$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38dc19e2-b014-3a2b-88e7-9de1e3e05963.roa File: 38dc19e2-b014-3a2b-88e7-9de1e3e05963.roa (raw, json) Hash identifier: NgnjGqWrN60g/TrxDhaBkUvkgJrngJtffnHcIK5yBvo= Subject key identifier: 2E:25:6D:78:60:AD:1C:DE:A7:78:FA:46:08:C8:58:B5:E2:29:9E:6A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285845C178DE68B52D1F1B826CBF40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38dc19e2-b014-3a2b-88e7-9de1e3e05963.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 209242 IP address blocks: 2607:8940:2ff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:78:de:68:b5:2d:1f:1b:82:6c:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=53cafddb-3e2a-4d19-b542-8c3cacc34f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:ea:e7:98:35:b4:29:ad:d2:2f:83:d9:19: 10:87:ff:d2:71:fd:7f:39:09:e5:3a:b9:d5:7e:0c: 4d:26:92:e2:c3:b9:b2:1e:dc:85:92:ec:63:ae:92: 4c:79:27:04:e0:42:97:91:f3:79:33:a7:da:0f:ca: 0c:a2:ee:3b:b4:df:cf:b8:31:64:88:95:2e:ea:3b: 6a:9c:c5:ac:cb:c6:6e:d8:74:68:ec:50:1b:c0:d5: 4a:31:17:be:d8:df:65:53:10:2d:86:b0:1d:0b:b7: 2f:29:1b:cb:df:68:da:ae:90:70:dc:fd:c6:04:13: 62:f1:3a:14:62:82:76:5b:51:83:7d:31:0f:e6:7a: f3:0c:0b:f5:75:92:41:8b:a4:c3:a4:67:8e:37:0b: a5:e7:1a:6f:96:a3:df:14:0a:ac:dc:a5:5e:2a:fb: 38:fc:53:de:63:d3:79:a3:81:b8:74:83:8b:b7:99: 87:9c:fc:65:a0:58:48:e4:1a:fc:da:07:80:25:f1: 7c:39:15:18:04:a2:f5:97:49:5f:1a:57:ac:86:63: b4:55:9d:2a:b7:f2:14:cf:4a:c2:ac:2e:1d:f4:13: 8e:3b:a8:14:86:7e:01:59:dd:6f:24:d2:57:3f:ca: 5e:4b:46:00:5f:4a:9f:0f:58:4a:7b:50:95:df:09: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:6D:78:60:AD:1C:DE:A7:78:FA:46:08:C8:58:B5:E2:29:9E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/38dc19e2-b014-3a2b-88e7-9de1e3e05963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:2ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2d:b1:2b:61:72:f7:00:e1:08:cb:3d:09:5e:04:d2:58:0e: f1:03:da:ba:48:24:0b:7f:48:b4:31:09:6d:78:af:21:50:5c: 9c:54:ee:89:5e:ff:e4:c1:b3:74:84:20:46:b9:21:d3:d2:96: ac:0c:ac:e6:a9:9d:2a:b4:45:6f:6f:12:c8:d4:b5:be:d5:62: ee:fd:97:48:31:b2:e9:17:d1:e8:f2:27:d9:4e:7b:79:8a:8c: ac:6a:d0:f6:f8:72:40:82:51:5a:6b:1f:4f:d9:bb:73:8e:03: 28:5e:55:4a:0e:9d:2d:7b:97:85:a4:b3:2b:7a:3f:2d:ce:3e: 8c:d6:cb:37:a5:c7:e3:01:6c:3a:29:e4:31:32:ac:cd:23:44: cb:e7:c2:84:8e:43:5a:3c:4c:e7:ea:3e:d2:93:ca:2e:19:5a: 56:12:85:55:86:b8:1d:f4:47:ce:2e:da:f8:05:7a:fd:16:e8: 04:a6:b6:23:2a:c7:a3:4a:ba:85:5b:5d:93:5c:4b:94:ab:3a: 90:9c:a0:cf:19:c3:ad:d5:0c:6c:ae:69:89:04:da:5f:9a:e5: fd:58:b0:80:3e:d2:ab:c5:f6:0a:2a:4f:da:9e:c6:11:7c:8e: 2b:9d:97:c5:de:01:5e:9d:22:a7:c0:22:78:e7:f5:ae:91:5b: 8b:ea:0e:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeN5otS0fG4Jsv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NTNjYWZkZGItM2UyYS00ZDE5LWI1NDItOGMzY2FjYzM0ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW3q55g1tCmt0i+D2RkQh//Scf1/OQnlOrnV fgxNJpLiw7myHtyFkuxjrpJMeScE4EKXkfN5M6faD8oMou47tN/PuDFkiJUu6jtq nMWsy8Zu2HRo7FAbwNVKMRe+2N9lUxAthrAdC7cvKRvL32jarpBw3P3GBBNi8ToU YoJ2W1GDfTEP5nrzDAv1dZJBi6TDpGeONwul5xpvlqPfFAqs3KVeKvs4/FPeY9N5 o4G4dIOLt5mHnPxloFhI5Br82geAJfF8ORUYBKL1l0lfGleshmO0VZ0qt/IUz0rC rC4d9BOOO6gUhn4BWd1vJNJXP8peS0YAX0qfD1hKe1CV3wk2YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC4lbXhgrRzep3j6RgjIWLXiKZ5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzhkYzE5ZTItYjAxNC0z YTJiLTg4ZTctOWRlMWUzZTA1OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQC/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUtsSthcvcA4QjLPQleBNJYDvED2rpIJAt/SLQxCW14ryFQXJxU 7ole/+TBs3SEIEa5IdPSlqwMrOapnSq0RW9vEsjUtb7VYu79l0gxsukX0ejyJ9lO e3mKjKxq0Pb4ckCCUVprH0/Zu3OOAyheVUoOnS17l4Wksyt6Py3OPozWyzelx+MB bDop5DEyrM0jRMvnwoSOQ1o8TOfqPtKTyi4ZWlYShVWGuB30R84u2vgFev0W6ASm tiMqx6NKuoVbXZNcS5SrOpCcoM8Zw63VDGyuaYkE2l+a5f1YsIA+0qvF9goqT9qe xhF8jiudl8XeAV6dIqfAInjn9a6RW4vqDtY= -----END CERTIFICATE-----Generated at Tue May 7 16:56:46 2024 by rpki-client on console-ams.rpki-client.org