$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa File: bdfa9f99-9030-3231-847b-1cc988121e52.roa (raw, json) Hash identifier: hEiFh5nA+zXw4TIED5LPyA9AxTOu3F5FV1L51+HKIDs= Subject key identifier: 06:5A:AE:B6:D2:33:5C:15:03:2E:EE:F8:04:71:7F:E8:38:47:D1:6B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285845C17903F76D267B6FF2F78700 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:45c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:79:03:f7:6d:26:7b:6f:f2:f7:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=32ff3fd2-3b27-4e4e-99fc-2c6ea1064d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:ac:59:e1:8b:ea:1b:fc:f2:77:56:b0:ca: 59:99:2e:3c:0f:1a:6d:0b:13:81:49:60:1f:f0:37: 87:22:ea:c9:5f:2a:c2:e0:b0:d0:c0:92:63:44:82: 10:eb:b1:d0:78:5c:c5:3b:be:ba:de:0a:2c:c5:74: 19:b0:4f:74:ec:a4:20:b6:8c:03:02:23:9c:8f:7b: 2a:78:90:98:03:07:32:aa:f3:65:21:bf:e4:49:cd: 0a:13:b3:fd:1c:94:3d:55:3e:4d:8f:6f:f4:1b:b2: 51:79:4c:ae:62:bf:a9:96:7d:7a:cc:3d:47:28:cf: 05:a8:21:8b:57:49:7b:88:90:ac:2c:8b:78:37:cd: d6:95:cf:29:ce:6e:99:4b:44:d9:7e:84:ee:92:98: 55:70:16:f2:c0:e7:18:54:b9:a6:2d:85:1d:17:a6: a7:97:a8:94:44:5c:89:91:5a:6d:b9:cb:d2:85:3a: a6:f4:ae:fd:44:7f:66:22:b2:83:31:6b:a6:4a:19: 53:81:52:ea:3a:1e:cd:b6:1d:ce:6d:b0:48:1e:33: 39:06:a1:ad:c6:f6:7a:2b:74:56:a3:c8:02:73:d3: 56:1a:d7:7e:5f:cd:97:d2:f6:59:67:4e:90:e8:3b: ff:bc:76:c9:78:f8:fd:ac:a1:ce:af:29:44:3b:ef: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5A:AE:B6:D2:33:5C:15:03:2E:EE:F8:04:71:7F:E8:38:47:D1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:45c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3e:1e:51:8d:67:3b:b5:1e:ac:42:2d:e7:74:ad:89:6f:80: c4:f3:d8:12:95:0e:5e:f0:52:5e:df:18:54:cc:56:ac:36:ad: 30:b5:f7:25:2e:a7:c9:a7:0b:c6:9b:1e:95:f9:51:d7:5f:2d: 43:20:0d:f0:b5:c3:f1:6d:7b:ff:0e:48:61:fc:56:35:3c:d9: df:c2:e2:81:6f:46:8b:13:e8:07:7a:34:9c:df:de:81:1a:a6: 6d:51:2f:96:16:34:a9:e4:0c:0c:21:b2:15:a6:ca:12:6b:1f: 3b:28:d1:74:d2:9f:a5:51:7f:e2:de:3b:c0:11:05:c0:02:63: 19:03:bc:f1:50:3c:f2:62:36:75:d5:0c:2a:80:91:11:29:14: d9:46:69:c0:51:1a:e0:f1:88:2c:e9:d6:63:ea:af:f4:c2:0c: be:1f:df:0f:ef:e5:a1:5c:6a:f0:9a:1f:ef:a9:79:84:4b:19: 82:1e:16:9d:b7:bd:62:91:21:cb:d5:55:77:39:c0:c0:d6:f9: b8:e9:3b:3b:97:18:a1:70:07:40:9c:1c:1c:f9:c0:af:00:79: 3d:c2:de:d6:2e:ac:36:d8:ad:72:97:12:36:a2:54:c0:e4:3b: 27:85:bc:70:f7:6b:e9:1c:a5:a0:da:dc:93:92:35:91:12:ed: 0d:b6:f2:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXBeQP3bSZ7b/L3hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk MzJmZjNmZDItM2IyNy00ZTRlLTk5ZmMtMmM2ZWExMDY0ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+usWeGL6hv88ndWsMpZmS48DxptCxOBSWAf 8DeHIurJXyrC4LDQwJJjRIIQ67HQeFzFO7663gosxXQZsE907KQgtowDAiOcj3sq eJCYAwcyqvNlIb/kSc0KE7P9HJQ9VT5Nj2/0G7JReUyuYr+pln16zD1HKM8FqCGL V0l7iJCsLIt4N83Wlc8pzm6ZS0TZfoTukphVcBbywOcYVLmmLYUdF6anl6iURFyJ kVptucvShTqm9K79RH9mIrKDMWumShlTgVLqOh7Nth3ObbBIHjM5BqGtxvZ6K3RW o8gCc9NWGtd+X82X0vZZZ06Q6Dv/vHbJePj9rKHOrylEO+8LJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZarrbSM1wVAy7u+ARxf+g4R9FrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmRmYTlmOTktOTAzMC0z MjMxLTg0N2ItMWNjOTg4MTIxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEXA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHo+HlGNZzu1HqxCLed0rYlvgMTz2BKVDl7wUl7fGFTMVqw2rTC1 9yUup8mnC8abHpX5UddfLUMgDfC1w/Fte/8OSGH8VjU82d/C4oFvRosT6Ad6NJzf 3oEapm1RL5YWNKnkDAwhshWmyhJrHzso0XTSn6VRf+LeO8ARBcACYxkDvPFQPPJi NnXVDCqAkREpFNlGacBRGuDxiCzp1mPqr/TCDL4f3w/v5aFcavCaH++peYRLGYIe Fp23vWKRIcvVVXc5wMDW+bjpOzuXGKFwB0CcHBz5wK8AeT3C3tYurDbYrXKXEjai VMDkOyeFvHD3a+kcpaDa3JOSNZES7Q228s4= -----END CERTIFICATE-----Generated at Tue Jun 4 17:46:51 2024 by rpki-client on console-ams.rpki-client.org