$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/baa39b3d-9e1b-333c-86cb-a372168fbd18.roa File: baa39b3d-9e1b-333c-86cb-a372168fbd18.roa (raw, json) Hash identifier: usFgsiCxQGgh/R7rK4YkGU6bTpFUpfTDyVMrGkLSmYA= Subject key identifier: F2:D8:B4:0B:85:34:48:F0:E4:9E:0C:17:25:EC:55:56:03:D8:C8:30 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285845C178E87697DBA2CF5B219500 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/baa39b3d-9e1b-333c-86cb-a372168fbd18.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 209242 IP address blocks: 2607:8940:2d70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:78:e8:76:97:db:a2:cf:5b:21:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=d1ca8712-af0b-4c84-b255-5bb467471f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:e6:cb:a7:00:3e:cd:26:6e:8b:af:81:17: ef:59:d5:c4:fb:8e:f2:32:4d:57:0a:ac:34:de:15: 5a:41:ad:b7:61:9a:45:ac:b1:44:52:ff:7b:3d:bb: 3f:d8:d0:7a:3f:be:c3:3d:48:25:00:14:e2:d1:ac: 68:64:e3:db:db:1b:10:f2:b1:03:ff:77:2e:b6:b6: f8:b4:4b:27:eb:35:75:64:0d:6f:cb:fd:e6:00:25: d4:db:11:8a:1a:61:a1:99:de:17:40:08:f8:fe:b9: 01:d3:57:fc:97:90:67:08:26:35:4c:ca:bc:8f:4d: be:8f:fb:e4:bb:a5:d1:fa:a4:38:00:12:1f:47:9d: 81:ec:0e:4a:da:32:9c:d6:6d:c7:36:5f:c8:35:4c: 35:8f:12:07:f6:54:7a:e6:9d:86:5c:1d:22:f6:24: fd:1c:4d:c1:7e:a9:ed:47:08:ca:e0:ce:a0:35:98: c4:a7:28:86:71:f0:75:69:13:e9:de:38:6c:fd:52: fa:c2:4a:b8:d1:12:c9:6f:3e:7f:b8:c8:fd:f3:34: e7:61:7d:61:4c:c0:be:5f:27:f4:52:da:7e:9d:1e: 22:c1:19:c0:f6:77:ca:4a:b7:b9:d5:16:1b:4a:24: 45:0b:d4:dd:db:46:06:b2:02:cf:de:be:fa:54:e1: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D8:B4:0B:85:34:48:F0:E4:9E:0C:17:25:EC:55:56:03:D8:C8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/baa39b3d-9e1b-333c-86cb-a372168fbd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:2d70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:64:4d:26:8c:a4:c9:89:42:f6:28:05:2a:ba:f0:bf:37:5d: cc:ed:7a:e2:44:fd:ef:0e:dc:61:6a:ad:54:a3:8e:33:a8:d0: 6f:c5:d5:6e:2f:e6:19:b7:d2:8d:14:b3:76:a2:e2:b4:87:fb: d9:5e:08:12:e5:da:a8:8b:40:14:ed:56:3e:13:03:30:78:35: a7:76:2f:d9:27:54:2a:92:e4:d4:c9:c7:79:bc:8d:48:68:53: dc:4a:5d:70:86:b8:bf:4b:b0:97:73:38:e9:52:92:28:de:31: e9:ca:74:29:75:74:c8:2b:d4:0d:b8:b1:d4:b9:f2:b0:4e:8c: aa:df:6e:e4:94:32:f1:ef:40:a8:75:3c:89:94:c2:ba:4c:c5: 55:02:25:5f:a0:cb:2c:be:64:99:be:6d:31:23:8d:4e:fb:8b: 05:4a:00:8c:b7:26:17:88:30:40:c6:b5:5e:a0:88:c3:57:98: 83:55:0e:a6:e1:10:be:47:8b:15:91:88:8e:f4:db:be:d4:d2: 9b:8b:be:87:aa:46:e9:ad:51:ed:35:72:ff:5c:6b:38:d6:07: 04:d0:1c:26:b2:c4:9a:8f:86:73:63:3a:b2:18:81:5e:e1:ad: 96:23:29:2f:6e:18:c2:40:2f:ec:9b:0b:a6:2d:da:c3:aa:7c: a8:16:62:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeOh2l9uiz1shlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDFjYTg3MTItYWYwYi00Yzg0LWIyNTUtNWJiNDY3NDcxZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p3my6cAPs0mbouvgRfvWdXE+47yMk1XCqw0 3hVaQa23YZpFrLFEUv97Pbs/2NB6P77DPUglABTi0axoZOPb2xsQ8rED/3cutrb4 tEsn6zV1ZA1vy/3mACXU2xGKGmGhmd4XQAj4/rkB01f8l5BnCCY1TMq8j02+j/vk u6XR+qQ4ABIfR52B7A5K2jKc1m3HNl/INUw1jxIH9lR65p2GXB0i9iT9HE3Bfqnt RwjK4M6gNZjEpyiGcfB1aRPp3jhs/VL6wkq40RLJbz5/uMj98zTnYX1hTMC+Xyf0 Utp+nR4iwRnA9nfKSre51RYbSiRFC9Td20YGsgLP3r76VOHDMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPLYtAuFNEjw5J4MFyXsVVYD2MgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmFhMzliM2QtOWUxYi0z MzNjLTg2Y2ItYTM3MjE2OGZiZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQC1w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAVkTSaMpMmJQvYoBSq68L83XczteuJE/e8O3GFqrVSjjjOo0G/F 1W4v5hm30o0Us3ai4rSH+9leCBLl2qiLQBTtVj4TAzB4Nad2L9knVCqS5NTJx3m8 jUhoU9xKXXCGuL9LsJdzOOlSkijeMenKdCl1dMgr1A24sdS58rBOjKrfbuSUMvHv QKh1PImUwrpMxVUCJV+gyyy+ZJm+bTEjjU77iwVKAIy3JheIMEDGtV6giMNXmINV DqbhEL5HixWRiI70277U0puLvoeqRumtUe01cv9cazjWBwTQHCayxJqPhnNjOrIY gV7hrZYjKS9uGMJAL+ybC6Yt2sOqfKgWYvc= -----END CERTIFICATE-----Generated at Mon May 6 22:48:19 2024 by rpki-client on console-ams.rpki-client.org