$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa File: 06deb67f-5f98-351b-8719-f93f9de6c78c.roa (raw, json) Hash identifier: qk+gLIP3QhPdXBou37sXi9Ss/jEZfNoC2nAZAabi2k0= Subject key identifier: 38:04:C2:67:77:8A:3F:84:5E:8F:23:73:A8:C0:39:1C:32:5E:F6:23 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F43285847BAC6A6797013459B02679F60 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 400097 IP address blocks: 2606:3d40:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a6:79:70:13:45:9b:02:67:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=fe805277-a40a-48a2-aa70-8e453e191b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:f9:1a:1c:75:f3:0c:bb:f2:1e:48:e3:2b: af:7c:0b:2f:b5:7b:05:ef:24:05:cf:8b:c4:d7:71: 93:d2:e0:2d:b4:3a:b1:f9:56:24:e2:de:9c:fa:e6: c4:c9:59:2c:ef:19:72:b5:4a:9b:94:af:82:b4:88: 1e:a4:44:84:ce:c1:f0:05:8d:f6:44:07:d8:3e:2c: fd:33:d7:6e:eb:c5:3e:ca:f5:4f:ab:8e:9f:e0:4f: 20:54:50:a4:eb:84:ba:a9:97:0c:9b:18:ae:63:30: 4c:b3:1e:1e:b2:b6:4d:a4:47:24:8d:57:c5:67:af: 57:19:59:0d:d9:f4:35:68:f7:c6:63:d3:04:a0:4d: aa:92:99:85:ba:99:99:e8:87:d5:2e:cf:d2:9f:ae: 13:d8:cd:63:68:83:59:bc:a5:7e:db:75:6a:cc:17: 0f:83:2b:be:43:01:66:b7:b2:73:3b:2f:9a:10:0c: 83:24:71:96:74:88:bf:24:d0:f8:79:2f:27:79:4a: 8a:dc:9a:d4:ef:b4:2a:83:d9:43:c0:4b:42:1e:84: 67:4d:fe:8a:30:f3:53:52:66:4d:30:c3:7c:3a:06: bf:29:89:fc:3f:ed:72:d8:f7:f4:16:34:97:d4:ac: 98:52:5c:d9:6c:1e:11:17:a4:82:a4:39:b9:c0:bc: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:C2:67:77:8A:3F:84:5E:8F:23:73:A8:C0:39:1C:32:5E:F6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/06deb67f-5f98-351b-8719-f93f9de6c78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7f:0b:c5:76:24:89:74:9e:00:e4:82:4c:bf:20:a8:37:af: 5f:ec:ff:2b:06:73:dd:f3:16:17:5c:34:d5:65:b5:1e:11:b0: a9:4e:9f:01:fb:db:ee:72:1f:d8:d7:82:a6:2a:8a:fc:2f:39: 45:ee:94:94:36:c7:6c:33:00:2f:89:91:f0:44:9a:a5:95:5a: 97:52:a9:04:c4:25:94:3c:6a:a5:b4:91:b6:56:85:5b:a9:58: aa:31:c0:91:cc:c8:a2:9e:1a:e7:4b:58:1d:44:2f:b6:da:b0: f3:25:be:2a:de:69:e8:9a:28:ad:1e:97:72:f7:20:5f:7f:69: cc:02:d3:35:2b:54:c5:d2:1a:73:2e:f2:ad:c0:b1:3e:60:b8: 53:3c:40:60:a9:69:7b:f7:48:f9:ab:aa:58:a4:7f:17:98:10: 80:51:6f:19:7c:42:99:34:59:1d:e2:6b:ec:4b:d0:e2:a4:97: 95:48:f4:f5:ad:05:c3:38:96:83:f9:7a:7b:04:50:09:03:82: 1f:9a:ee:cb:d1:46:a1:e9:86:6a:57:ca:b5:3e:a2:d6:24:96: e6:7a:84:29:11:c0:70:60:73:07:6c:6c:67:e4:7a:aa:c6:f6: 18:ea:05:ed:80:54:e3:0d:66:bb:03:c3:df:a8:51:a7:8f:b9: 03:68:bf:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe6xqZ5cBNFmwJnn2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZmU4MDUyNzctYTQwYS00OGEyLWFhNzAtOGU0NTNlMTkxYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBb5Ghx18wy78h5I4yuvfAsvtXsF7yQFz4vE 13GT0uAttDqx+VYk4t6c+ubEyVks7xlytUqblK+CtIgepESEzsHwBY32RAfYPiz9 M9du68U+yvVPq46f4E8gVFCk64S6qZcMmxiuYzBMsx4esrZNpEckjVfFZ69XGVkN 2fQ1aPfGY9MEoE2qkpmFupmZ6IfVLs/Sn64T2M1jaINZvKV+23VqzBcPgyu+QwFm t7JzOy+aEAyDJHGWdIi/JND4eS8neUqK3JrU77Qqg9lDwEtCHoRnTf6KMPNTUmZN MMN8Oga/KYn8P+1y2Pf0FjSX1KyYUlzZbB4RF6SCpDm5wLwPUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDgEwmd3ij+EXo8jc6jAORwyXvYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMDZkZWI2N2YtNWY5OC0z NTFiLTg3MTktZjkzZjlkZTZjNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHp/C8V2JIl0ngDkgky/IKg3r1/s/ysGc93zFhdcNNVltR4RsKlO nwH72+5yH9jXgqYqivwvOUXulJQ2x2wzAC+JkfBEmqWVWpdSqQTEJZQ8aqW0kbZW hVupWKoxwJHMyKKeGudLWB1EL7basPMlvireaeiaKK0el3L3IF9/acwC0zUrVMXS GnMu8q3AsT5guFM8QGCpaXv3SPmrqlikfxeYEIBRbxl8Qpk0WR3ia+xL0OKkl5VI 9PWtBcM4loP5ensEUAkDgh+a7svRRqHphmpXyrU+otYkluZ6hCkRwHBgcwdsbGfk eqrG9hjqBe2AVOMNZrsDw9+oUaePuQNov5w= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:01 2024 by rpki-client on console-ams.rpki-client.org