$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa File: 0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json) Hash identifier: OPA3ytZz302jB6wZiRkg5tc1C2yascRh4EkcwS24jE4= Subject key identifier: BD:4E:57:71:E5:A9:A6:2F:23:4A:57:B6:CF:DA:5A:D6:EA:C3:02:46 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F432858453528F36472ECC928CCAB4B80 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa Signing time: Thu 14 Mar 2024 18:46:26 +0000 ROA not before: Thu 14 Mar 2024 18:46:26 +0000 ROA not after: Wed 12 Jun 2024 18:46:26 +0000 asID: 4213 IP address blocks: 2607:f820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:35:28:f3:64:72:ec:c9:28:cc:ab:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Mar 14 18:46:26 2024 GMT Not After : Jun 12 18:46:26 2024 GMT Subject: CN=2674c3c5-84a5-4311-9476-faff581ab975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:49:8c:c9:86:ff:f6:5d:f4:65:47:27:ca: fd:2a:d6:5e:75:cb:a3:d1:ff:6a:fb:5c:c2:b1:31: 3f:bc:7d:05:c5:1c:25:ee:85:2f:71:58:87:f2:35: 87:8c:ac:71:70:a1:28:37:57:f1:f3:05:af:b2:8f: d5:c5:d7:b2:81:bb:4a:c7:1a:1f:a3:b5:9b:a1:46: 5f:cf:62:68:7b:21:ae:85:93:00:56:71:bd:c5:8e: 1a:63:1d:4e:e4:6f:a4:17:8e:03:d1:35:0f:a6:d7: cd:85:e0:5a:f7:ec:98:b0:37:31:79:d4:c3:fc:c9: 44:b1:0c:dd:7a:86:cc:41:49:c6:15:f6:fb:d9:23: 5d:32:ae:f4:9c:c3:60:88:d8:ae:74:f2:81:0a:f3: af:68:aa:ee:13:42:43:ba:90:32:02:49:34:89:81: 9d:ed:f4:32:b7:5d:2a:a7:84:27:51:96:5f:d1:f0: 28:c3:3f:6a:21:3a:fd:93:91:8d:9f:ad:17:b5:f7: 62:60:bd:32:f7:19:0d:37:20:01:64:1d:02:ad:ea: f3:c4:6c:cc:95:0a:6a:de:64:38:96:0b:80:87:c0: bc:1e:5e:85:a8:68:67:c1:67:8e:af:80:26:b5:03: 7b:50:2b:48:e0:97:08:26:42:f2:ce:23:d9:3a:47: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4E:57:71:E5:A9:A6:2F:23:4A:57:B6:CF:DA:5A:D6:EA:C3:02:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f820::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7d:ce:8d:3e:f3:df:f3:92:86:0c:aa:be:1f:7b:2b:54:28: 9a:b1:38:ab:9b:e6:c4:73:84:81:b8:c9:43:22:6a:7c:d7:c6: 9a:77:60:0c:58:84:b5:65:b5:4b:46:74:21:53:d5:5d:d6:1c: 84:fc:7b:73:38:66:8e:35:39:65:7b:81:38:82:ea:25:a0:af: 8f:92:26:57:a6:61:44:16:44:14:78:93:c9:88:ce:49:dd:02: 4e:2d:21:fc:88:64:84:cb:21:26:2b:23:7c:11:0f:5f:b1:01: f9:bc:e8:3c:30:2e:0d:dc:b5:1a:c4:7f:8e:bd:d3:41:f5:c6: 2e:92:b3:93:be:6b:67:9f:05:1c:9f:be:a0:ed:a8:4e:80:e1: b3:9f:ca:85:27:1a:25:25:33:1c:ff:e0:65:16:ae:12:af:62: 67:a5:e6:bc:75:a2:a9:ef:c7:ec:e4:ad:0a:7c:c6:7b:8b:5f: 16:db:f3:bc:ad:6c:8c:cb:02:03:43:34:de:b8:f5:8c:59:94: 04:74:f6:c2:65:d8:93:a9:da:f9:da:31:04:e2:32:65:0c:96: 0a:ca:88:05:e0:12:ef:bf:b7:04:19:bd:4a:41:cc:bb:c8:ef: 66:e8:00:d6:0c:89:24:a5:4c:33:0c:d2:87:f1:ae:a5:31:7d: fb:43:f6:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEU1KPNkcuzJKMyrS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI0MDMxNDE4NDYyNloXDTI0MDYxMjE4NDYyNlowLzEtMCsGA1UEAxMk MjY3NGMzYzUtODRhNS00MzExLTk0NzYtZmFmZjU4MWFiOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXtJjMmG//Zd9GVHJ8r9KtZedcuj0f9q+1zC sTE/vH0FxRwl7oUvcViH8jWHjKxxcKEoN1fx8wWvso/VxdeygbtKxxofo7WboUZf z2JoeyGuhZMAVnG9xY4aYx1O5G+kF44D0TUPptfNheBa9+yYsDcxedTD/MlEsQzd eobMQUnGFfb72SNdMq70nMNgiNiudPKBCvOvaKruE0JDupAyAkk0iYGd7fQyt10q p4QnUZZf0fAowz9qITr9k5GNn60XtfdiYL0y9xkNNyABZB0CrerzxGzMlQpq3mQ4 lguAh8C8Hl6FqGhnwWeOr4AmtQN7UCtI4JcIJkLyziPZOkfrrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL1OV3HlqaYvI0pXts/aWtbqwwJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArfc6NPvPf85KGDKq+H3srVCiasTirm+bEc4SBuMlDImp818aad2AM WIS1ZbVLRnQhU9Vd1hyE/HtzOGaONTlle4E4guoloK+PkiZXpmFEFkQUeJPJiM5J 3QJOLSH8iGSEyyEmKyN8EQ9fsQH5vOg8MC4N3LUaxH+OvdNB9cYukrOTvmtnnwUc n76g7ahOgOGzn8qFJxolJTMc/+BlFq4Sr2Jnpea8daKp78fs5K0KfMZ7i18W2/O8 rWyMywIDQzTeuPWMWZQEdPbCZdiTqdr52jEE4jJlDJYKyogF4BLvv7cEGb1KQcy7 yO9m6ADWDIkkpUwzDNKH8a6lMX37Q/Y3 -----END CERTIFICATE-----Generated at Sun May 19 18:35:37 2024 by rpki-client on console-ams.rpki-client.org