$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa File: 8cad8b2d-6269-31fa-a87b-fc60824d517b.roa (raw, json) Hash identifier: KYtE4Ze/p9K2mGxzQMMt/vOjrEPevKaCqE0z7A9WPqk= Subject key identifier: 14:B6:5B:27:CC:64:8D:66:92:4C:E9:A0:BE:1D:9F:1C:3A:24:C9:C9 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F43285847A5D69FD59515658D658ECC60 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 3756 IP address blocks: 2620:f:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:9f:d5:95:15:65:8d:65:8e:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=d1e85965-b60a-4027-899b-4fdd3b5f3a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:86:24:5f:57:54:07:a2:9b:13:df:8e:ec: dc:94:28:41:6a:53:31:41:44:bc:c7:4f:5a:01:5b: c0:37:d6:01:14:9e:06:98:37:ac:98:d8:74:d9:99: 51:50:40:82:71:ad:9a:db:45:79:98:25:80:e9:7a: f6:02:92:74:bb:cd:2c:e4:dc:76:3e:2f:2b:df:7a: 35:06:d0:99:69:90:91:d6:d7:c7:91:2a:04:85:4b: d6:d9:7c:e1:23:13:6b:0a:d0:21:fb:58:90:0f:de: b5:d1:35:72:aa:d9:59:44:9b:0e:2a:a6:4f:12:e1: e6:0f:5f:90:06:32:34:41:fb:c2:f9:74:e4:7a:71: 4f:9d:08:0f:03:49:8f:65:6b:86:8f:14:1a:bc:88: 6d:da:f6:02:c4:9e:bf:26:4a:8b:cb:96:47:d9:65: 49:46:19:38:25:86:4e:ad:91:84:54:de:79:c7:c9: 55:b5:af:c5:b0:5c:db:0a:35:00:ae:c7:d4:a2:11: 60:d1:a2:be:8b:c0:02:04:2a:60:09:45:23:75:cf: 87:34:35:eb:45:43:e7:7a:d6:c7:12:36:8a:3c:e0: 4e:d8:bd:9d:90:ad:31:6d:ca:e9:23:bc:1d:65:6f: 7a:a8:af:ed:7e:af:a7:c1:91:16:0b:66:26:74:19: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B6:5B:27:CC:64:8D:66:92:4C:E9:A0:BE:1D:9F:1C:3A:24:C9:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8cad8b2d-6269-31fa-a87b-fc60824d517b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e2:7d:3f:d5:6a:de:eb:aa:68:59:28:87:c4:ea:64:2c:a0: fa:73:fb:f5:2b:0e:ff:69:14:52:29:c3:89:ee:97:9a:b8:a1: 79:28:f2:7f:06:88:5f:a7:62:3e:ea:44:3b:60:1b:72:90:9c: 8a:60:59:a6:0b:b1:9a:8b:2a:8d:a4:fc:ef:72:24:05:74:04: b5:47:30:90:eb:00:aa:57:b4:5b:a2:0f:79:ce:e5:d2:aa:50: 8e:82:e4:c7:c5:73:6e:fb:96:cd:0b:e6:c9:8e:e1:2b:d9:e5: f7:4e:bf:78:74:d6:8b:6c:03:9b:0e:bd:7e:0f:27:6e:e4:11: 82:e4:2d:06:ef:10:75:d7:6b:a3:1e:73:d8:4d:02:58:85:90: ee:80:44:89:fd:f2:32:51:de:5b:e1:68:a3:61:4a:ae:ea:22: 38:65:e9:d0:47:10:ef:f6:28:1a:41:dc:cf:34:06:eb:f2:df: 69:2b:df:88:85:0d:f3:4c:29:cc:7a:71:01:ce:2c:65:12:c1: 3f:83:45:d4:b2:19:b0:d9:3d:8b:32:36:5e:6e:d7:ad:d9:7a: a0:05:a6:38:3b:72:40:85:d5:89:1e:4b:91:f6:e3:54:14:6e: 01:bd:02:cb:90:05:c1:41:13:f3:82:ae:3a:f9:85:49:66:c6: 97:4c:18:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEel1p/VlRVljWWOzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZDFlODU5NjUtYjYwYS00MDI3LTg5OWItNGZkZDNiNWYzYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJKGJF9XVAeimxPfjuzclChBalMxQUS8x09a AVvAN9YBFJ4GmDesmNh02ZlRUECCca2a20V5mCWA6Xr2ApJ0u80s5Nx2Pi8r33o1 BtCZaZCR1tfHkSoEhUvW2XzhIxNrCtAh+1iQD9610TVyqtlZRJsOKqZPEuHmD1+Q BjI0QfvC+XTkenFPnQgPA0mPZWuGjxQavIht2vYCxJ6/JkqLy5ZH2WVJRhk4JYZO rZGEVN55x8lVta/FsFzbCjUArsfUohFg0aK+i8ACBCpgCUUjdc+HNDXrRUPnetbH EjaKPOBO2L2dkK0xbcrpI7wdZW96qK/tfq+nwZEWC2YmdBmMuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBS2WyfMZI1mkkzpoL4dnxw6JMnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvOGNhZDhiMmQtNjI2OS0z MWZhLWE4N2ItZmM2MDgyNGQ1MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3ifT/Vat7rqmhZKIfE6mQsoPpz+/UrDv9pFFIpw4nul5q4oXko 8n8GiF+nYj7qRDtgG3KQnIpgWaYLsZqLKo2k/O9yJAV0BLVHMJDrAKpXtFuiD3nO 5dKqUI6C5MfFc277ls0L5smO4SvZ5fdOv3h01otsA5sOvX4PJ27kEYLkLQbvEHXX a6Mec9hNAliFkO6ARIn98jJR3lvhaKNhSq7qIjhl6dBHEO/2KBpB3M80Buvy32kr 34iFDfNMKcx6cQHOLGUSwT+DRdSyGbDZPYsyNl5u163ZeqAFpjg7ckCF1YkeS5H2 41QUbgG9AsuQBcFBE/OCrjr5hUlmxpdMGEI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org