$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d901aa-c539-3bbc-ba18-6a50bac90801.roa File: 40d901aa-c539-3bbc-ba18-6a50bac90801.roa (raw, json) Hash identifier: vyI+ELmM/KF7ZIeGD6FaFjTLl0s3PLo9t0FJsn0MoIQ= Subject key identifier: D8:0A:06:2C:66:76:17:72:7E:E6:C1:26:BE:3A:7D:C7:3B:94:F9:95 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285845C178E3892109A0CEC3D1A0E0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d901aa-c539-3bbc-ba18-6a50bac90801.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 209242 IP address blocks: 2607:8940:2d30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:78:e3:89:21:09:a0:ce:c3:d1:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=6474ce2a-cbc3-462c-8f95-133ab3cfe211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:70:2d:fe:e6:85:92:8c:21:33:4d:98:d9: 2a:87:c3:64:be:4a:20:cc:f7:d0:5d:ea:11:82:ce: f6:d2:3c:e1:94:e4:5f:88:59:86:9b:d7:dd:4f:b7: 6b:18:27:ba:8e:11:1c:49:ca:f0:0c:b7:5b:e3:70: fd:59:6d:b0:78:cb:54:2a:9a:55:80:30:c9:35:95: a8:b4:8a:41:31:8a:3e:6f:19:b8:f9:41:c8:5f:08: 20:db:2a:6b:09:86:e2:a5:bf:22:98:69:8a:d7:1b: 7d:e6:7e:93:0d:48:aa:0a:26:2e:15:4f:23:db:bd: d3:81:df:78:20:a9:2f:d0:e3:52:5b:ae:27:03:15: 4d:33:b6:84:2b:09:88:3a:f9:ac:b8:35:72:74:b1: 67:8d:64:c1:07:61:37:6a:11:fe:db:fc:9c:bf:81: c2:bc:59:52:ba:11:c1:5f:1b:40:61:9e:22:b3:50: 08:b1:cc:41:ac:bb:29:e6:66:2f:ca:76:f9:6d:ca: 9e:47:b1:9b:da:b3:2c:e5:53:0a:e5:c8:bf:83:14: 06:92:26:71:96:93:43:c3:d6:31:07:1a:c5:bf:f3: cc:3d:4a:eb:2a:ab:44:e2:2b:71:0c:f7:f6:24:e7: 32:f8:93:f8:6b:89:5c:51:0b:86:c6:86:41:6a:49: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:06:2C:66:76:17:72:7E:E6:C1:26:BE:3A:7D:C7:3B:94:F9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d901aa-c539-3bbc-ba18-6a50bac90801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:2d30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cd:5c:dd:37:f9:a7:80:5e:ad:68:19:94:96:0c:8d:3c:59: 33:8c:ea:da:0e:8c:85:18:b6:6f:5d:c5:f9:47:0e:bc:d3:96: 88:e5:3a:fb:e6:82:c9:54:cb:18:a1:d8:4d:12:15:4a:75:de: 4e:3d:94:e8:01:20:6c:a6:06:fe:d6:84:55:73:a5:72:d7:1e: 2d:a5:94:9b:fd:aa:e6:8b:18:ef:9d:5f:41:d5:b2:bd:c3:e0: 61:81:ce:8c:bb:ea:5e:5f:89:97:15:48:8e:79:3b:ce:c4:53: f8:a1:3c:96:24:6f:ba:09:58:59:91:82:2f:24:d2:59:15:ec: 6f:c4:bb:20:8a:ef:0d:18:3b:30:d9:ba:b7:b8:ad:c3:90:8b: 57:f0:3d:49:9a:b6:74:af:e4:9a:ed:7d:4d:07:fd:9f:0b:b8: fd:37:b7:f2:20:53:32:d1:24:87:74:67:d7:27:ac:9c:31:6b: f8:91:12:ec:f9:3e:b7:55:b9:f6:5f:fd:4e:c0:50:3b:47:bf: 69:b1:dc:ae:eb:9e:15:75:41:04:47:8e:06:c2:0e:54:7c:5c: 1d:a4:35:1c:30:57:07:83:47:ca:57:90:a5:e3:45:b4:b2:b3: 3b:f5:96:7f:5f:17:2a:d8:42:79:8f:2c:f4:38:15:10:89:0c: 28:e4:fc:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeOOJIQmgzsPRoOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NjQ3NGNlMmEtY2JjMy00NjJjLThmOTUtMTMzYWIzY2ZlMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yZwLf7mhZKMITNNmNkqh8NkvkogzPfQXeoR gs720jzhlORfiFmGm9fdT7drGCe6jhEcScrwDLdb43D9WW2weMtUKppVgDDJNZWo tIpBMYo+bxm4+UHIXwgg2yprCYbipb8imGmK1xt95n6TDUiqCiYuFU8j273Tgd94 IKkv0ONSW64nAxVNM7aEKwmIOvmsuDVydLFnjWTBB2E3ahH+2/ycv4HCvFlSuhHB XxtAYZ4is1AIscxBrLsp5mYvynb5bcqeR7Gb2rMs5VMK5ci/gxQGkiZxlpNDw9Yx BxrFv/PMPUrrKqtE4itxDPf2JOcy+JP4a4lcUQuGxoZBakkvnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgKBixmdhdyfubBJr46fcc7lPmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDBkOTAxYWEtYzUzOS0z YmJjLWJhMTgtNmE1MGJhYzkwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQC0w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHNXN03+aeAXq1oGZSWDI08WTOM6toOjIUYtm9dxflHDrzTlojl OvvmgslUyxih2E0SFUp13k49lOgBIGymBv7WhFVzpXLXHi2llJv9quaLGO+dX0HV sr3D4GGBzoy76l5fiZcVSI55O87EU/ihPJYkb7oJWFmRgi8k0lkV7G/EuyCK7w0Y OzDZure4rcOQi1fwPUmatnSv5JrtfU0H/Z8LuP03t/IgUzLRJId0Z9cnrJwxa/iR Euz5PrdVufZf/U7AUDtHv2mx3K7rnhV1QQRHjgbCDlR8XB2kNRwwVweDR8pXkKXj RbSyszv1ln9fFyrYQnmPLPQ4FRCJDCjk/LM= -----END CERTIFICATE-----Generated at Tue May 7 16:56:46 2024 by rpki-client on console-ams.rpki-client.org