$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json) Hash identifier: Ye4PCcWYp0ZenWSo2ZtIzmXmg6biQ4Fg/h0rldCXe90= Subject key identifier: 1A:C5:D2:4B:98:C8:08:21:CA:1E:1C:AD:1E:22:C0:62:7C:B9:75:4E Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F432858478456715843FC791840152500 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 30242 IP address blocks: 2620:84:c000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:71:58:43:fc:79:18:40:15:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=3e98d7d9-a793-463f-97c6-220466d201d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:a9:b8:13:50:5e:8b:2c:39:37:1b:a7:a3: 82:ac:d7:df:44:df:25:5f:19:7d:a4:79:cc:a5:1b: 8b:0c:6b:f2:65:98:10:ec:5e:c5:19:14:39:f7:40: 86:d2:c3:b2:e3:10:93:ac:5e:f6:05:ed:a5:99:fe: 95:8d:b7:b5:cd:4b:0b:a0:0a:09:1b:e5:6e:87:43: 9f:6d:fb:ae:96:b9:2d:20:b2:88:15:01:33:80:6b: 5e:41:b8:86:d1:4c:2b:71:c5:17:37:9e:bd:f9:4d: 75:7d:a9:8c:5e:33:84:18:5d:ae:04:eb:9f:2d:0b: 94:0f:23:5f:79:a1:4e:e4:9a:3f:9b:49:1c:0e:2d: f5:52:ca:72:0f:cc:a1:9b:06:ee:d8:97:b7:50:f5: 86:3f:20:e4:d0:8e:f2:6a:71:05:bb:3e:f3:ea:48: a8:1f:f7:a4:eb:1c:0c:8a:62:b0:dc:82:b1:fb:ff: 1f:d6:31:ee:10:19:a1:87:e6:4a:92:32:3a:28:e6: 58:6a:ff:bd:ea:bf:d9:b5:ec:b6:7c:77:c7:06:19: 2f:a5:84:3a:e0:0a:d6:e6:6e:37:fb:60:bd:7e:b3: c4:89:64:fe:a1:d2:d1:2f:00:d1:95:7d:dd:cb:ce: bb:7d:60:2e:df:e0:68:bc:59:6f:21:85:e9:df:38: d3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C5:D2:4B:98:C8:08:21:CA:1E:1C:AD:1E:22:C0:62:7C:B9:75:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv6: 2620:84:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:11:d7:4c:e6:41:a8:08:b1:f3:41:52:54:03:76:82:1b:1d: fb:9a:b4:4e:6d:98:97:80:1f:f4:04:b0:c6:7d:ab:f8:3b:ec: 54:e3:af:bd:c1:18:59:4b:27:6a:74:58:e4:2d:aa:98:9b:ef: 55:a3:6e:e1:57:14:c2:78:a4:b4:43:94:30:81:6a:b2:ad:af: a9:90:0d:15:7b:36:6d:af:fd:35:ee:0c:1f:02:f7:b5:d2:d2: ef:25:ff:6f:cc:0e:5c:c2:3c:6d:c0:49:31:32:11:36:cc:08: 16:33:00:de:c2:cd:73:62:f0:a6:0b:aa:c4:23:ea:bb:02:99: 18:2a:0a:65:5b:a7:72:a4:40:72:bf:32:00:9a:f7:b6:56:c3: 29:8e:bf:02:29:29:be:c0:25:41:7e:62:9a:15:f7:8e:76:5d: 53:64:b0:03:06:be:0b:ca:ab:9f:b6:a0:b4:d3:35:eb:20:eb: c0:6c:37:19:30:71:f6:0f:21:10:35:1b:82:38:c7:f9:18:09: 81:81:00:1c:a9:b4:11:fc:55:fd:8e:5c:cb:e4:51:c6:ea:eb: 76:f8:6a:20:ca:b1:ad:80:40:33:11:33:05:b7:15:87:5b:b2: 5a:9f:91:38:e5:e4:96:b8:c8:ee:2a:9d:9a:4a:49:7e:95:a2: 6e:16:77:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeEVnFYQ/x5GEAVJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk M2U5OGQ3ZDktYTc5My00NjNmLTk3YzYtMjIwNDY2ZDIwMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZWpuBNQXossOTcbp6OCrNffRN8lXxl9pHnM pRuLDGvyZZgQ7F7FGRQ590CG0sOy4xCTrF72Be2lmf6Vjbe1zUsLoAoJG+Vuh0Of bfuulrktILKIFQEzgGteQbiG0UwrccUXN569+U11famMXjOEGF2uBOufLQuUDyNf eaFO5Jo/m0kcDi31UspyD8yhmwbu2Je3UPWGPyDk0I7yanEFuz7z6kioH/ek6xwM imKw3IKx+/8f1jHuEBmhh+ZKkjI6KOZYav+96r/Ztey2fHfHBhkvpYQ64ArW5m43 +2C9frPEiWT+odLRLwDRlX3dy867fWAu3+BovFlvIYXp3zjTSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrF0kuYyAghyh4crR4iwGJ8uXVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvNTAzYTI4YzAtNGYyMy0z OGQ2LTk0Y2QtZjIyZDRjMDc3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMR10zmQagIsfNBUlQDdoIbHfuatE5tmJeAH/QEsMZ9q/g77FTj r73BGFlLJ2p0WOQtqpib71WjbuFXFMJ4pLRDlDCBarKtr6mQDRV7Nm2v/TXuDB8C 97XS0u8l/2/MDlzCPG3ASTEyETbMCBYzAN7CzXNi8KYLqsQj6rsCmRgqCmVbp3Kk QHK/MgCa97ZWwymOvwIpKb7AJUF+YpoV9452XVNksAMGvgvKq5+2oLTTNesg68Bs NxkwcfYPIRA1G4I4x/kYCYGBAByptBH8Vf2OXMvkUcbq63b4aiDKsa2AQDMRMwW3 FYdbslqfkTjl5Ja4yO4qnZpKSX6Vom4Wd0k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:57 2024 by rpki-client on console-ams.rpki-client.org