$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa File: 550364f5-a080-3961-a4d4-44ad3f54dcef.roa (raw, json) Hash identifier: S6gvN3+mmZ2bSmQPTeXV37iScNX5bkJrzkjVJo3s2g4= Subject key identifier: 3F:81:53:67:A2:80:7F:3B:CD:F6:82:00:28:EE:FB:34:9D:E7:F4:CD Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F43285845678EDEF56F88E0405AAEDEC0 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa Signing time: Mon 01 Apr 2024 20:02:12 +0000 ROA not before: Mon 01 Apr 2024 20:02:12 +0000 ROA not after: Sun 30 Jun 2024 20:02:12 +0000 asID: 397162 IP address blocks: 2604:f581::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Jun 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:8e:de:f5:6f:88:e0:40:5a:ae:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Apr 1 20:02:12 2024 GMT Not After : Jun 30 20:02:12 2024 GMT Subject: CN=43eb0d86-a14a-4914-8053-26a25b124405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:e0:df:3e:fd:f0:6d:34:2e:ba:7a:a3:b1: b5:ee:ca:29:98:7d:73:e4:74:d5:3b:eb:90:7a:49: b9:23:7a:d6:67:20:18:f0:ee:8b:54:83:bb:65:47: b6:b8:8f:82:25:c0:c7:49:b2:0d:72:67:1f:c4:fd: 71:7e:48:93:09:76:d3:d2:0f:6c:35:2f:36:c6:b1: c4:c9:ef:3a:e7:53:c0:ec:1f:af:24:23:ac:0b:d8: dc:15:6d:7a:9b:ce:87:04:a0:45:bf:d3:a2:f7:39: a1:16:86:88:cf:84:64:05:1c:dc:0f:4b:a9:9c:0e: c3:da:bb:e9:01:37:9f:ca:db:b2:ac:25:c5:dd:fa: 9e:9a:35:28:18:26:ee:1e:c5:2d:49:46:f0:f0:18: c3:84:fd:fe:c1:97:f8:d8:29:d7:e5:41:cd:e5:73: 80:76:f6:b7:d3:58:4c:01:2d:cc:a3:04:ac:22:af: c0:ca:2d:c8:55:0b:1f:fe:14:2e:a4:68:2a:14:e9: de:34:f6:0f:9a:28:77:36:60:f4:da:b0:bd:59:15: 07:08:17:48:c0:b1:be:f6:a1:9d:b0:0f:d6:28:b3: b6:ea:c4:65:df:23:ab:d6:58:7d:e7:e3:6d:d0:06: 44:9c:04:a5:79:1f:c7:d0:24:0e:2c:3d:85:b4:8d: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:81:53:67:A2:80:7F:3B:CD:F6:82:00:28:EE:FB:34:9D:E7:F4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f581::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:57:7d:f8:47:35:df:a3:36:c3:45:2f:d0:07:e2:26:54:a3: 5d:95:8e:0a:5a:61:6b:55:46:0f:97:2f:19:b4:de:fb:1e:8f: f6:67:de:3b:f6:44:6d:51:ed:05:af:a7:8c:65:0f:20:8d:1a: 74:3d:a9:c6:b7:ff:c1:dc:e8:2a:98:cf:fb:77:16:38:19:d1: e2:8b:79:5f:e3:7d:8c:52:b1:91:19:7b:4f:dc:47:91:72:46: 25:0f:4d:48:bb:07:ab:23:46:5a:19:48:df:a1:c8:16:26:b6: 69:4c:ca:10:f0:9d:c6:21:c3:60:a4:7d:ff:ad:4f:44:61:0e: d2:ad:1e:14:4e:65:b8:54:e2:93:8c:a8:17:6c:76:7d:29:2a: 52:b3:2a:05:5b:a0:92:34:74:63:83:50:32:1b:ab:06:5f:68: 00:12:6b:5f:fc:c3:d9:31:cd:08:57:1c:d0:8e:b1:6d:cf:3d: 69:dd:63:83:75:b4:62:b0:1b:60:04:69:4a:66:bc:ae:be:12: dd:05:38:8c:ba:a8:8c:65:e5:7d:d4:84:24:51:7f:6c:6f:67: 88:92:1a:08:21:f6:f9:c1:2e:12:68:92:f1:dd:13:ce:d7:0a: eb:95:ac:b1:1c:df:26:ae:c0:66:89:0d:11:1d:ec:68:02:68: a4:c7:62:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEVnjt71b4jgQFqu3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI0MDQwMTIwMDIxMloXDTI0MDYzMDIwMDIxMlowLzEtMCsGA1UEAxMk NDNlYjBkODYtYTE0YS00OTE0LTgwNTMtMjZhMjViMTI0NDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIjg3z798G00Lrp6o7G17sopmH1z5HTVO+uQ ekm5I3rWZyAY8O6LVIO7ZUe2uI+CJcDHSbINcmcfxP1xfkiTCXbT0g9sNS82xrHE ye8651PA7B+vJCOsC9jcFW16m86HBKBFv9Oi9zmhFoaIz4RkBRzcD0upnA7D2rvp ATefytuyrCXF3fqemjUoGCbuHsUtSUbw8BjDhP3+wZf42CnX5UHN5XOAdva301hM AS3MowSsIq/Ayi3IVQsf/hQupGgqFOneNPYPmih3NmD02rC9WRUHCBdIwLG+9qGd sA/WKLO26sRl3yOr1lh95+Nt0AZEnASleR/H0CQOLD2FtI3lmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD+BU2eigH87zfaCACju+zSd5/TNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNTUwMzY0ZjUtYTA4MC0z OTYxLWE0ZDQtNDRhZDNmNTRkY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1gTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtV334RzXfozbDRS/QB+ImVKNdlY4KWmFrVUYPly8ZtN77Ho/2Z947 9kRtUe0Fr6eMZQ8gjRp0PanGt//B3OgqmM/7dxY4GdHii3lf432MUrGRGXtP3EeR ckYlD01IuwerI0ZaGUjfocgWJrZpTMoQ8J3GIcNgpH3/rU9EYQ7SrR4UTmW4VOKT jKgXbHZ9KSpSsyoFW6CSNHRjg1AyG6sGX2gAEmtf/MPZMc0IVxzQjrFtzz1p3WOD dbRisBtgBGlKZryuvhLdBTiMuqiMZeV91IQkUX9sb2eIkhoIIfb5wS4SaJLx3RPO 1wrrlayxHN8mrsBmiQ0RHexoAmikx2Jl -----END CERTIFICATE-----Generated at Tue Jun 4 00:16:42 2024 by rpki-client on console-ams.rpki-client.org