$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa File: 2ddcd419-f09d-3a08-94c4-01bab2f82911.roa (raw, json) Hash identifier: g0ZdSQX9W6AQxRNx8TPhIn8CqdjAGf2Ft0XMOMf6IhI= Subject key identifier: 7B:0E:05:90:81:D9:20:86:D0:7B:94:56:A9:C2:85:7D:DF:85:98:5E Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584515E58DB3E8A24BEC4E872A80 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa Signing time: Sun 03 Mar 2024 14:00:31 +0000 ROA not before: Sun 03 Mar 2024 14:00:31 +0000 ROA not after: Sat 01 Jun 2024 13:00:31 +0000 asID: 5769 IP address blocks: 2607:fa4a::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:15:e5:8d:b3:e8:a2:4b:ec:4e:87:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Mar 3 14:00:31 2024 GMT Not After : Jun 1 13:00:31 2024 GMT Subject: CN=95d091d9-233b-44a3-8cdd-f211687359f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:a9:57:40:4b:80:c5:d1:9c:be:f4:d1:5b: 14:cf:bc:68:b3:ab:36:3a:1f:a5:cc:54:ea:a2:6a: d9:e2:48:23:81:47:a3:ff:77:d7:0c:f2:a2:24:5c: e7:49:7a:ec:39:00:ba:4a:af:4e:ba:29:c7:9c:51: 87:2c:01:99:eb:e8:bd:b8:57:c1:dc:dd:de:84:58: b1:79:7f:7b:34:1a:c8:67:59:a7:67:a6:95:8d:a6: a6:5f:f4:81:dc:31:0a:21:7d:26:e4:ae:90:7c:89: 69:57:7b:36:14:06:f7:75:ff:8c:2c:2f:44:7b:19: 88:59:32:22:99:4b:0c:e5:50:4e:e8:26:0c:8f:04: f2:a2:e0:a3:c8:25:85:e0:a8:6b:81:fb:11:9f:b2: f0:c4:2b:a8:92:6f:70:13:4b:88:29:de:f2:8b:71: 0e:5c:70:94:b8:c3:29:9d:19:91:ef:cb:07:74:c1: bc:cd:54:14:a1:3c:01:49:77:21:d2:f7:14:5a:f8: e7:f6:71:9e:39:56:83:93:a0:2b:5c:57:3e:90:34: b6:9f:74:58:f8:0d:de:bf:d8:88:37:8d:c4:ec:a0: 4b:48:03:72:eb:c6:8e:9d:83:f7:75:15:c5:1c:ce: 25:71:cf:7c:8e:f9:d4:41:48:58:c6:57:57:21:39: 29:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0E:05:90:81:D9:20:86:D0:7B:94:56:A9:C2:85:7D:DF:85:98:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2607:fa4a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0d:0a:bc:97:22:c2:f0:f5:ab:ca:3d:ce:e5:99:7c:51:75: 02:c1:3f:b8:e3:c9:a1:ba:8c:45:c3:a2:ed:d2:42:8b:5f:9a: 05:69:22:c8:d7:57:08:41:18:06:a2:9d:c4:67:1f:bd:30:4b: 0b:fe:a9:9f:63:f9:c7:7d:89:59:62:a8:f4:22:d1:8f:e7:22: d4:24:ff:4b:49:45:48:1b:83:c3:5d:81:85:67:07:a0:36:ba: 1e:20:a1:43:1b:c9:bb:bb:98:c6:2e:86:e6:54:7e:e0:3e:8b: 0b:cf:86:f7:21:2c:de:10:60:7f:dd:6b:cf:3f:71:c9:de:7a: 5d:77:bb:f5:bc:4e:9b:05:03:5c:38:00:10:5e:db:75:ec:e7: b9:5a:cf:8c:65:9a:48:06:89:50:00:31:d5:e0:b6:68:a4:20: 65:89:0d:79:5c:87:8a:d8:a6:c1:a2:ef:de:d4:58:b2:29:e0: de:74:57:a8:c3:f8:42:8f:21:2b:a6:29:20:a4:c0:1a:23:66: 2b:54:75:e2:18:c0:a1:f4:85:2e:08:57:e2:aa:f5:9c:52:03: 00:df:e4:fc:17:fe:3b:13:f1:04:06:de:2a:30:69:ab:ed:44: 29:ec:fe:4c:a9:39:4a:99:d7:24:fa:29:63:90:50:20:f6:41: 56:a0:aa:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUV5Y2z6KJL7E6HKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk OTVkMDkxZDktMjMzYi00NGEzLThjZGQtZjIxMTY4NzM1OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG2pV0BLgMXRnL700VsUz7xos6s2Oh+lzFTq omrZ4kgjgUej/3fXDPKiJFznSXrsOQC6Sq9OuinHnFGHLAGZ6+i9uFfB3N3ehFix eX97NBrIZ1mnZ6aVjaamX/SB3DEKIX0m5K6QfIlpV3s2FAb3df+MLC9EexmIWTIi mUsM5VBO6CYMjwTyouCjyCWF4KhrgfsRn7LwxCuokm9wE0uIKd7yi3EOXHCUuMMp nRmR78sHdMG8zVQUoTwBSXch0vcUWvjn9nGeOVaDk6ArXFc+kDS2n3RY+A3ev9iI N43E7KBLSANy68aOnYP3dRXFHM4lcc98jvnUQUhYxldXITkpqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHsOBZCB2SCG0HuUVqnChX3fhZheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMmRkY2Q0MTktZjA5ZC0z YTA4LTk0YzQtMDFiYWIyZjgyOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6SjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtDQq8lyLC8PWryj3O5Zl8UXUCwT+448mhuoxFw6Lt0kKLX5oFaSLI 11cIQRgGop3EZx+9MEsL/qmfY/nHfYlZYqj0ItGP5yLUJP9LSUVIG4PDXYGFZweg NroeIKFDG8m7u5jGLobmVH7gPosLz4b3ISzeEGB/3WvPP3HJ3npdd7v1vE6bBQNc OAAQXtt17Oe5Ws+MZZpIBolQADHV4LZopCBliQ15XIeK2KbBou/e1FiyKeDedFeo w/hCjyErpikgpMAaI2YrVHXiGMCh9IUuCFfiqvWcUgMA3+T8F/47E/EEBt4qMGmr 7UQp7P5MqTlKmdck+iljkFAg9kFWoKoj -----END CERTIFICATE-----Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org