$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa File: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (raw, json) Hash identifier: 4dvIonqO8wwiLb68Lv47Mm04liolMBuFcQ5s6A+TvyI= Subject key identifier: 24:2E:11:60:3B:81:CA:97:50:CE:20:78:5E:19:17:BC:1A:CF:F5:B5 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F43285845068ABA92D28D314602739160 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa Signing time: Tue 27 Feb 2024 02:00:26 +0000 ROA not before: Tue 27 Feb 2024 02:00:26 +0000 ROA not after: Mon 27 May 2024 01:00:26 +0000 asID: 16509 IP address blocks: 2600:400:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:06:8a:ba:92:d2:8d:31:46:02:73:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Feb 27 02:00:26 2024 GMT Not After : May 27 01:00:26 2024 GMT Subject: CN=36698f86-ab01-4e62-b4b7-200e565b804c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:c7:cf:85:7c:dd:26:19:bf:05:42:50:76: e5:1b:33:48:62:9b:39:45:77:87:a6:8f:e1:2e:bf: 0b:f6:cf:bf:af:1f:7d:45:cf:64:9b:25:4f:f4:3b: 0a:66:9e:0b:d7:dc:49:b6:f1:49:67:ff:28:8b:fb: 5a:40:20:8f:e6:a1:5e:91:cd:c5:32:33:0d:ce:da: da:0f:e8:dc:79:bd:ed:cc:e6:cd:fc:7e:2f:40:2d: 11:65:9a:8b:3c:6e:f3:91:a0:7f:97:2f:93:6b:da: 29:a0:f9:9e:4f:a1:bd:42:00:2a:ea:57:7e:5f:71: 27:34:59:e0:72:4f:09:ed:46:1a:4d:a3:b4:00:1f: 8e:36:05:89:4e:db:69:09:c2:a7:4a:bb:d2:c4:bf: 0c:d4:f0:8e:ae:7a:84:27:4a:29:ae:fb:4f:40:bf: 85:5b:69:ca:71:53:0f:bb:91:0d:0f:3c:c8:e6:ee: a6:cb:b2:ec:1d:51:97:e5:f3:d6:ea:1e:96:d4:05: c1:b8:cf:9f:e1:34:58:8f:91:52:d8:de:9b:b0:89: 06:ba:90:40:42:05:4a:32:65:b3:09:0f:3d:7b:fa: f2:28:25:a1:cb:57:85:d9:50:f9:15:28:d1:b6:e7: 55:b1:1c:f4:0c:d4:5e:68:ae:9c:9a:2c:23:fd:41: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:11:60:3B:81:CA:97:50:CE:20:78:5E:19:17:BC:1A:CF:F5:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400:ff00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:25:c8:79:2b:60:52:d5:eb:f1:80:c4:93:a4:af:2e:af:26: e5:61:de:4d:8b:2d:f9:32:69:fe:8a:96:f2:5f:9d:56:96:b1: 86:a1:c2:ae:fd:e9:c3:0d:19:75:b3:07:29:49:2e:4e:c6:70: f5:55:ae:7d:13:68:e0:e0:a6:5e:51:68:99:05:a2:0d:8c:71: c8:b2:0b:6a:84:e9:b3:2c:cc:f0:94:a8:c7:6c:f7:59:4f:e1: 8d:fc:80:97:ad:3b:01:84:44:fb:02:30:16:6b:e9:ae:e5:0c: 48:11:97:22:00:51:be:aa:e3:8c:fe:f6:53:0e:b5:50:63:3a: b2:80:a5:40:ae:03:7f:b9:8d:50:83:ed:bc:02:68:06:3d:d3: 85:d2:57:8a:2c:89:fa:3a:11:2d:f2:c6:c5:5f:db:a3:87:3b: e7:a0:9c:7e:37:28:ed:22:69:44:05:c0:5e:54:8f:96:c1:f7: a9:e2:b3:30:02:37:be:06:0c:d4:45:25:d1:9b:ce:c9:b0:b7: 5d:99:fe:28:e0:ab:c2:af:99:26:8f:75:32:db:27:be:94:c3: 6b:32:bb:8e:61:fd:dc:9b:0c:41:03:35:23:6b:07:bf:d9:34: 7e:76:4a:67:7e:e9:eb:15:32:d8:83:3f:d9:99:2d:ab:8a:4e: 62:e3:cc:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUGirqS0o0xRgJzkWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk MzY2OThmODYtYWIwMS00ZTYyLWI0YjctMjAwZTU2NWI4MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7vHz4V83SYZvwVCUHblGzNIYps5RXeHpo/h Lr8L9s+/rx99Rc9kmyVP9DsKZp4L19xJtvFJZ/8oi/taQCCP5qFekc3FMjMNztra D+jceb3tzObN/H4vQC0RZZqLPG7zkaB/ly+Ta9opoPmeT6G9QgAq6ld+X3EnNFng ck8J7UYaTaO0AB+ONgWJTttpCcKnSrvSxL8M1PCOrnqEJ0oprvtPQL+FW2nKcVMP u5ENDzzI5u6my7LsHVGX5fPW6h6W1AXBuM+f4TRYj5FS2N6bsIkGupBAQgVKMmWz CQ89e/ryKCWhy1eF2VD5FSjRtudVsRz0DNReaK6cmiwj/UECEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQuEWA7gcqXUM4geF4ZF7waz/W1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNGYwZmU2ZTctYjhhYi0z ZGFjLTkxNTUtMDAxYWM2NGRjMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAEAP8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIklyHkrYFLV6/GAxJOkry6vJuVh3k2LLfkyaf6KlvJfnVaWsYah wq796cMNGXWzBylJLk7GcPVVrn0TaODgpl5RaJkFog2McciyC2qE6bMszPCUqMds 91lP4Y38gJetOwGERPsCMBZr6a7lDEgRlyIAUb6q44z+9lMOtVBjOrKApUCuA3+5 jVCD7bwCaAY904XSV4osifo6ES3yxsVf26OHO+egnH43KO0iaUQFwF5Uj5bB96ni szACN74GDNRFJdGbzsmwt12Z/ijgq8KvmSaPdTLbJ76Uw2syu45h/dybDEEDNSNr B7/ZNH52Smd+6esVMtiDP9mZLauKTmLjzE8= -----END CERTIFICATE-----Generated at Thu May 2 21:11:08 2024 by rpki-client on console-fra.rpki-client.org