$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa File: dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa (raw, json) Hash identifier: TZl4KnSqtqVjnhTp2Nx2AR2Ba3XsOPIvsSWIthvemno= Subject key identifier: BD:AB:2D:AE:A7:D0:AD:D6:A0:E1:B4:6A:8E:22:4D:03:9D:1E:CE:B9 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F43285844EECFF6C446FFA7F9FE2715C0 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa Signing time: Sun 18 Feb 2024 14:00:30 +0000 ROA not before: Sun 18 Feb 2024 14:00:30 +0000 ROA not after: Sat 18 May 2024 13:00:30 +0000 asID: 400065 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ee:cf:f6:c4:46:ff:a7:f9:fe:27:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Feb 18 14:00:30 2024 GMT Not After : May 18 13:00:30 2024 GMT Subject: CN=65587daf-94f4-4e25-9f21-c2cca5c456f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:d2:5f:5b:ee:d9:50:26:e5:16:ab:cb:4c: d3:ca:80:ee:87:53:86:12:8d:b3:e0:be:88:d6:41: 53:d6:ee:28:95:81:9d:81:cc:22:59:04:98:e8:c1: 79:b0:72:8e:8b:21:ae:c1:5d:79:6b:8e:90:43:08: 48:86:d1:f3:b4:b1:fc:f5:ea:cf:2b:73:aa:b9:68: 04:a6:c1:e3:a3:92:23:88:18:ff:5a:87:60:ae:35: 00:2e:01:0f:f6:86:7a:26:f9:0b:ef:da:b3:54:e1: 86:d5:ac:ad:82:4e:12:6c:0b:fb:f3:fc:05:99:55: 2c:a7:b4:45:ce:69:c3:79:29:06:59:51:88:dd:91: 0f:88:8c:ff:33:6e:3d:bc:af:b4:00:9c:f7:b6:72: 09:c0:48:87:f2:1b:7c:f3:38:30:c5:fe:c2:28:60: 58:52:31:d4:3f:f4:bd:bb:21:c4:cf:47:ab:1c:1d: cc:e5:33:9d:7a:f5:1a:7c:1a:9b:b6:28:ab:02:54: ae:54:f0:03:f6:04:7d:65:f2:f1:40:b3:3e:2f:83: 77:96:7c:da:ad:a7:e2:94:f1:63:6f:b4:e3:df:50: 6b:c8:cc:bf:c9:9a:32:a3:26:f2:c2:4d:38:c1:6e: 31:8f:ee:ca:17:a0:72:75:14:91:69:1f:60:01:96: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:2D:AE:A7:D0:AD:D6:A0:E1:B4:6A:8E:22:4D:03:9D:1E:CE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:82:3e:10:5f:07:64:fc:bc:31:6a:fe:af:d2:65:d2:9c:b6: 25:59:0d:6b:6f:78:11:f2:4c:45:8e:70:70:96:13:4b:0b:91: 7a:56:f6:f1:b8:ad:96:63:38:fb:20:c3:35:72:0f:41:cd:9c: 36:be:c7:ab:1c:0e:e3:61:30:68:a9:ff:a3:b8:96:fb:b5:d1: 00:5a:50:71:0f:b7:ef:85:32:11:49:63:a8:02:16:93:ec:10: 04:0c:92:71:da:dc:bb:b5:bb:54:6d:53:82:a4:1d:c0:37:4e: 36:21:67:b6:24:62:88:ff:1e:7d:44:d4:94:19:92:18:ec:4e: 56:b7:af:3e:f8:be:c3:0c:84:4f:d6:4b:a3:96:97:ff:a8:05: 92:0f:21:2f:0a:75:fe:37:13:5e:f1:bb:c7:33:95:b6:68:f1: b0:97:0b:86:6f:c8:ca:31:c8:3e:2e:46:25:08:21:61:5b:0d: f5:0a:ed:7d:33:c9:46:c2:3d:2e:00:92:85:a0:ba:3a:35:29: 23:6c:52:1d:5e:30:30:7e:21:4c:ea:05:43:e3:0b:b5:58:7a: 1e:45:53:03:0d:f1:a7:78:20:89:8a:83:d0:54:df:b1:54:ea: 6e:90:7b:33:9d:2e:22:9a:8f:0f:cb:dd:0f:bd:0c:e9:de:13: 3d:df:a2:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETuz/bERv+n+f4nFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk NjU1ODdkYWYtOTRmNC00ZTI1LTlmMjEtYzJjY2E1YzQ1NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUTSX1vu2VAm5Rary0zTyoDuh1OGEo2z4L6I 1kFT1u4olYGdgcwiWQSY6MF5sHKOiyGuwV15a46QQwhIhtHztLH89erPK3OquWgE psHjo5IjiBj/WodgrjUALgEP9oZ6JvkL79qzVOGG1aytgk4SbAv78/wFmVUsp7RF zmnDeSkGWVGI3ZEPiIz/M249vK+0AJz3tnIJwEiH8ht88zgwxf7CKGBYUjHUP/S9 uyHEz0erHB3M5TOdevUafBqbtiirAlSuVPAD9gR9ZfLxQLM+L4N3lnzarafilPFj b7Tj31BryMy/yZoyoybywk04wW4xj+7KF6BydRSRaR9gAZaP6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL2rLa6n0K3WoOG0ao4iTQOdHs65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZGQ0ZDg0ZGItN2EzZC0z NWFkLWExZGItNmU3NzBjMWM3NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACiCPhBfB2T8vDFq/q/SZdKctiVZDWtveBHyTEWOcHCWE0sLkXpW 9vG4rZZjOPsgwzVyD0HNnDa+x6scDuNhMGip/6O4lvu10QBaUHEPt++FMhFJY6gC FpPsEAQMknHa3Lu1u1RtU4KkHcA3TjYhZ7YkYoj/Hn1E1JQZkhjsTla3rz74vsMM hE/WS6OWl/+oBZIPIS8Kdf43E17xu8czlbZo8bCXC4ZvyMoxyD4uRiUIIWFbDfUK 7X0zyUbCPS4AkoWgujo1KSNsUh1eMDB+IUzqBUPjC7VYeh5FUwMN8ad4IImKg9BU 37FU6m6QezOdLiKajw/L3Q+9DOneEz3foiE= -----END CERTIFICATE-----Generated at Wed Apr 24 16:07:05 2024 by rpki-client on console-ams.rpki-client.org