$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4d78225b-91d3-3fa9-8075-19c1462a0720.roa File: 4d78225b-91d3-3fa9-8075-19c1462a0720.roa (raw, json) Hash identifier: jLNRHTyEl/EjOfArHgewPgPQ73wHnEyYqV3jLHu76ic= Subject key identifier: 93:80:9D:6C:92:52:72:00:04:D9:5E:D9:4F:90:C4:0F:9E:4A:03:79 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285845C178FE0874446938A39486C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4d78225b-91d3-3fa9-8075-19c1462a0720.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 209242 IP address blocks: 2607:8940:30e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:78:fe:08:74:44:69:38:a3:94:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=b28b316e-57e7-45fb-b5ea-e809c26beadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:a7:ab:08:e4:02:21:a2:38:99:20:f3:22: cd:71:7e:0d:a5:18:fc:ab:e9:7b:a6:1f:5d:be:0d: ed:1d:77:6c:ed:6d:49:df:09:08:ee:d3:5d:84:ff: 4d:98:6e:0e:1c:56:0e:26:2f:72:f1:58:c5:f1:06: 63:a3:4e:4e:42:4f:6c:01:ab:88:13:5d:e2:05:00: e2:46:5b:1c:2d:db:62:d4:9a:9e:80:eb:17:56:8a: 8a:92:68:71:dd:d5:b1:cf:42:2c:92:0d:02:af:cf: e9:52:dc:d6:27:bb:6c:1c:8a:58:eb:ed:48:92:b0: 93:46:89:f4:47:01:58:3c:a9:ad:e6:09:9e:9a:9d: f0:b2:dc:df:21:72:f4:5c:58:b5:77:96:a2:46:e1: 3f:17:c0:a3:b9:97:fc:35:1d:6c:70:35:a2:f9:04: 93:20:d4:8b:d7:5e:41:b4:e3:65:6c:bf:7b:64:86: 99:7c:b6:77:0d:86:c8:36:0f:2b:32:5a:d5:e3:2b: 02:e7:2a:65:5c:90:eb:b8:3b:e4:e5:45:85:f0:c6: 13:34:23:22:45:28:07:8d:a6:b9:fd:f8:2c:f0:0f: 31:1b:88:6d:76:11:ac:f7:14:1c:f3:51:d0:fe:8e: 70:5b:0d:73:17:2a:5e:3a:53:b9:1a:fd:55:07:77: c7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:80:9D:6C:92:52:72:00:04:D9:5E:D9:4F:90:C4:0F:9E:4A:03:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4d78225b-91d3-3fa9-8075-19c1462a0720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:30e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:27:87:fb:f6:ee:8e:09:89:6b:4a:6a:2d:d8:a1:d5:fd:21: 74:74:dd:46:a0:31:89:ff:54:d2:3a:68:06:fd:6c:15:90:69: b6:90:0a:c2:95:79:5c:8e:79:a4:75:83:2b:9e:b5:2b:00:5b: 80:f1:28:3a:20:60:16:59:50:60:da:b5:9a:25:39:92:60:a4: c8:13:9e:f9:7a:82:f4:83:1e:17:86:2b:7a:42:2c:b3:9c:51: 10:1a:de:5b:0f:36:05:80:b6:34:2b:ef:51:ca:91:b8:8a:3f: f3:c6:7b:f1:64:87:77:23:cc:23:33:b6:5a:a8:79:7d:2e:05: 84:10:a0:fb:5b:87:d9:e3:50:10:55:3f:09:7f:d6:94:99:49: 89:d9:d6:e2:1b:0e:05:0f:9a:6e:9b:0f:15:69:72:7e:47:da: 71:80:3b:e7:b1:ee:7f:05:f0:2d:e8:16:36:69:3c:01:c9:c9: 55:16:25:e5:61:33:95:ca:45:c3:d7:4d:61:4a:39:87:88:61: 7f:b3:a3:d6:8e:e9:c5:1a:a4:95:9c:12:ff:e1:6d:50:80:cb: 58:e1:b1:3d:4b:3f:48:ae:bb:35:c3:a5:12:d5:76:5e:d0:a3: 98:ae:eb:3f:44:b6:24:c1:d7:6f:9d:8b:21:98:b5:94:9d:80: e3:28:cf:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeP4IdERpOKOUhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YjI4YjMxNmUtNTdlNy00NWZiLWI1ZWEtZTgwOWMyNmJlYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KmnqwjkAiGiOJkg8yLNcX4NpRj8q+l7ph9d vg3tHXds7W1J3wkI7tNdhP9NmG4OHFYOJi9y8VjF8QZjo05OQk9sAauIE13iBQDi RlscLdti1JqegOsXVoqKkmhx3dWxz0Iskg0Cr8/pUtzWJ7tsHIpY6+1IkrCTRon0 RwFYPKmt5gmemp3wstzfIXL0XFi1d5aiRuE/F8CjuZf8NR1scDWi+QSTINSL115B tONlbL97ZIaZfLZ3DYbINg8rMlrV4ysC5yplXJDruDvk5UWF8MYTNCMiRSgHjaa5 /fgs8A8xG4htdhGs9xQc81HQ/o5wWw1zFypeOlO5Gv1VB3fH6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJOAnWySUnIABNle2U+QxA+eSgN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGQ3ODIyNWItOTFkMy0z ZmE5LTgwNzUtMTljMTQ2MmEwNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDDg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAonh/v27o4JiWtKai3YodX9IXR03UagMYn/VNI6aAb9bBWQabaQ CsKVeVyOeaR1gyuetSsAW4DxKDogYBZZUGDatZolOZJgpMgTnvl6gvSDHheGK3pC LLOcURAa3lsPNgWAtjQr71HKkbiKP/PGe/Fkh3cjzCMztlqoeX0uBYQQoPtbh9nj UBBVPwl/1pSZSYnZ1uIbDgUPmm6bDxVpcn5H2nGAO+ex7n8F8C3oFjZpPAHJyVUW JeVhM5XKRcPXTWFKOYeIYX+zo9aO6cUapJWcEv/hbVCAy1jhsT1LP0iuuzXDpRLV dl7Qo5iu6z9EtiTB12+diyGYtZSdgOMozwk= -----END CERTIFICATE-----Generated at Tue May 7 12:32:41 2024 by rpki-client on console-fra.rpki-client.org