$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa File: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (raw, json) Hash identifier: JtG6aZDz3mzXJl2D+zVViBWzDUhLzAXrRzrjZi8+Ihk= Subject key identifier: E5:4F:08:22:DD:D2:94:BC:E6:CF:7D:9A:1B:56:D0:BD:3F:15:18:55 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F432858459E93687A62AF863E176E0C00 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa Signing time: Sun 21 Apr 2024 13:00:35 +0000 ROA not before: Sun 21 Apr 2024 13:00:35 +0000 ROA not after: Sat 20 Jul 2024 13:00:35 +0000 asID: 395927 IP address blocks: 2604:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9e:93:68:7a:62:af:86:3e:17:6e:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Apr 21 13:00:35 2024 GMT Not After : Jul 20 13:00:35 2024 GMT Subject: CN=eab358d0-253d-402c-b946-217413aea0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:2b:33:fa:a0:0d:2c:d4:c8:25:8e:28:c5: ac:f4:fc:0c:20:5e:fa:d3:c3:41:a0:80:20:7f:c5: 78:5c:75:a3:0d:77:59:16:80:96:b3:f5:cb:66:08: c7:17:74:dc:e2:ef:1f:b7:d2:c0:ce:5e:ce:ab:c3: cb:9f:6e:13:83:e6:cc:7b:b2:55:a3:09:5b:44:28: 1c:ac:e6:47:4a:6a:da:f8:3f:88:a2:f0:24:14:f6: e2:26:2c:c8:50:c1:a7:a9:fa:c9:19:c2:09:01:9c: cf:db:43:4e:02:4a:9c:32:c3:38:39:22:86:e0:20: f7:99:ff:a6:c6:1e:84:87:a6:b5:bd:da:b9:46:ef: b0:17:bc:e4:a9:61:25:b0:f3:c8:dc:9a:90:94:2e: 52:82:2d:8a:15:8d:c8:a8:e3:02:88:6a:e7:5a:9f: 06:70:a4:52:00:36:77:48:6d:fa:fa:1e:e9:8d:3f: ac:79:a0:1d:5b:1a:cd:2b:3a:80:d3:25:24:74:4b: 4d:2d:dd:c0:6f:7d:f9:48:a1:d0:7a:7f:a9:d9:16: 28:1e:5f:89:96:ca:c1:4e:fa:a6:8d:dd:57:a9:c9: 67:6f:17:58:35:40:c8:1d:1a:f0:50:34:96:0e:05: 8b:1c:23:85:b1:39:94:60:62:44:33:85:59:dc:b7: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4F:08:22:DD:D2:94:BC:E6:CF:7D:9A:1B:56:D0:BD:3F:15:18:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv6: 2604:f040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9f:da:97:01:ca:46:bd:d1:af:f0:21:09:83:1c:85:e9:3d: 36:b9:1d:33:cb:c5:9d:2f:10:92:07:07:31:d6:8f:b9:0e:15: 90:82:06:d8:1d:55:a0:34:32:d5:95:54:49:d8:c1:4b:29:b0: 2f:64:e5:84:e8:9a:fa:fe:3b:ca:ba:29:4c:d8:53:aa:a5:12: bf:a2:20:4c:4c:e2:47:16:84:9b:bb:1e:b4:17:11:6f:de:7a: d2:5f:35:04:f0:44:e4:31:a8:89:4a:0d:35:36:cb:73:59:0f: 6e:be:39:0b:af:4a:f7:f9:14:11:7c:63:86:e9:38:5f:cd:f3: 14:31:2e:67:3e:88:50:8a:1e:51:17:63:e6:bd:62:a6:d1:e0: 13:af:25:76:3c:a3:90:cd:2c:fb:42:d9:53:ca:85:f8:4a:13: db:4c:53:6d:c2:1b:dd:50:59:25:d0:ba:13:c5:2a:1b:89:73: 0d:6e:a3:c7:b3:fd:fd:aa:c8:2b:4d:90:25:81:6a:70:6c:3a: 5e:e8:da:bd:dc:62:9e:8e:9e:12:35:62:10:b6:57:f8:31:3a: a9:33:6f:90:22:51:e2:e6:47:e7:fa:13:ed:68:f3:06:eb:f3: 56:24:e0:36:55:ca:b7:b2:11:ee:dc:47:e4:84:64:bb:07:ac: 3c:13:b1:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWek2h6Yq+GPhduDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk ZWFiMzU4ZDAtMjUzZC00MDJjLWI5NDYtMjE3NDEzYWVhMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDArM/qgDSzUyCWOKMWs9PwMIF7608NBoIAg f8V4XHWjDXdZFoCWs/XLZgjHF3Tc4u8ft9LAzl7Oq8PLn24Tg+bMe7JVowlbRCgc rOZHSmra+D+IovAkFPbiJizIUMGnqfrJGcIJAZzP20NOAkqcMsM4OSKG4CD3mf+m xh6Eh6a1vdq5Ru+wF7zkqWElsPPI3JqQlC5Sgi2KFY3IqOMCiGrnWp8GcKRSADZ3 SG36+h7pjT+seaAdWxrNKzqA0yUkdEtNLd3Ab335SKHQen+p2RYoHl+JlsrBTvqm jd1XqclnbxdYNUDIHRrwUDSWDgWLHCOFsTmUYGJEM4VZ3Le2rQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOVPCCLd0pS85s99mhtW0L0/FRhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvZjZmZDc4NTMtNzAwMy0z Mjg2LWI4N2UtOGZmNjI1ZjJiYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLn9qXAcpGvdGv8CEJgxyF6T02uR0zy8WdLxCSBwcx1o+5DhWQggbY HVWgNDLVlVRJ2MFLKbAvZOWE6Jr6/jvKuilM2FOqpRK/oiBMTOJHFoSbux60FxFv 3nrSXzUE8ETkMaiJSg01NstzWQ9uvjkLr0r3+RQRfGOG6ThfzfMUMS5nPohQih5R F2PmvWKm0eATryV2PKOQzSz7QtlTyoX4ShPbTFNtwhvdUFkl0LoTxSobiXMNbqPH s/39qsgrTZAlgWpwbDpe6Nq93GKejp4SNWIQtlf4MTqpM2+QIlHi5kfn+hPtaPMG 6/NWJOA2Vcq3shHu3EfkhGS7B6w8E7GX -----END CERTIFICATE-----Generated at Thu May 23 04:28:54 2024 by rpki-client on console-fra.rpki-client.org