$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa File: 2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json) Hash identifier: CQ7umAiObq3fkZRPop+Bl5cJI89QOKfzkJOJgwJYGEg= Subject key identifier: 69:FF:4C:B5:A9:1F:2B:A2:E1:D0:B3:F4:42:3C:E5:90:FE:45:2D:49 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F432858458B088B4D84692D203C9874A0 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa Signing time: Sun 14 Apr 2024 13:00:34 +0000 ROA not before: Sun 14 Apr 2024 13:00:34 +0000 ROA not after: Sat 13 Jul 2024 13:00:34 +0000 asID: 64269 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8b:08:8b:4d:84:69:2d:20:3c:98:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Apr 14 13:00:34 2024 GMT Not After : Jul 13 13:00:34 2024 GMT Subject: CN=f4463be2-e599-4f05-a129-b0d5f117b2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d8:36:f4:de:b4:3e:6c:e8:24:20:92:6d:46: 23:69:cd:47:49:cb:8d:3e:02:08:83:b6:b7:68:78: 31:eb:68:e8:1c:a6:d2:cf:c9:52:d7:7f:8d:96:51: 0b:72:1c:dc:44:9c:4a:99:63:c7:ba:bd:1c:60:70: f0:18:e1:83:0d:39:e5:46:50:1b:d5:74:67:24:e5: 2e:f4:a4:dd:54:3e:8a:31:e4:ab:25:ea:f1:3f:b2: 17:0b:24:d7:ca:cf:8f:52:a4:72:52:91:7b:52:b2: cc:1e:9d:e2:01:b3:eb:1e:e8:1a:e5:04:db:47:ed: 52:9c:4f:28:31:c0:05:ea:49:42:10:61:6e:10:99: 7f:0e:6b:5f:fa:25:5a:97:46:ed:0f:05:55:a3:14: f8:b0:53:30:52:94:f3:6b:a5:95:c9:58:69:5e:12: 1d:18:a8:f7:7a:57:0b:61:13:34:d0:a3:a8:a4:10: 3b:70:4a:38:b5:81:c3:4a:ba:2e:06:22:9a:e3:83: cf:ff:df:2e:d0:f3:77:19:a8:2f:54:f3:01:63:e3: 4c:aa:63:48:63:1b:7e:a7:14:4e:07:72:55:a9:83: e0:10:79:19:2d:36:ce:ee:17:be:44:b2:ff:5d:fb: da:a9:3e:2e:67:fe:ef:36:fe:64:ef:a1:fe:f4:a4: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:4C:B5:A9:1F:2B:A2:E1:D0:B3:F4:42:3C:E5:90:FE:45:2D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:12:82:1c:b0:eb:5e:01:ca:f5:24:7c:c6:7b:e1:50:1d:1a: 5a:45:b9:b6:be:20:f7:ca:cb:99:4d:e3:05:b0:e4:44:90:5f: b1:e1:f1:a5:2b:76:da:f6:6a:0f:72:02:d6:33:2f:6b:a3:a4: b0:ff:f3:db:49:af:9b:72:29:16:fa:3b:5e:6d:97:41:16:95: 48:1f:4f:ba:52:94:f6:4b:19:c7:dd:6d:1e:d2:97:a7:b2:a9: a0:92:4f:36:97:bb:7b:84:a9:f0:bf:ec:67:26:65:b0:f4:bf: b8:bc:83:a7:05:ee:4e:8e:f1:c5:7c:45:c9:1c:09:64:1b:2e: 0b:6e:34:5e:d9:1b:b2:b0:38:5a:3b:0c:60:99:9f:9b:ed:fe: ef:0e:8d:25:25:14:36:0e:62:ec:c1:21:b5:50:c3:e9:e1:98: 0d:e0:e1:47:0a:2f:12:81:71:7b:5e:b8:9b:a6:33:cd:7e:91: 1a:b3:f9:57:8c:f5:7f:bc:c6:ed:38:fc:7c:f5:97:c8:c0:83: 17:45:f8:9a:f0:af:98:80:03:eb:d5:4b:ed:ae:06:6a:97:2b: 7e:83:23:9b:b8:18:4d:74:35:8f:13:2c:b1:44:8b:9d:87:cd: 66:85:71:c4:a2:90:eb:4f:6c:6b:d7:e4:c1:4c:9b:88:d5:57: f3:5f:42:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWLCItNhGktIDyYdKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI0MDQxNDEzMDAzNFoXDTI0MDcxMzEzMDAzNFowLzEtMCsGA1UEAxMk ZjQ0NjNiZTItZTU5OS00ZjA1LWExMjktYjBkNWYxMTdiMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dg29N60PmzoJCCSbUYjac1HScuNPgIIg7a3 aHgx62joHKbSz8lS13+NllELchzcRJxKmWPHur0cYHDwGOGDDTnlRlAb1XRnJOUu 9KTdVD6KMeSrJerxP7IXCyTXys+PUqRyUpF7UrLMHp3iAbPrHuga5QTbR+1SnE8o McAF6klCEGFuEJl/Dmtf+iVal0btDwVVoxT4sFMwUpTza6WVyVhpXhIdGKj3elcL YRM00KOopBA7cEo4tYHDSrouBiKa44PP/98u0PN3GagvVPMBY+NMqmNIYxt+pxRO B3JVqYPgEHkZLTbO7he+RLL/XfvaqT4uZ/7vNv5k76H+9KQqCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGn/TLWpHyui4dCz9EI85ZD+RS1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMmU3ZmVkYzYtNDIzMS0z NDUzLTljNWEtYmQyNGU1MzA0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3EoIcsOteAcr1JHzGe+FQHRpaRbm2viD3ysuZTeMFsOREkF+x4fGl K3ba9moPcgLWMy9ro6Sw//PbSa+bcikW+jtebZdBFpVIH0+6UpT2SxnH3W0e0pen sqmgkk82l7t7hKnwv+xnJmWw9L+4vIOnBe5OjvHFfEXJHAlkGy4LbjRe2RuysDha OwxgmZ+b7f7vDo0lJRQ2DmLswSG1UMPp4ZgN4OFHCi8SgXF7XribpjPNfpEas/lX jPV/vMbtOPx89ZfIwIMXRfia8K+YgAPr1UvtrgZqlyt+gyObuBhNdDWPEyyxRIud h81mhXHEopDrT2xr1+TBTJuI1VfzX0LI -----END CERTIFICATE-----Generated at Thu May 2 04:27:57 2024 by rpki-client on console-fra.rpki-client.org