$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa File: 43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (raw, json) Hash identifier: mhscFw9m0wYnw6KD3n9x8rdd5/ZAOMFhYOhy0sqGND4= Subject key identifier: 6B:FD:42:3D:4C:FF:4A:75:F7:24:18:0F:12:F1:29:87:2D:6C:43:7A Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F432858453317E987C976787CF45F9700 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa Signing time: Thu 14 Mar 2024 01:00:25 +0000 ROA not before: Thu 14 Mar 2024 01:00:25 +0000 ROA not after: Wed 12 Jun 2024 01:00:25 +0000 asID: 399889 IP address blocks: 2602:fc54::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:33:17:e9:87:c9:76:78:7c:f4:5f:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Mar 14 01:00:25 2024 GMT Not After : Jun 12 01:00:25 2024 GMT Subject: CN=c8af7643-71e2-420c-b7f7-24a6a93ac83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:bd:95:8c:7a:1d:9e:fe:99:bc:b5:23:5b: b4:16:85:cc:94:ad:4d:cd:43:3e:02:ab:ad:1e:68: b7:71:1a:44:7c:ec:80:5e:b8:4a:11:51:21:01:ab: 55:d2:b7:9b:53:88:4e:4d:fa:77:f8:b1:bd:d1:21: 44:fa:6a:fc:6d:03:d2:b6:ba:f1:99:af:69:f2:19: 02:ae:aa:4b:e0:ed:9d:83:4b:9d:11:03:c4:a6:4b: b2:0e:0a:1d:2e:30:5e:65:36:ee:f9:7d:6e:4f:b8: c5:c9:42:52:0a:69:5c:4b:df:5d:a9:73:c3:f1:b8: 00:72:ee:d5:a6:77:da:2e:cc:26:40:16:94:10:8a: df:5a:49:96:a8:8b:2b:5e:e2:9a:d9:8f:49:e1:8f: 16:3c:f2:f6:a4:7f:d4:d9:9a:c7:41:b4:26:39:79: 1b:cf:a5:56:0d:90:e0:ae:ae:d2:3e:51:93:bb:e4: a1:4e:25:6b:10:d0:cd:b0:43:ca:99:71:80:7d:69: 41:39:27:46:4a:e1:f6:22:6a:97:66:b2:2a:1e:1e: c4:8e:62:4c:dc:e4:ed:b9:bd:f6:78:64:21:8e:49: aa:40:b8:cc:81:3d:94:e5:51:ea:f4:9c:16:c2:b9: e0:73:42:68:cb:87:b4:d0:f9:5a:8b:49:55:dd:90: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FD:42:3D:4C:FF:4A:75:F7:24:18:0F:12:F1:29:87:2D:6C:43:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc54::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6f:c9:b6:77:0a:ad:8d:be:c2:af:54:88:70:e6:25:8e:01: 81:eb:b9:c0:d0:31:17:81:3d:dd:36:2a:a3:2e:a8:46:7c:d6: 01:38:fe:98:88:41:2a:37:34:9d:44:26:9b:f4:dd:b6:32:8d: 87:89:9f:0c:d0:9e:f8:11:62:a4:f9:10:ec:cf:4e:2e:de:dc: 6e:d3:3c:b0:b6:eb:59:56:78:d2:78:8b:5d:33:5d:2d:38:8d: be:55:89:45:39:53:ad:fc:d3:f7:1d:bf:e7:17:9b:9b:ae:c1: 55:55:3f:39:c9:f6:9b:f4:4e:47:08:88:ef:d6:1c:57:a9:74: 9e:5d:63:34:68:18:0e:3f:ab:c6:6d:7d:cf:4a:f3:ea:53:24: b9:33:b3:9b:4f:06:5a:30:c9:fc:ee:88:73:98:57:7f:90:5f: 60:82:8c:16:92:d4:1f:0b:bb:fa:f7:d6:88:59:1c:eb:1b:6e: af:9c:3b:5b:68:85:e1:cb:26:6a:b1:5f:4b:4b:4e:e8:05:89: d9:d4:a8:1c:5c:bf:02:59:6d:e3:cf:15:1f:cc:1c:5f:eb:0b: 48:94:ca:90:65:8f:b2:2d:3f:01:bc:a9:75:dc:02:b6:22:9f: 9f:b8:78:6c:40:0a:1a:49:ed:84:c1:30:00:f6:90:eb:8e:34: bd:33:98:47 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEUzF+mHyXZ4fPRflwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk YzhhZjc2NDMtNzFlMi00MjBjLWI3ZjctMjRhNmE5M2FjODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ia9lYx6HZ7+mby1I1u0FoXMlK1NzUM+Aqut Hmi3cRpEfOyAXrhKEVEhAatV0rebU4hOTfp3+LG90SFE+mr8bQPStrrxma9p8hkC rqpL4O2dg0udEQPEpkuyDgodLjBeZTbu+X1uT7jFyUJSCmlcS99dqXPD8bgAcu7V pnfaLswmQBaUEIrfWkmWqIsrXuKa2Y9J4Y8WPPL2pH/U2ZrHQbQmOXkbz6VWDZDg rq7SPlGTu+ShTiVrENDNsEPKmXGAfWlBOSdGSuH2ImqXZrIqHh7EjmJM3OTtub32 eGQhjkmqQLjMgT2U5VHq9JwWwrngc0Joy4e00Plai0lV3ZDC8QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGv9Qj1M/0p19yQYDxLxKYctbEN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvNDNkMDEzZWMtYTZjMy0z Mzg4LThkMTQtMDc5MTMyMmRkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8VAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARW/JtncKrY2+wq9UiHDmJY4Bgeu5wNAxF4E93TYqoy6oRnzWATj+ mIhBKjc0nUQmm/TdtjKNh4mfDNCe+BFipPkQ7M9OLt7cbtM8sLbrWVZ40niLXTNd LTiNvlWJRTlTrfzT9x2/5xebm67BVVU/Ocn2m/RORwiI79YcV6l0nl1jNGgYDj+r xm19z0rz6lMkuTOzm08GWjDJ/O6Ic5hXf5BfYIKMFpLUHwu7+vfWiFkc6xtur5w7 W2iF4csmarFfS0tO6AWJ2dSoHFy/Allt488VH8wcX+sLSJTKkGWPsi0/AbypddwC tiKfn7h4bEAKGknthMEwAPaQ6440vTOYRw== -----END CERTIFICATE-----Generated at Sat May 4 15:05:22 2024 by rpki-client on console-fra.rpki-client.org