$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json) Hash identifier: GFxlrnktodNgKtPDJ2VAwlQGnSbQvB4RwEdBBa3dZ0A= Subject key identifier: 5B:08:A5:0F:5F:B9:37:97:FA:B7:2D:14:49:2A:29:B4:7C:77:8B:ED Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F43285845D0D39F32A5D02688434E1B80 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa Signing time: Thu 09 May 2024 13:00:33 +0000 ROA not before: Thu 09 May 2024 13:00:33 +0000 ROA not after: Wed 07 Aug 2024 13:00:33 +0000 asID: 40382 IP address blocks: 2606:e540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d0:d3:9f:32:a5:d0:26:88:43:4e:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: May 9 13:00:33 2024 GMT Not After : Aug 7 13:00:33 2024 GMT Subject: CN=054e497c-c654-4f9a-9374-85bacb408c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2b:47:68:41:ab:78:f9:05:e9:7d:f1:10:9e: 9a:9d:c2:f9:0e:88:4e:77:17:23:a2:49:e3:6e:f3: bf:ef:1d:6c:e7:43:50:7e:94:3d:fd:f4:43:4e:d8: cd:79:2d:a7:01:ed:22:10:2e:ad:9c:33:d9:e1:e9: 44:02:87:a1:94:14:30:df:c9:f9:60:90:0c:40:c5: 6e:23:5e:df:db:b3:63:68:89:b2:80:62:25:0f:91: 7d:b8:c5:30:3a:60:54:df:e9:b1:5e:48:3d:4d:36: 3b:32:4d:da:40:20:64:62:8d:fe:30:a1:27:0f:11: 34:17:53:a4:70:1e:c0:58:73:a6:71:6d:d4:30:1d: bd:b1:c8:a1:14:92:4c:fb:29:76:d4:b2:96:be:ff: f5:1c:56:c5:6e:01:e3:3b:81:ba:74:b9:eb:01:fb: 9b:15:fa:31:e1:cd:69:c3:af:69:99:f5:d1:b7:7c: 06:a3:e9:8f:80:4e:81:db:f4:00:2a:d9:04:b2:c3: f9:eb:62:65:8c:ee:d4:79:74:16:28:93:c3:6a:5a: 98:97:fc:8e:97:d1:0c:8b:86:96:97:d7:77:ea:f4: b5:30:3b:f9:1f:7f:42:25:5e:57:9e:13:07:37:d4: a4:7e:12:62:43:64:bf:b9:90:36:0f:89:12:11:36: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:08:A5:0F:5F:B9:37:97:FA:B7:2D:14:49:2A:29:B4:7C:77:8B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a4:15:96:7e:50:09:07:f9:53:09:21:a2:2a:5b:5a:86:8d: 8f:05:7f:a1:bf:54:54:37:a5:58:f7:5d:2d:1e:31:3f:e9:f5: 59:05:1e:e2:56:c6:2b:13:42:c9:de:75:13:c1:1a:92:43:fc: 00:0c:25:4f:3b:e9:f7:77:53:8c:30:36:35:5a:d4:23:ca:1c: ce:46:ea:cf:e9:6d:b3:73:c8:ef:d7:95:dd:3b:9f:33:a1:41: 35:1b:11:08:71:83:46:93:d3:1e:fc:3f:59:68:39:1b:a1:ac: 5b:d8:b6:da:69:73:a5:c1:e5:04:a6:80:17:22:25:b7:3e:c5: 1b:c6:7e:83:8a:1d:cf:42:6b:51:53:a9:76:51:d8:ea:53:cc: ea:81:ec:e1:eb:e0:4a:64:dd:86:38:e4:61:e8:4a:28:34:06: d0:24:24:df:43:85:a8:67:9f:fb:1f:3b:43:71:ee:07:bb:f3: 9b:1c:39:00:90:4a:2b:bf:45:c2:e4:b4:e2:40:b6:26:e1:13: 6e:e6:45:25:81:0e:a2:40:3c:28:67:60:ad:73:7d:ce:e8:cf: f1:c8:77:95:ab:cb:0f:8a:99:a4:e3:0f:17:f4:59:9d:d7:f4: a4:8f:f0:2b:ae:e5:93:b0:b3:ce:71:d9:44:f6:a2:53:69:63: d6:4e:d7:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXQ058ypdAmiENOG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI0MDUwOTEzMDAzM1oXDTI0MDgwNzEzMDAzM1owLzEtMCsGA1UEAxMk MDU0ZTQ5N2MtYzY1NC00ZjlhLTkzNzQtODViYWNiNDA4YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCtHaEGrePkF6X3xEJ6ancL5DohOdxcjoknj bvO/7x1s50NQfpQ9/fRDTtjNeS2nAe0iEC6tnDPZ4elEAoehlBQw38n5YJAMQMVu I17f27NjaImygGIlD5F9uMUwOmBU3+mxXkg9TTY7Mk3aQCBkYo3+MKEnDxE0F1Ok cB7AWHOmcW3UMB29scihFJJM+yl21LKWvv/1HFbFbgHjO4G6dLnrAfubFfox4c1p w69pmfXRt3wGo+mPgE6B2/QAKtkEssP562JljO7UeXQWKJPDalqYl/yOl9EMi4aW l9d36vS1MDv5H39CJV5XnhMHN9SkfhJiQ2S/uZA2D4kSETbG4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFsIpQ9fuTeX+rctFEkqKbR8d4vtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQpBWWflAJB/lTCSGiKltaho2PBX+hv1RUN6VY910tHjE/6fVZBR7i VsYrE0LJ3nUTwRqSQ/wADCVPO+n3d1OMMDY1WtQjyhzORurP6W2zc8jv15XdO58z oUE1GxEIcYNGk9Me/D9ZaDkboaxb2LbaaXOlweUEpoAXIiW3PsUbxn6Dih3PQmtR U6l2UdjqU8zqgezh6+BKZN2GOORh6EooNAbQJCTfQ4WoZ5/7HztDce4Hu/ObHDkA kEorv0XC5LTiQLYm4RNu5kUlgQ6iQDwoZ2Ctc33O6M/xyHeVq8sPipmk4w8X9Fmd 1/Skj/ArruWTsLPOcdlE9qJTaWPWTtcl -----END CERTIFICATE-----Generated at Wed May 22 01:54:33 2024 by rpki-client on console-fra.rpki-client.org