$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa File: 06deb67f-5f98-351b-8719-f93f9de6c78c.roa (raw, json) Hash identifier: wljmwQYdTPD6lH2nGhx5unhOuqQnKLUDeBcGKwf8Bn8= Subject key identifier: 02:0A:A4:52:32:70:72:A0:F7:1F:0B:A2:E3:AC:C0:6F:C8:C9:A1:50 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F432858451CE03334A5DAA42CAB8D9590 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa Signing time: Wed 06 Mar 2024 02:00:25 +0000 ROA not before: Wed 06 Mar 2024 02:00:25 +0000 ROA not after: Tue 04 Jun 2024 01:00:25 +0000 asID: 400097 IP address blocks: 2606:3d40:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1c:e0:33:34:a5:da:a4:2c:ab:8d:95:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Mar 6 02:00:25 2024 GMT Not After : Jun 4 01:00:25 2024 GMT Subject: CN=8f06d5f2-aa94-4701-9814-925864f65f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:50:73:ca:53:16:65:b9:e8:9f:88:52:d1:cd: 5f:7d:96:dd:60:06:85:50:26:82:05:ca:c1:ff:de: d5:6d:c1:f4:a3:7b:65:72:a4:3b:e6:56:58:65:4d: 78:0f:ea:70:52:d7:e5:f5:db:f9:4c:92:aa:2e:b7: ce:41:b3:bc:a1:7d:89:4e:68:3b:b8:e5:34:de:d8: 29:2d:0e:48:d0:e8:4a:ec:b9:0c:d6:75:35:f0:86: 1e:5d:d9:7f:a5:2b:13:02:08:33:4e:84:61:3a:2b: 66:1c:dd:cb:8e:50:58:5d:53:1b:44:c7:89:c1:cb: d8:47:b7:32:df:b1:74:d9:ce:fa:4f:04:64:e3:c3: af:ff:eb:14:59:50:c1:23:ce:8d:5c:6e:2a:ef:a4: 02:fa:e5:a7:f2:e5:ed:d0:f4:1f:30:22:08:20:26: a3:7f:c7:9c:e1:79:79:6a:e7:b8:9a:8b:55:d2:25: 57:f6:f0:d8:31:18:43:61:74:cb:6d:ba:31:cc:09: 0f:5c:b0:41:d3:2a:36:02:ef:e4:af:28:af:9c:11: b0:18:a2:a3:c7:e1:d7:ac:50:fc:45:9f:bb:7e:b4: 8f:f4:05:23:ca:ac:76:02:50:52:a4:44:91:c2:8f: 33:d0:79:29:86:7f:aa:09:4e:46:76:00:94:be:25: fb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0A:A4:52:32:70:72:A0:F7:1F:0B:A2:E3:AC:C0:6F:C8:C9:A1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:34:8c:9f:d3:03:19:b5:01:74:62:3e:de:10:c9:a3:ca:b9: 68:51:4d:da:31:86:04:d2:98:82:01:2c:77:17:56:61:6f:3d: 6f:4e:9f:f2:9c:7c:ac:89:ca:fe:bc:ab:8e:92:65:49:c7:04: 05:74:90:c4:f8:81:e5:3a:55:9b:dc:f8:5b:4f:ac:9d:ff:1d: f9:ab:b0:fa:27:a6:90:bb:84:7f:4c:36:66:00:19:fb:7e:30: 1a:a8:21:d1:5e:09:40:0c:57:fd:d3:14:11:a2:03:25:2f:5d: fc:6e:01:80:f6:33:48:af:49:16:c6:5b:be:c4:6a:06:21:5d: d4:4c:61:7a:f7:b1:ae:d0:cc:a7:9d:ed:e1:d8:c5:6f:e7:4d: e4:f0:68:06:98:54:32:47:23:ea:a4:d9:ed:a8:41:10:52:39: 9f:6b:f8:da:39:22:bb:cf:97:21:4f:ff:71:16:ae:dd:a9:bf: 73:0d:b6:e9:5c:41:f5:e8:b2:84:a6:28:93:d0:b9:91:51:69: 59:25:e7:47:25:bc:a2:32:36:79:a4:07:d9:c3:05:dc:3b:8b: 20:0a:88:eb:94:2b:50:a7:c3:4a:a1:a2:ef:6b:d0:be:24:15: 6e:1c:f4:5d:70:0c:d0:90:68:c9:1f:59:2a:43:f9:81:1b:5e: d8:5d:26:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUc4DM0pdqkLKuNlZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk OGYwNmQ1ZjItYWE5NC00NzAxLTk4MTQtOTI1ODY0ZjY1ZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFBzylMWZbnon4hS0c1ffZbdYAaFUCaCBcrB /97VbcH0o3tlcqQ75lZYZU14D+pwUtfl9dv5TJKqLrfOQbO8oX2JTmg7uOU03tgp LQ5I0OhK7LkM1nU18IYeXdl/pSsTAggzToRhOitmHN3LjlBYXVMbRMeJwcvYR7cy 37F02c76TwRk48Ov/+sUWVDBI86NXG4q76QC+uWn8uXt0PQfMCIIICajf8ec4Xl5 aue4motV0iVX9vDYMRhDYXTLbboxzAkPXLBB0yo2Au/kryivnBGwGKKjx+HXrFD8 RZ+7frSP9AUjyqx2AlBSpESRwo8z0Hkphn+qCU5GdgCUviX7dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAIKpFIycHKg9x8LouOswG/IyaFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMDZkZWI2N2YtNWY5OC0z NTFiLTg3MTktZjkzZjlkZTZjNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADc0jJ/TAxm1AXRiPt4QyaPKuWhRTdoxhgTSmIIBLHcXVmFvPW9O n/KcfKyJyv68q46SZUnHBAV0kMT4geU6VZvc+FtPrJ3/HfmrsPonppC7hH9MNmYA Gft+MBqoIdFeCUAMV/3TFBGiAyUvXfxuAYD2M0ivSRbGW77EagYhXdRMYXr3sa7Q zKed7eHYxW/nTeTwaAaYVDJHI+qk2e2oQRBSOZ9r+No5IrvPlyFP/3EWrt2pv3MN tulcQfXosoSmKJPQuZFRaVkl50clvKIyNnmkB9nDBdw7iyAKiOuUK1Cnw0qhou9r 0L4kFW4c9F1wDNCQaMkfWSpD+YEbXthdJpQ= -----END CERTIFICATE-----Generated at Sat May 18 15:26:50 2024 by rpki-client on console-fra.rpki-client.org