$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa File: 5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa (raw, json) Hash identifier: /eGSDi2UoLRx/PXTPT1v+gUg590SFJI1TpjoIbeRZ3I= Subject key identifier: D8:8D:96:3F:AD:20:54:A5:8D:0E:33:27:BF:5A:AB:67:FF:A9:0D:35 Certificate issuer: /CN=22ce2863-e26f-47ca-8b36-16048be7f337 Certificate serial: 010D0C9F432858475D40E3EB38B785E105805F80 Authority key identifier: 26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 398931 IP address blocks: 2620:af:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:e3:eb:38:b7:85:e1:05:80:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ce2863-e26f-47ca-8b36-16048be7f337 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=2559cc0b-37d0-460d-9173-fd05fe902b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:c4:b7:bc:94:2a:41:57:80:50:c9:16:15: 14:8e:0e:dd:ea:ab:97:d7:5a:dd:83:86:82:4d:1d: 97:f3:4d:b4:3b:f2:27:53:99:a6:3d:27:6b:0e:aa: 95:4a:c6:f0:63:86:64:9d:08:6f:36:c7:44:b9:fb: 37:ae:c1:c7:9d:3f:bb:8c:88:00:79:2f:6a:99:2f: 41:ec:3b:82:86:82:4b:c9:9f:4b:11:b9:16:f1:81: c6:9d:c2:1f:3a:30:07:8b:15:2b:ad:ff:17:e8:9a: 5c:f8:8b:58:e3:36:1a:22:73:4a:10:a8:ac:00:7e: 1e:18:7e:f2:9b:eb:ca:bc:83:4c:97:f3:62:2e:b4: fb:3a:33:36:58:80:11:46:23:d1:2b:a3:d9:12:f6: ae:d9:77:4d:1b:66:a8:40:52:90:63:bd:5d:fb:28: 33:e6:5f:76:05:df:4d:d5:7f:2d:57:76:0d:21:4e: f0:c9:bc:bb:da:48:b6:f7:99:b9:7d:38:20:30:7c: 7d:36:25:e2:e6:7d:d2:66:d6:75:0f:a9:82:83:36: 14:ec:85:29:01:34:ec:9b:82:68:d4:96:cd:c0:c0: 87:65:10:9d:ec:d1:8e:19:2f:3c:78:d5:28:44:32: 71:a3:09:02:d5:9a:31:76:b4:c7:7e:b7:52:6e:56: 17:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:96:3F:AD:20:54:A5:8D:0E:33:27:BF:5A:AB:67:FF:A9:0D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/5ac9c42c-8d5b-3566-84bd-39f1164b05d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337/22ce2863-e26f-47ca-8b36-16048be7f337.crl X509v3 Authority Key Identifier: keyid:26:26:1C:53:B1:71:0D:E9:3A:D8:0B:29:B0:9D:8B:33:B9:47:60:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22ce2863-e26f-47ca-8b36-16048be7f337.cer sbgp-ipAddrBlock: critical IPv6: 2620:af:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5a:ca:16:49:d8:b4:55:27:6c:d5:89:4a:db:67:ef:85:be: f2:b7:c4:c7:56:21:e0:bd:d7:99:99:43:5a:0e:1a:d1:5c:fa: 56:c4:c7:fc:db:9f:ca:31:1c:76:67:f2:c5:19:60:fe:5e:09: 85:f7:13:a6:12:db:1c:0f:a3:a2:09:07:ce:d9:2a:04:94:5c: 07:80:f8:60:3e:1e:cd:b1:0b:fd:1e:9b:5d:d4:43:92:24:5d: 55:31:d2:4d:53:3b:db:4c:3b:00:9e:3f:38:19:c6:f8:ce:77: 43:8c:fc:29:4c:1a:74:f5:00:24:45:3b:58:f7:6d:6d:2c:15: 38:cc:ac:6d:61:de:2e:b4:97:f2:d3:17:2f:e1:66:e8:b6:79: b8:3d:1c:e2:83:87:c4:22:01:10:ad:d4:91:21:ed:a8:da:9b: 8c:9b:16:93:91:d9:9d:c9:df:e4:59:d0:44:4e:48:4a:88:2e: b1:21:5e:51:a0:77:34:7c:ab:6f:b3:59:23:54:24:f1:36:72: fa:4c:62:5d:32:67:67:83:97:74:ca:75:54:5a:5a:48:72:85: ce:ee:0a:63:7c:4c:1e:5e:ea:1d:af:2d:c7:24:16:f3:49:a1: bc:3b:08:1e:a2:b6:83:5c:e2:09:e6:ad:a7:10:e8:14:a2:94: d7:0a:3a:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEddQOPrOLeF4QWAX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJjZTI4NjMtZTI2Zi00N2NhLThiMzYtMTYwNDhiZTdm MzM3MB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjU1OWNjMGItMzdkMC00NjBkLTkxNzMtZmQwNWZlOTAyYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVDEt7yUKkFXgFDJFhUUjg7d6quX11rdg4aC TR2X8020O/InU5mmPSdrDqqVSsbwY4ZknQhvNsdEufs3rsHHnT+7jIgAeS9qmS9B 7DuChoJLyZ9LEbkW8YHGncIfOjAHixUrrf8X6Jpc+ItY4zYaInNKEKisAH4eGH7y m+vKvINMl/NiLrT7OjM2WIARRiPRK6PZEvau2XdNG2aoQFKQY71d+ygz5l92Bd9N 1X8tV3YNIU7wyby72ki295m5fTggMHx9NiXi5n3SZtZ1D6mCgzYU7IUpATTsm4Jo 1JbNwMCHZRCd7NGOGS88eNUoRDJxowkC1ZoxdrTHfrdSblYX0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNiNlj+tIFSljQ4zJ79aq2f/qQ01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmNl Mjg2My1lMjZmLTQ3Y2EtOGIzNi0xNjA0OGJlN2YzMzcvNWFjOWM0MmMtOGQ1Yi0z NTY2LTg0YmQtMzlmMTE2NGIwNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJjZTI4NjMtZTI2Zi00N2NhLThi MzYtMTYwNDhiZTdmMzM3LzIyY2UyODYzLWUyNmYtNDdjYS04YjM2LTE2MDQ4YmU3 ZjMzNy5jcmwwHwYDVR0jBBgwFoAUJiYcU7FxDek62AspsJ2LM7lHYPYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmNlMjg2My1lMjZmLTQ3Y2EtOGIzNi0xNjA0 OGJlN2YzMzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAr6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALFayhZJ2LRVJ2zViUrbZ++FvvK3xMdWIeC915mZQ1oOGtFc+lbE x/zbn8oxHHZn8sUZYP5eCYX3E6YS2xwPo6IJB87ZKgSUXAeA+GA+Hs2xC/0em13U Q5IkXVUx0k1TO9tMOwCePzgZxvjOd0OM/ClMGnT1ACRFO1j3bW0sFTjMrG1h3i60 l/LTFy/hZui2ebg9HOKDh8QiARCt1JEh7ajam4ybFpOR2Z3J3+RZ0EROSEqILrEh XlGgdzR8q2+zWSNUJPE2cvpMYl0yZ2eDl3TKdVRaWkhyhc7uCmN8TB5e6h2vLcck FvNJobw7CB6itoNc4gnmracQ6BSilNcKOsw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:06:57 2024 by rpki-client on console-ams.rpki-client.org