$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa File: de150f3e-630a-34f4-a9f4-8aae30296160.roa (raw, json) Hash identifier: TqGPeFMraT5HeMPprNQENXyJwsYgg0ecTDtUXFeB5A4= Subject key identifier: AD:E9:75:07:A9:61:27:34:C8:23:18:B1:FE:1C:1C:CB:6F:36:9C:2D Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F432858450EEADB0032D4F7DC82A81B00 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa Signing time: Fri 01 Mar 2024 02:00:27 +0000 ROA not before: Fri 01 Mar 2024 02:00:27 +0000 ROA not after: Thu 30 May 2024 01:00:27 +0000 asID: 14618 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0e:ea:db:00:32:d4:f7:dc:82:a8:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Mar 1 02:00:27 2024 GMT Not After : May 30 01:00:27 2024 GMT Subject: CN=5d6dfc73-138a-4ed3-b684-e4e471f8a509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:16:cb:b5:a1:c8:5b:13:65:4c:bb:ac:a2: 19:d7:4d:03:15:49:ae:ba:72:02:a1:c2:a4:29:47: 89:bf:cf:1d:93:4e:70:b6:c7:5f:24:79:0a:f4:8d: d7:3c:16:b1:51:72:ee:79:a7:7d:9e:69:b1:d0:3f: 86:43:0f:0d:0f:99:26:db:fc:47:15:cc:5d:b4:1a: e4:5b:73:a6:6b:26:75:19:2e:4c:00:ba:7b:d6:ed: 6a:b6:58:cd:52:df:a9:58:80:e5:50:56:c5:9b:21: 7a:88:d5:66:00:35:79:c4:8a:ba:cc:ad:7d:3a:b3: 7a:c1:d3:33:3a:99:fd:2c:e5:71:29:5b:97:f5:d0: a9:97:3a:70:23:7f:18:df:c4:05:15:86:46:81:cf: c6:23:8e:ad:b6:a2:2d:8a:8e:75:24:00:73:e2:46: 98:d0:82:b3:21:56:59:60:30:fa:2a:c2:9d:43:bf: 5d:ca:13:01:c5:c0:ad:01:f2:8a:42:1d:c3:c0:e0: 19:b9:5f:9c:f5:e6:fd:0c:28:10:39:75:56:d6:d8: 30:1d:f3:88:e0:95:15:0a:dc:d5:11:16:97:91:93: 9b:62:24:15:05:16:67:22:47:a4:0e:fd:0d:c2:75: fe:23:88:2f:b8:37:33:1a:9c:43:9c:72:d1:38:53: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E9:75:07:A9:61:27:34:C8:23:18:B1:FE:1C:1C:CB:6F:36:9C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f2:4e:36:25:43:81:61:f6:6a:f4:d6:ae:82:60:8d:94:18: b0:24:bd:6d:0a:cc:10:70:db:07:6a:5a:00:7d:b3:9b:f7:53: 91:13:7a:74:74:24:06:de:7b:11:fd:e0:a0:92:4e:a9:f1:b1: 75:8c:f1:3d:b7:e4:6a:56:29:80:82:65:94:37:84:77:e8:32: 56:d0:f2:e3:97:3b:b6:94:3b:4c:e5:61:e4:57:b5:a5:64:97: b3:4d:33:b8:6d:db:68:29:48:5b:f7:96:cb:e7:95:50:4a:e3: ca:93:69:5d:70:9d:17:0a:3a:b4:30:9c:02:f2:0d:ef:71:22: 9b:d5:44:17:8d:0d:5d:5d:7e:f6:f3:e4:e9:eb:16:59:2b:26: 07:13:75:13:d7:e2:93:28:92:6a:6d:74:00:ae:4e:4d:bc:9f: 40:5e:b3:9e:ac:6e:a7:9f:b5:96:62:75:a4:d9:2b:89:26:55: 5e:56:04:7e:97:0b:b6:b0:82:d3:5c:ac:71:f3:15:90:ea:27: 83:d7:bf:da:4c:7f:0a:90:f6:ce:de:3d:38:d3:22:f5:01:c8: 18:31:5b:11:5a:73:0c:57:73:bc:e2:60:97:8c:fd:8a:24:be: 9f:e3:a4:77:71:50:b5:97:21:f3:ab:d3:c5:90:67:1c:4b:bb: 3a:e7:0e:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUO6tsAMtT33IKoGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI0MDMwMTAyMDAyN1oXDTI0MDUzMDAxMDAyN1owLzEtMCsGA1UEAxMk NWQ2ZGZjNzMtMTM4YS00ZWQzLWI2ODQtZTRlNDcxZjhhNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl4Wy7WhyFsTZUy7rKIZ100DFUmuunICocKk KUeJv88dk05wtsdfJHkK9I3XPBaxUXLuead9nmmx0D+GQw8ND5km2/xHFcxdtBrk W3OmayZ1GS5MALp71u1qtljNUt+pWIDlUFbFmyF6iNVmADV5xIq6zK19OrN6wdMz Opn9LOVxKVuX9dCplzpwI38Y38QFFYZGgc/GI46ttqItio51JABz4kaY0IKzIVZZ YDD6KsKdQ79dyhMBxcCtAfKKQh3DwOAZuV+c9eb9DCgQOXVW1tgwHfOI4JUVCtzV ERaXkZObYiQVBRZnIkekDv0NwnX+I4gvuDczGpxDnHLROFNivwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3pdQepYSc0yCMYsf4cHMtvNpwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZGUxNTBmM2UtNjMwYS0z NGY0LWE5ZjQtOGFhZTMwMjk2MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEjyTjYlQ4Fh9mr01q6CYI2UGLAkvW0KzBBw2wdqWgB9s5v3U5ET enR0JAbeexH94KCSTqnxsXWM8T235GpWKYCCZZQ3hHfoMlbQ8uOXO7aUO0zlYeRX taVkl7NNM7ht22gpSFv3lsvnlVBK48qTaV1wnRcKOrQwnALyDe9xIpvVRBeNDV1d fvbz5OnrFlkrJgcTdRPX4pMokmptdACuTk28n0Bes56sbqeftZZidaTZK4kmVV5W BH6XC7awgtNcrHHzFZDqJ4PXv9pMfwqQ9s7ePTjTIvUByBgxWxFacwxXc7ziYJeM /Yokvp/jpHdxULWXIfOr08WQZxxLuzrnDrY= -----END CERTIFICATE-----Generated at Wed May 1 22:27:16 2024 by rpki-client on console-fra.rpki-client.org