01:5f:8e: 31:03:3d:41:f5:ff:e7:d6:20:b3:11:64:29:b6:3e: db:01:a3:44:7d:ab:d1:ef:7f:b7:90:d2:ec:69:02: a9:49:9d:b3:7a:8b:51:f7:bc:74:90:9c:e4:ad:b7: 12:8a:94:09:b8:72:22:87:6f:e8:f1:14:07:26:0b: fa:bb:9a:6a:d1:16:48:8b:92:2a:11:ff:40:de:05: a7:b1:be:96:63:eb:36:a1:51:be:79:f4:ff:32:19: 31:23:e1:c1:ca:7c:12:59:c1:e9:52:8d:10:ec:04: 6e:3a:e2:fe:6e:5d:32:54:b5:f5:26:b4:60:dd:d2: da:df:55:db:e9:40:4e:01:d5:ae:fb:fb:31:f6:62: 3f:c8:b9:29:ba:0f:df:a9:4d:d8:48:7b:fd:4e:61: 44:15:20:7d:a5:6e:ab:4c:e7:11:c8:3c:99:49:7c: e4:8b:30:3f:7c:96:fe:74:6e:ef:03:86:51:2b:d8: c9:5f:f8:c7:10:b2:aa:29:f2:cc:ec:d4:c3:83:98: 41:7b:c2:e3:0f:35:ed:b7:e7:95:c9:98:9d:5f:6e: d2:dd:5f:0e:e6:69:aa:5d:b7:93:64:a8:1c:a0:61: 5d:72:5c:54:aa:f6:b4:02:5d:ef:88:97:78:02:fa: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:91:8F:11:49:D9:14:0D:41:3D:63:63:8D:A9:4C:D2:EA:01:A2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/6472db78-1afa-3cae-9a2b-32f414bfc88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8/42001a2b-1b4b-4d19-8600-8744ad8103d8.crl X509v3 Authority Key Identifier: keyid:AB:52:0D:F3:47:04:A1:92:CA:DA:8A:09:13:88:46:AB:B0:76:89:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42001a2b-1b4b-4d19-8600-8744ad8103d8.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:96::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:28:3e:9c:d4:d3:88:4d:64:e3:58:39:93:9d:c8:c1:02:eb: 3e:2a:01:eb:6a:e8:95:f9:26:6e:a1:12:91:db:4c:52:eb:e2: 6a:f1:97:8a:f5:f6:f9:96:f4:1e:8f:f4:a9:00:62:2f:68:d4: 4b:30:f5:9d:e6:1b:af:21:15:ec:c9:cd:5b:d1:a4:4c:6a:08: e9:81:03:32:e2:1f:83:78:40:e7:7c:67:13:c3:a8:bf:3f:62: 7c:3c:01:c6:9e:73:d8:21:8a:f7:4b:b1:c6:3a:de:3d:b4:b7: 6c:a9:f6:1a:33:a3:ca:21:3a:8d:83:74:16:ed:d0:9e:84:34: 18:83:02:36:03:04:66:5d:38:d3:f9:a6:2d:aa:dd:58:24:b4: 98:63:02:7e:93:a0:e4:1f:17:c3:9a:a9:e6:2b:75:6f:78:f2: 74:cf:5b:7d:eb:98:eb:4e:f8:95:62:43:aa:f1:45:a7:ac:dc: 63:2c:fc:39:b1:eb:0e:50:aa:56:f4:75:6b:61:e0:15:5b:bd: 80:e0:d3:4c:6b:8f:2d:d1:fd:f9:35:2b:b7:21:4d:1b:c8:07: d9:a9:66:13:98:10:a0:76:6a:b8:e6:fe:a1:98:25:00:99:c4: fb:a1:27:45:77:ab:57:6f:44:69:85:02:f7:3e:70:77:f5:62: ce:7e:fb:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUMIB35zMEy00hhNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwMDFhMmItMWI0Yi00ZDE5LTg2MDAtODc0NGFkODEw M2Q4MB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk ZDg0YTNiZTYtN2E5ZS00MDUzLTgwYWUtNTdhOTIyZmNlZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglTJjaCQTb5x4MEBX44xAz1B9f/n1iCzEWQp tj7bAaNEfavR73+3kNLsaQKpSZ2zeotR97x0kJzkrbcSipQJuHIih2/o8RQHJgv6 u5pq0RZIi5IqEf9A3gWnsb6WY+s2oVG+efT/MhkxI+HBynwSWcHpUo0Q7ARuOuL+ bl0yVLX1JrRg3dLa31Xb6UBOAdWu+/sx9mI/yLkpug/fqU3YSHv9TmFEFSB9pW6r TOcRyDyZSXzkizA/fJb+dG7vA4ZRK9jJX/jHELKqKfLM7NTDg5hBe8LjDzXtt+eV yZidX27S3V8O5mmqXbeTZKgcoGFdclxUqva0Al3viJd4AvoecwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAyRjxFJ2RQNQT1jY42pTNLqAaJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MjAw MWEyYi0xYjRiLTRkMTktODYwMC04NzQ0YWQ4MTAzZDgvNjQ3MmRiNzgtMWFmYS0z Y2FlLTlhMmItMzJmNDE0YmZjODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDIwMDFhMmItMWI0Yi00ZDE5LTg2 MDAtODc0NGFkODEwM2Q4LzQyMDAxYTJiLTFiNGItNGQxOS04NjAwLTg3NDRhZDgx MDNkOC5jcmwwHwYDVR0jBBgwFoAUq1IN80cEoZLK2ooJE4hGq7B2iY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MjAwMWEyYi0xYjRiLTRkMTktODYwMC04NzQ0 YWQ4MTAzZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBACW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgoPpzU04hNZONYOZOdyMEC6z4qAetq6JX5Jm6hEpHbTFLr4mrx l4r19vmW9B6P9KkAYi9o1Esw9Z3mG68hFezJzVvRpExqCOmBAzLiH4N4QOd8ZxPD qL8/Ynw8Acaec9ghivdLscY63j20t2yp9hozo8ohOo2DdBbt0J6ENBiDAjYDBGZd ONP5pi2q3VgktJhjAn6ToOQfF8OaqeYrdW948nTPW33rmOtO+JViQ6rxRaes3GMs /Dmx6w5Qqlb0dWth4BVbvYDg00xrjy3R/fk1K7chTRvIB9mpZhOYEKB2arjm/qGY JQCZxPuhJ0V3q1dvRGmFAvc+cHf1Ys5++wU= -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:32 2024 by rpki-client on console-fra.rpki-client.org