$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa File: a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa (raw, json) Hash identifier: x64YfSySov+Xh+Cct9xwLXj3GYF2oU2ZpuMFKeSSyac= Subject key identifier: CB:9E:92:0E:FD:6D:F9:85:9E:DC:5F:9D:A0:F5:CE:E5:2C:1F:0D:70 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F432858476B364356B05920CF033F0380 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 3477 IP address blocks: 2601:a004::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:43:56:b0:59:20:cf:03:3f:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=358a4055-9fed-4b7f-a6d9-8e76f56488f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:82:1a:0e:0b:da:ee:bf:9f:6f:ff:8b:8b: 48:0d:69:b9:21:b0:ff:d7:39:c7:61:f0:96:9f:f8: 80:84:82:66:8d:0a:48:b3:0f:c3:9b:38:32:78:82: 7f:14:04:5b:f8:01:f3:cd:d8:1c:52:a5:f3:d8:54: 89:cc:03:b2:ba:fe:f7:32:92:01:09:a5:6d:46:75: fa:df:89:aa:d1:31:89:2f:72:47:b3:86:c1:d8:23: 7b:9c:b7:c4:68:22:9a:99:3a:d4:75:45:da:db:5a: 4a:79:6f:6f:e4:8c:e4:1d:da:4f:8e:04:eb:b6:78: fe:62:39:16:c7:87:9d:2b:d2:bf:3d:c7:98:a7:a7: 9f:70:08:88:46:c3:2d:94:36:c3:ab:c2:91:26:07: 95:0f:f8:47:50:78:e5:2d:0e:bf:c7:93:1e:72:09: 24:98:6c:52:d7:e9:35:18:32:aa:0a:1e:7c:38:73: c7:bd:9c:5e:a5:93:5a:0a:90:19:d3:23:60:bd:4c: c8:11:13:44:d1:f7:a2:f8:3b:fc:90:b7:67:f5:f8: fd:02:03:51:c2:4c:c1:13:7e:8f:29:8e:1e:f5:c1: e3:cc:5c:57:5e:88:2f:7f:7e:19:ea:55:c9:1c:f3: 51:e7:4f:7d:5d:bd:41:93:69:81:ce:d7:05:17:66: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9E:92:0E:FD:6D:F9:85:9E:DC:5F:9D:A0:F5:CE:E5:2C:1F:0D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a004::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:18:80:58:06:37:ed:93:3e:cc:cf:76:ef:57:29:d2:99:e1: 2e:f0:b3:ed:96:a8:f5:4e:89:4f:09:f8:e7:b3:87:fa:07:e3: a8:9b:ee:48:99:a1:79:b7:37:c0:a0:f4:70:67:6c:35:27:3b: b1:18:84:15:47:f7:bf:bf:39:14:16:db:02:7e:df:96:ce:45: 40:8e:e7:92:7d:73:6c:b7:2d:14:c1:19:88:0b:d0:f4:12:db: 9b:e2:6c:e7:7d:78:32:f0:5a:67:00:b0:ee:2c:7c:7b:f4:d8: 4c:9d:b2:ee:bb:9d:39:c8:90:39:38:e7:43:f2:7f:0f:66:c2: 22:b5:ae:2d:b6:07:60:8f:8f:18:5c:fc:db:71:b5:2b:3b:93: bb:74:81:0e:78:b7:d8:a0:88:de:39:c3:1a:6b:fb:37:8c:36: 63:ba:c8:70:b9:b2:8c:48:bd:d2:e3:eb:39:e7:72:d9:f1:94: 5e:b5:66:8f:fa:84:cb:48:6d:a8:a0:74:2d:6e:a3:4d:6b:a0: be:5e:19:56:15:97:44:b2:7f:58:bc:37:6f:40:4a:7a:ab:f4: 77:b7:20:bf:a0:d8:e8:78:68:c3:7b:74:b4:43:e4:57:a3:eb: 12:9d:56:dc:00:0c:2e:58:45:c3:b9:6c:24:44:f6:dc:a3:ac: e4:78:be:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdrNkNWsFkgzwM/A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk MzU4YTQwNTUtOWZlZC00YjdmLWE2ZDktOGU3NmY1NjQ4OGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI6CGg4L2u6/n2//i4tIDWm5IbD/1znHYfCW n/iAhIJmjQpIsw/DmzgyeIJ/FARb+AHzzdgcUqXz2FSJzAOyuv73MpIBCaVtRnX6 34mq0TGJL3JHs4bB2CN7nLfEaCKamTrUdUXa21pKeW9v5IzkHdpPjgTrtnj+YjkW x4edK9K/PceYp6efcAiIRsMtlDbDq8KRJgeVD/hHUHjlLQ6/x5MecgkkmGxS1+k1 GDKqCh58OHPHvZxepZNaCpAZ0yNgvUzIERNE0fei+Dv8kLdn9fj9AgNRwkzBE36P KY4e9cHjzFxXXogvf34Z6lXJHPNR5099Xb1Bk2mBztcFF2Y3RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMuekg79bfmFntxfnaD1zuUsHw1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYTg1NGZhNmEtOGZmMi0z OWNkLWJiOGEtYmYwNDEyNjcyY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYGIBYBjftkz7Mz3bvVynSmeEu8LPtlqj1TolPCfjns4f6B+Oom+5I maF5tzfAoPRwZ2w1JzuxGIQVR/e/vzkUFtsCft+WzkVAjueSfXNsty0UwRmIC9D0 Etub4mznfXgy8FpnALDuLHx79NhMnbLuu505yJA5OOdD8n8PZsIita4ttgdgj48Y XPzbcbUrO5O7dIEOeLfYoIjeOcMaa/s3jDZjushwubKMSL3S4+s553LZ8ZRetWaP +oTLSG2ooHQtbqNNa6C+XhlWFZdEsn9YvDdvQEp6q/R3tyC/oNjoeGjDe3S0Q+RX o+sSnVbcAAwuWEXDuWwkRPbco6zkeL6c -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:08 2024 by rpki-client on console-ams.rpki-client.org