$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4df9691b-0f6a-354e-b38d-0c7e45565229.roa File: 4df9691b-0f6a-354e-b38d-0c7e45565229.roa (raw, json) Hash identifier: n44nMzr43vOjaR7Oh6VfcLFLr3m8u1o7aKB3a3yG9LM= Subject key identifier: 1D:9B:FF:29:14:11:05:DB:8E:99:F8:05:E3:C8:0B:26:1B:49:26:F6 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858473A5B94D4236EE809BAB55480 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4df9691b-0f6a-354e-b38d-0c7e45565229.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 63062 IP address blocks: 2001:5b0:1ff4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:94:d4:23:6e:e8:09:ba:b5:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=563e3dbf-c71f-4491-b969-2853fb0f4206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:e1:f3:e6:cc:ff:0c:e9:79:4f:0a:ee:87: a6:c6:1c:6b:2d:35:a8:ca:1c:13:95:1f:1f:d2:28: b3:91:74:f0:e1:02:13:87:6c:ea:ed:f5:5b:86:03: b8:74:dc:ad:bc:de:4e:43:b3:7f:67:a1:b6:60:04: 64:b8:e7:51:27:a6:73:7c:cc:01:8e:e6:c9:2f:e0: dc:d3:73:9b:9e:d7:df:17:62:dd:9b:67:fa:71:13: f9:05:f3:4f:a9:c3:1e:7a:c9:b2:d7:2a:59:1b:d1: 7f:ae:fd:09:4b:d9:08:32:50:36:6a:e2:0b:c0:e2: b0:92:a7:d2:00:b5:d0:a9:28:68:fc:98:1b:f6:d3: 4f:d6:2a:8e:14:0b:0d:19:2f:f3:05:87:b3:22:87: 96:fd:75:71:33:83:0e:9b:c4:5f:30:d3:69:f1:86: 95:0e:bb:95:11:7c:32:93:5d:3e:a9:25:6f:e7:60: 57:88:1c:c6:97:8e:b6:ea:8e:83:82:cc:9f:cc:81: 5d:3d:eb:7c:17:2c:ec:b9:42:bb:81:2c:48:8a:e8: 43:2e:36:69:ca:33:94:1d:5f:09:b0:52:e3:d3:1b: 34:45:be:b6:27:0f:1e:9b:55:26:6d:4a:93:bb:5f: b6:b5:26:de:01:3d:71:24:e3:00:c7:18:80:82:9e: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9B:FF:29:14:11:05:DB:8E:99:F8:05:E3:C8:0B:26:1B:49:26:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/4df9691b-0f6a-354e-b38d-0c7e45565229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv6: 2001:5b0:1ff4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5a:01:4a:2f:32:fe:5f:ea:6f:9b:0c:21:92:9e:fb:a8:cf: 92:47:ce:0d:06:31:6c:af:04:6b:c3:39:08:1e:06:16:66:cf: 53:12:e3:08:e4:8b:b1:a3:8e:a2:49:26:b8:da:61:83:96:9b: 51:74:cf:c0:a3:ce:a7:11:03:1c:67:10:69:24:98:96:1f:5c: 15:cd:17:ee:0e:d9:eb:45:d8:de:e6:ba:d2:d3:c2:a2:b5:c1: b9:0d:23:71:90:9c:b6:2e:60:b4:5c:99:f9:91:30:b9:9c:be: 25:79:dd:b3:7b:9c:48:8a:fe:e0:1d:f1:60:54:0c:30:10:73: 1e:b7:ee:d4:98:6a:4c:09:d4:46:7c:c1:8d:bf:ec:cc:f1:02: 1e:eb:a4:98:a1:75:4d:c0:75:5d:47:0f:82:50:5f:93:8b:30: 1d:86:e4:68:ad:3d:f2:9f:d0:6a:cc:34:5e:bf:3a:14:1d:ac: a5:35:b3:e8:08:bf:2d:28:2a:f3:be:f6:d0:0a:0b:b7:b7:50: 96:d9:ef:fd:1c:a4:1b:05:cd:c5:83:8a:5f:3a:c8:f6:c7:cb: 47:74:92:96:26:de:79:ce:5e:b2:05:19:0f:7b:e2:bb:d3:9f: 21:c0:41:2c:f6:1e:06:73:d3:54:f2:f1:cf:3c:3e:81:b4:e8: ea:d9:87:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc6W5TUI27oCbq1VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk NTYzZTNkYmYtYzcxZi00NDkxLWI5NjktMjg1M2ZiMGY0MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Ph8+bM/wzpeU8K7oemxhxrLTWoyhwTlR8f 0iizkXTw4QITh2zq7fVbhgO4dNytvN5OQ7N/Z6G2YARkuOdRJ6ZzfMwBjubJL+Dc 03ObntffF2Ldm2f6cRP5BfNPqcMeesmy1ypZG9F/rv0JS9kIMlA2auILwOKwkqfS ALXQqSho/Jgb9tNP1iqOFAsNGS/zBYezIoeW/XVxM4MOm8RfMNNp8YaVDruVEXwy k10+qSVv52BXiBzGl4626o6DgsyfzIFdPet8FyzsuUK7gSxIiuhDLjZpyjOUHV8J sFLj0xs0Rb62Jw8em1UmbUqTu1+2tSbeAT1xJOMAxxiAgp5I9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB2b/ykUEQXbjpn4BePICyYbSSb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvNGRmOTY5MWItMGY2YS0z NTRlLWIzOGQtMGM3ZTQ1NTY1MjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFsB/0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJaAUovMv5f6m+bDCGSnvuoz5JHzg0GMWyvBGvDOQgeBhZmz1MS 4wjki7GjjqJJJrjaYYOWm1F0z8CjzqcRAxxnEGkkmJYfXBXNF+4O2etF2N7mutLT wqK1wbkNI3GQnLYuYLRcmfmRMLmcviV53bN7nEiK/uAd8WBUDDAQcx637tSYakwJ 1EZ8wY2/7MzxAh7rpJihdU3AdV1HD4JQX5OLMB2G5GitPfKf0GrMNF6/OhQdrKU1 s+gIvy0oKvO+9tAKC7e3UJbZ7/0cpBsFzcWDil86yPbHy0d0kpYm3nnOXrIFGQ97 4rvTnyHAQSz2HgZz01Ty8c88PoG06OrZh/k= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org