$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa File: aa1e9760-1e22-38ea-9430-d287417cba9b.roa (raw, json) Hash identifier: gf2cSQioUgmzfileFM4l9XRkuJZzwIYhQNz3RxTddMg= Subject key identifier: C9:14:3B:63:F2:2A:69:F4:D1:9A:0C:8F:F2:15:87:37:7B:C1:7C:70 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F432858451B7AF0D4EFC5FDBE83527A00 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa Signing time: Tue 05 Mar 2024 14:00:31 +0000 ROA not before: Tue 05 Mar 2024 14:00:31 +0000 ROA not after: Mon 03 Jun 2024 13:00:31 +0000 asID: 400097 IP address blocks: 2606:3d40:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1b:7a:f0:d4:ef:c5:fd:be:83:52:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Mar 5 14:00:31 2024 GMT Not After : Jun 3 13:00:31 2024 GMT Subject: CN=cb892a2f-9019-4172-84ac-57e35c892ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:91:b1:aa:21:03:52:0a:d4:af:b5:fc:a0: 26:ee:2e:bf:d8:dc:f3:09:5c:17:5e:d9:67:05:66: b4:36:37:53:b7:1c:6f:79:6d:d7:dd:7b:c2:49:59: 56:da:f2:8f:c5:ac:fd:79:88:fb:9d:2d:07:a5:fc: aa:8e:2e:61:8c:02:91:c1:e1:7c:e0:ea:3b:1f:48: b7:7c:f8:ca:f9:ef:b4:c4:0b:f3:59:aa:d2:db:b2: 56:92:eb:b5:c0:2b:32:47:ae:20:4f:1b:33:fe:75: 56:e0:20:43:30:d1:d5:c7:f4:c8:da:7b:82:ea:17: f2:7a:d0:28:63:b9:78:59:2b:19:01:1d:b2:d8:a4: 8c:49:e3:1e:bc:96:65:4c:b1:a7:41:16:23:07:e5: f0:c0:f6:a0:9f:89:00:4c:ab:85:45:9a:ee:26:0f: 25:da:f3:55:ee:8d:e2:a0:32:66:63:a1:8e:4e:cc: 79:bc:7f:50:6e:9b:6c:e6:93:00:09:9f:f3:c1:40: fc:c1:f6:f1:7e:44:c7:bb:97:26:53:5d:da:2a:a5: 10:01:b3:58:bb:90:50:6b:be:a0:bf:bc:8f:cc:e2: 5f:31:dd:40:e4:d5:ca:d4:33:46:2e:93:f0:01:6d: 01:fd:1f:7c:5d:52:95:9c:b8:50:4c:a7:48:05:f4: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:14:3B:63:F2:2A:69:F4:D1:9A:0C:8F:F2:15:87:37:7B:C1:7C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/aa1e9760-1e22-38ea-9430-d287417cba9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:56:6a:fa:5c:41:6a:f0:6f:05:f0:86:fc:56:d0:75:ec:1c: ca:00:a6:b0:55:da:a4:9b:1f:7d:f4:bd:b9:d3:f1:7d:18:cb: 0c:84:36:ba:62:4c:31:cc:74:ca:4c:f8:3c:27:42:bd:75:94: 61:90:bb:0d:78:9d:73:e8:76:d9:bc:53:93:3e:88:2a:46:da: d8:95:d1:78:81:f4:e7:05:d9:fe:82:6c:27:8c:e4:f2:c0:af: 5e:7f:d5:9b:d1:81:e5:a7:19:b5:1e:f7:d8:ca:c6:33:79:43: 58:78:ef:54:77:ed:99:5a:ff:02:a8:50:aa:f6:6a:7f:48:2f: 44:e1:d5:62:a5:44:1f:7e:77:4d:77:74:c4:26:22:0c:38:4e: ae:64:96:ac:78:d2:0c:98:3b:5b:b9:f2:d9:4e:d8:17:64:7b: da:0b:8a:9a:64:eb:16:79:b5:7d:15:46:93:9e:42:2b:b0:11: 0a:83:c0:8f:19:3d:99:9e:e8:12:02:54:b1:41:1c:48:31:2e: 59:85:a8:e5:85:fc:d7:1a:48:50:e9:83:9f:52:09:48:e1:b0: 51:8f:9c:3d:06:52:6d:a1:f1:40:c9:f0:bc:85:fb:8b:2d:12: 88:55:9c:9d:69:6b:74:1c:96:d2:53:d8:eb:d8:d1:e9:a0:6e: 0a:8e:c3:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUbevDU78X9voNSegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk Y2I4OTJhMmYtOTAxOS00MTcyLTg0YWMtNTdlMzVjODkyY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+SRsaohA1IK1K+1/KAm7i6/2NzzCVwXXtln BWa0NjdTtxxveW3X3XvCSVlW2vKPxaz9eYj7nS0Hpfyqji5hjAKRweF84Oo7H0i3 fPjK+e+0xAvzWarS27JWkuu1wCsyR64gTxsz/nVW4CBDMNHVx/TI2nuC6hfyetAo Y7l4WSsZAR2y2KSMSeMevJZlTLGnQRYjB+XwwPagn4kATKuFRZruJg8l2vNV7o3i oDJmY6GOTsx5vH9Qbpts5pMACZ/zwUD8wfbxfkTHu5cmU13aKqUQAbNYu5BQa76g v7yPzOJfMd1A5NXK1DNGLpPwAW0B/R98XVKVnLhQTKdIBfQSHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkUO2PyKmn00ZoMj/IVhzd7wXxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYWExZTk3NjAtMWUyMi0z OGVhLTk0MzAtZDI4NzQxN2NiYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINWavpcQWrwbwXwhvxW0HXsHMoAprBV2qSbH330vbnT8X0YywyE NrpiTDHMdMpM+DwnQr11lGGQuw14nXPodtm8U5M+iCpG2tiV0XiB9OcF2f6CbCeM 5PLAr15/1ZvRgeWnGbUe99jKxjN5Q1h471R37Zla/wKoUKr2an9IL0Th1WKlRB9+ d013dMQmIgw4Tq5klqx40gyYO1u58tlO2Bdke9oLippk6xZ5tX0VRpOeQiuwEQqD wI8ZPZme6BICVLFBHEgxLlmFqOWF/NcaSFDpg59SCUjhsFGPnD0GUm2h8UDJ8LyF +4stEohVnJ1pa3QcltJT2OvY0emgbgqOw38= -----END CERTIFICATE-----Generated at Sat May 18 15:59:38 2024 by rpki-client on console-ams.rpki-client.org