$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa File: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (raw, json) Hash identifier: y+ws10JYrbcWrhlLLVxkMX0OP3tCfxtO3OTgq/3oDlk= Subject key identifier: 78:5D:C3:1F:33:FC:0F:5B:4C:88:DA:2A:0B:31:8D:33:4F:96:2B:E5 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F432858478CB6831CA770412A2200D000 Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 3379 IP address blocks: 2620:190::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:83:1c:a7:70:41:2a:22:00:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=3eea5dd9-2944-452f-a197-6cb373c4cff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:54:d8:d7:14:e9:ee:ba:28:2a:dd:a1:27:37: 88:4c:de:4f:66:36:77:c2:f2:fe:ff:65:21:f9:93: 56:78:8f:80:22:f6:ee:e5:86:00:a0:7f:b8:37:6e: f1:8d:e1:bd:6c:64:f9:6f:e5:d8:a3:41:3f:d3:cd: b1:9e:52:62:55:57:d9:02:df:0a:56:5a:9b:f0:ba: ac:a1:95:85:99:db:5c:cb:41:ae:19:bc:77:da:7f: 4b:e9:27:9f:56:76:59:b0:ee:73:a1:71:f4:fb:d0: 34:3b:03:e7:59:fe:91:52:88:06:9a:32:3a:0c:39: c1:12:d6:b2:5b:ec:fe:2f:2f:53:a7:13:ea:f4:49: 7f:87:2e:9a:cc:3a:54:bc:35:43:98:34:e8:7f:3d: ae:8f:fe:d2:4b:d3:06:45:1d:bc:63:eb:0c:78:4e: f8:cd:07:ad:69:ee:88:c1:d5:ef:16:31:89:b2:9b: 4b:44:4c:e4:4e:be:0d:c6:e9:f5:4c:50:89:7d:a2: 59:7a:37:27:61:f5:77:3f:dd:95:4d:42:9c:ec:aa: 49:04:c3:08:30:b2:f1:1f:7c:66:aa:3b:c1:6d:40: 2f:1d:4b:02:68:b9:ca:f7:3e:63:99:79:d7:76:3c: 3c:88:17:6d:46:d2:d5:39:ea:42:d8:0b:eb:c7:03: dd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:C3:1F:33:FC:0F:5B:4C:88:DA:2A:0B:31:8D:33:4F:96:2B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/bb32bb6b-e68d-3f07-abe8-33529005d4da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv6: 2620:190::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ad:b8:41:69:67:b6:38:b4:54:13:23:e3:85:8c:4f:22:07: bd:4d:36:a2:fe:94:01:eb:6f:62:15:4e:b4:24:75:4a:bf:a3: 2d:47:d4:30:98:41:a0:c4:9b:70:a5:b4:59:d9:5c:9d:05:1a: f1:2e:07:ca:90:51:9c:96:8c:cb:9d:94:bc:0c:99:f4:dd:83: a5:e5:fa:e4:d7:78:45:51:49:13:22:ef:ab:ee:89:7c:7d:f5: ba:c0:11:99:79:74:1b:6f:54:19:7b:55:16:df:37:ce:5a:85: de:6e:c9:4f:c4:7b:b8:51:0b:d7:88:31:d6:24:29:91:e1:15: e3:4f:25:b2:1f:27:3f:84:cf:05:52:6b:48:c0:01:a1:a3:ed: ab:e7:c2:42:f9:02:1e:bb:d6:7c:5e:bd:7f:eb:2e:77:fb:70: 6b:e7:35:b6:f9:89:84:d5:97:87:ea:ff:c2:ce:04:28:e3:34: 99:ea:41:16:c8:73:23:52:d0:5e:38:45:50:8f:bf:6a:5a:c8: 85:10:e9:d0:c6:ed:56:14:06:f5:bf:4b:90:ac:13:f4:d2:d1: 42:42:21:82:af:9c:41:81:2e:eb:48:27:68:50:2d:6d:0d:87: fa:63:ee:e5:2e:d6:1c:56:57:c1:f4:c3:ec:7f:95:6f:9d:52: e8:b0:3b:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeMtoMcp3BBKiIA0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk M2VlYTVkZDktMjk0NC00NTJmLWExOTctNmNiMzczYzRjZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlTY1xTp7rooKt2hJzeITN5PZjZ3wvL+/2Uh +ZNWeI+AIvbu5YYAoH+4N27xjeG9bGT5b+XYo0E/082xnlJiVVfZAt8KVlqb8Lqs oZWFmdtcy0GuGbx32n9L6SefVnZZsO5zoXH0+9A0OwPnWf6RUogGmjI6DDnBEtay W+z+Ly9TpxPq9El/hy6azDpUvDVDmDTofz2uj/7SS9MGRR28Y+sMeE74zQetae6I wdXvFjGJsptLREzkTr4Nxun1TFCJfaJZejcnYfV3P92VTUKc7KpJBMMIMLLxH3xm qjvBbUAvHUsCaLnK9z5jmXnXdjw8iBdtRtLVOepC2AvrxwPdfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHhdwx8z/A9bTIjaKgsxjTNPlivlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvYmIzMmJiNmItZTY4ZC0z ZjA3LWFiZTgtMzM1MjkwMDVkNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJiABkDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALrbhBaWe2OLRUEyPjhYxPIge9TTai/pQB629iFU60JHVKv6MtR9Qw mEGgxJtwpbRZ2VydBRrxLgfKkFGclozLnZS8DJn03YOl5frk13hFUUkTIu+r7ol8 ffW6wBGZeXQbb1QZe1UW3zfOWoXebslPxHu4UQvXiDHWJCmR4RXjTyWyHyc/hM8F UmtIwAGho+2r58JC+QIeu9Z8Xr1/6y53+3Br5zW2+YmE1ZeH6v/CzgQo4zSZ6kEW yHMjUtBeOEVQj79qWsiFEOnQxu1WFAb1v0uQrBP00tFCQiGCr5xBgS7rSCdoUC1t DYf6Y+7lLtYcVlfB9MPsf5VvnVLosDsq -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org