$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/058f21ea-b458-3361-9182-0425e7f4021c.roa File: 058f21ea-b458-3361-9182-0425e7f4021c.roa (raw, json) Hash identifier: hoi5yTIbhiFw/kj+uC9a0gqvsdLjwTkZxuD3rMe2z4k= Subject key identifier: A4:3C:11:09:A5:F3:12:43:B5:70:BA:11:9C:77:1B:0D:06:3C:85:D0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285845C179122550D8186AF1FD2E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/058f21ea-b458-3361-9182-0425e7f4021c.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 209242 IP address blocks: 2607:8940:2060::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:79:12:25:50:d8:18:6a:f1:fd:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=9c8f0e43-c0a5-4f03-8584-3353e7dac224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:3e:f7:16:2d:ae:59:bd:39:f4:08:da:dc: 96:f0:24:c2:a7:5e:59:75:b4:27:f2:0d:f2:43:00: 5c:0a:31:68:0c:97:de:ce:98:1e:22:2d:e0:f3:46: 29:88:7d:b4:84:9c:8e:ce:0e:7e:09:b2:b3:bf:90: 31:6f:da:1c:a4:57:1e:b1:af:90:4d:71:37:23:b5: 6c:90:d0:66:2d:a8:28:57:af:94:1c:a7:98:f6:7f: 05:ee:41:ce:ee:28:7c:e2:ba:f4:ac:4e:2e:6b:e3: 52:96:00:08:b2:89:ec:ce:8b:1f:99:20:9c:99:de: ce:70:9b:ae:92:49:31:18:bc:79:d7:ca:2f:3b:66: 3b:b4:12:b6:8f:88:64:d8:0f:fa:95:e0:18:ba:a1: 44:9f:bd:f0:56:32:2a:88:29:e7:d3:77:8d:f8:c1: 6b:ea:fd:75:0a:b4:ad:77:49:07:6c:e3:90:66:05: dc:8c:92:07:7c:4c:0d:fb:7c:46:ca:ac:7d:f7:d3: e6:5e:cc:92:4c:09:83:5f:b7:3d:35:9a:bc:d5:52: d8:96:12:de:d8:fd:4b:18:e6:3a:70:61:75:f6:3f: 6e:b6:1b:59:41:07:61:5c:06:35:fd:7c:75:fe:d4: b8:28:6f:11:eb:18:d8:05:d9:7d:ca:f7:aa:e6:65: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3C:11:09:A5:F3:12:43:B5:70:BA:11:9C:77:1B:0D:06:3C:85:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/058f21ea-b458-3361-9182-0425e7f4021c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:2060::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:65:53:07:e5:6a:d0:3c:6e:d1:58:2e:1c:18:58:19:6c:fc: e7:3c:41:f2:aa:a9:3e:c4:98:d7:71:86:22:0e:ad:95:da:c3: 82:af:50:31:bc:6d:ed:f8:33:c0:a7:61:bb:b5:93:54:2e:8e: e1:a7:39:c5:4a:19:42:ee:3b:d8:d3:97:d1:7c:10:9b:77:fa: f3:f6:f2:fd:44:8b:08:d1:bb:d7:76:97:9b:45:dd:09:6c:68: 4e:f7:71:be:e4:df:0e:5b:5f:b3:07:7e:c0:6a:e1:bf:c8:77: 95:2c:2f:e5:5e:65:2e:dc:63:fb:07:fb:9d:09:4c:48:f7:ce: 9a:cd:0a:a4:b5:db:73:8c:e7:8d:72:18:27:19:bf:f0:3a:6d: 53:f8:43:26:8e:fb:56:2a:8e:a0:d2:5c:d5:28:42:9c:4b:26: cc:8c:c7:73:9e:27:75:dc:fd:c3:53:c7:c6:fe:99:58:68:e5: a3:aa:4b:c0:d8:f7:39:13:95:bc:4d:74:a7:8a:bb:1c:51:e2: f7:b1:40:c3:32:2d:19:73:e9:32:fa:03:a0:95:2c:71:93:21: 45:53:58:ad:37:94:44:73:43:0a:60:d1:3c:63:6f:65:90:d0: be:37:0a:f3:aa:a0:bd:d3:85:74:b7:74:97:16:5e:9f:59:61: f4:55:13:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeRIlUNgYavH9LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk OWM4ZjBlNDMtYzBhNS00ZjAzLTg1ODQtMzM1M2U3ZGFjMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkA+9xYtrlm9OfQI2tyW8CTCp15ZdbQn8g3y QwBcCjFoDJfezpgeIi3g80YpiH20hJyOzg5+CbKzv5Axb9ocpFcesa+QTXE3I7Vs kNBmLagoV6+UHKeY9n8F7kHO7ih84rr0rE4ua+NSlgAIsonszosfmSCcmd7OcJuu kkkxGLx518ovO2Y7tBK2j4hk2A/6leAYuqFEn73wVjIqiCnn03eN+MFr6v11CrSt d0kHbOOQZgXcjJIHfEwN+3xGyqx999PmXsySTAmDX7c9NZq81VLYlhLe2P1LGOY6 cGF19j9uthtZQQdhXAY1/Xx1/tS4KG8R6xjYBdl9yveq5mUU4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQ8EQml8xJDtXC6EZx3Gw0GPIXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDU4ZjIxZWEtYjQ1OC0z MzYxLTkxODItMDQyNWU3ZjQwMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF5lUwflatA8btFYLhwYWBls/Oc8QfKqqT7EmNdxhiIOrZXaw4Kv UDG8be34M8CnYbu1k1QujuGnOcVKGULuO9jTl9F8EJt3+vP28v1EiwjRu9d2l5tF 3QlsaE73cb7k3w5bX7MHfsBq4b/Id5UsL+VeZS7cY/sH+50JTEj3zprNCqS123OM 541yGCcZv/A6bVP4QyaO+1YqjqDSXNUoQpxLJsyMx3OeJ3Xc/cNTx8b+mVho5aOq S8DY9zkTlbxNdKeKuxxR4vexQMMyLRlz6TL6A6CVLHGTIUVTWK03lERzQwpg0Txj b2WQ0L43CvOqoL3ThXS3dJcWXp9ZYfRVE/8= -----END CERTIFICATE-----Generated at Tue May 7 22:25:38 2024 by rpki-client on console-fra.rpki-client.org