$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa File: 499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa (raw, json) Hash identifier: ptgFU7bwwemV14ILVz5dWmfxSHk4A4lPyx1Ujgk2LqU= Subject key identifier: F8:95:62:12:88:A5:AC:BC:39:91:89:86:82:0E:9D:09:ED:B0:0C:17 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F432858451CE033C8AE0A7162B8B49900 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa Signing time: Wed 06 Mar 2024 02:00:25 +0000 ROA not before: Wed 06 Mar 2024 02:00:25 +0000 ROA not after: Tue 04 Jun 2024 01:00:25 +0000 asID: 400097 IP address blocks: 2606:3d40:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1c:e0:33:c8:ae:0a:71:62:b8:b4:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Mar 6 02:00:25 2024 GMT Not After : Jun 4 01:00:25 2024 GMT Subject: CN=205d58e3-dcbd-425f-8c92-d632a9a035eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:f8:af:70:c0:7e:47:bb:f3:0c:f1:46:b8: 9b:80:63:5d:2c:f2:4a:99:e2:d9:ac:0d:f3:0d:99: 79:87:e5:80:81:5f:7c:47:1f:a1:d9:18:e1:5e:84: 89:dc:87:c7:56:1e:5b:a1:59:61:e2:e9:62:e5:a6: 52:c4:fd:6c:9c:89:ca:84:63:95:05:fd:2d:1a:a3: bd:bc:69:d1:10:3f:74:20:08:73:9f:2d:84:d7:a1: fb:57:d7:25:5a:5a:2d:10:42:bf:48:72:59:93:54: 9c:1c:be:60:85:5c:c3:13:7f:7f:f6:69:9d:f2:c5: 27:4f:8e:7d:41:a1:49:63:c6:0e:03:bf:35:49:a5: e5:1e:9d:b0:db:09:af:f4:46:8c:ad:7f:74:1a:6a: c5:7e:5e:9b:1f:6b:46:25:a2:75:ea:60:7e:fc:fc: 59:23:b3:db:d4:4f:31:b8:00:ff:dd:3c:8d:f7:51: 37:6a:64:e3:ea:9b:f6:3b:9d:88:00:da:c1:60:02: d0:47:c5:6b:46:36:ca:45:41:cc:43:62:0f:d2:eb: 50:dd:04:07:15:06:02:53:ec:fe:e5:1d:b0:8f:16: 9e:3c:d7:1a:61:af:3c:d2:7c:bd:80:64:11:5c:20: 25:de:af:ac:2b:59:39:7b:70:d0:c7:67:e3:0a:02: f5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:95:62:12:88:A5:AC:BC:39:91:89:86:82:0E:9D:09:ED:B0:0C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/499b886a-a5d1-3f37-a9f3-1f6f164d192e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:61:0b:11:7e:73:48:98:00:27:84:24:e5:bc:c9:1d:05:11: 19:17:31:88:0f:2b:ac:1b:4e:70:6c:15:f1:8f:f6:a7:1e:fe: 9c:27:8c:07:57:64:9c:84:00:48:0e:22:a2:01:c0:c9:cb:eb: 40:3d:56:21:94:1a:31:2b:74:1d:4c:77:8c:88:61:24:cb:88: 4d:4c:fc:06:ec:15:58:07:3d:d2:03:8d:71:47:50:df:65:11: 10:d2:b8:66:35:a6:e1:1f:41:77:e7:32:aa:d1:76:ab:84:7c: a4:7e:a1:48:c3:8d:53:29:ab:27:f7:ba:1b:21:59:51:13:49: 5d:fa:fc:9d:ad:aa:28:fe:4f:10:37:cf:67:d6:bf:11:15:5e: d4:f1:25:5a:0f:c2:e6:b3:29:d9:ab:69:9c:fe:51:bf:96:aa: fa:a0:f4:fb:dd:34:79:12:ec:08:32:f6:e1:f1:6d:92:09:42: 17:fd:58:9c:d4:8b:39:fc:62:d9:e7:44:c1:16:37:b9:30:28: 92:ea:b6:d1:99:07:3a:9a:3e:bf:2a:b6:63:a1:0d:e1:06:93: f4:3d:0d:3c:7f:8a:5e:2c:86:4d:92:c0:a0:96:2c:de:ef:cd: 4a:8d:f5:09:12:5f:6e:92:c7:a0:8e:0b:64:1e:f0:7f:03:fe: 90:9d:8a:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUc4DPIrgpxYri0mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI0MDMwNjAyMDAyNVoXDTI0MDYwNDAxMDAyNVowLzEtMCsGA1UEAxMk MjA1ZDU4ZTMtZGNiZC00MjVmLThjOTItZDYzMmE5YTAzNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxT4r3DAfke78wzxRribgGNdLPJKmeLZrA3z DZl5h+WAgV98Rx+h2RjhXoSJ3IfHVh5boVlh4uli5aZSxP1snInKhGOVBf0tGqO9 vGnRED90IAhzny2E16H7V9clWlotEEK/SHJZk1ScHL5ghVzDE39/9mmd8sUnT459 QaFJY8YOA781SaXlHp2w2wmv9EaMrX90GmrFfl6bH2tGJaJ16mB+/PxZI7Pb1E8x uAD/3TyN91E3amTj6pv2O52IANrBYALQR8VrRjbKRUHMQ2IP0utQ3QQHFQYCU+z+ 5R2wjxaePNcaYa880ny9gGQRXCAl3q+sK1k5e3DQx2fjCgL1VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPiVYhKIpay8OZGJhoIOnQntsAwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNDk5Yjg4NmEtYTVkMS0z ZjM3LWE5ZjMtMWY2ZjE2NGQxOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKhhCxF+c0iYACeEJOW8yR0FERkXMYgPK6wbTnBsFfGP9qce/pwn jAdXZJyEAEgOIqIBwMnL60A9ViGUGjErdB1Md4yIYSTLiE1M/AbsFVgHPdIDjXFH UN9lERDSuGY1puEfQXfnMqrRdquEfKR+oUjDjVMpqyf3uhshWVETSV36/J2tqij+ TxA3z2fWvxEVXtTxJVoPwuazKdmraZz+Ub+Wqvqg9PvdNHkS7Agy9uHxbZIJQhf9 WJzUizn8YtnnRMEWN7kwKJLqttGZBzqaPr8qtmOhDeEGk/Q9DTx/il4shk2SwKCW LN7vzUqN9QkSX26Sx6COC2Qe8H8D/pCdijY= -----END CERTIFICATE-----Generated at Sun May 19 01:47:17 2024 by rpki-client on console-fra.rpki-client.org