$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: jT8zK+6nf3Lo7AJbb38d+ocCRIoc9340rbW9sPXhZIE= Subject key identifier: F6:6C:7E:06:EE:EE:E3:68:56:72:6C:88:80:72:48:B3:E6:1C:65:A7 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584793B117A95B418E9C7BA79280 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 54650 IP address blocks: 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:17:a9:5b:41:8e:9c:7b:a7:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=9459579b-7362-4920-9c9e-bd9d45e8456f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:44:27:18:69:e9:e4:db:dc:e8:c7:7c:c8:6d: 67:7b:8a:cd:9f:d3:c5:a8:67:a1:92:fb:95:f7:00: c5:d1:d7:d7:e4:bb:ed:6e:0a:1a:44:24:74:4a:1b: 88:8b:40:4b:3d:86:2b:4b:51:a9:c1:f5:48:e5:c3: d0:79:97:14:04:e0:e9:45:ad:56:70:06:0c:36:99: bd:e4:d3:d7:98:fc:a7:08:6b:f6:78:75:7f:b0:a7: 06:51:f7:21:f9:03:42:46:2d:ff:d1:f3:08:e7:c8: 57:d1:93:20:2d:4b:c7:5a:05:2b:a9:3b:03:87:05: 49:b1:58:2d:2d:7a:07:45:aa:88:f2:25:31:ab:f0: 5a:8e:8a:1c:d6:04:b7:0c:ce:2c:e8:de:00:22:55: ff:72:34:2d:86:7c:ea:24:59:0b:2e:a8:bd:2a:02: 72:98:ba:c8:13:47:34:2d:e0:33:44:1a:65:3c:bd: c1:ac:19:9c:a8:57:d4:3b:7d:04:39:ff:d9:37:46: e0:c6:21:2b:8a:26:fa:12:44:8f:46:8c:df:80:bd: ba:0c:da:22:ab:df:c7:0d:f8:f8:94:cb:73:e9:0c: bf:eb:35:31:9a:0d:85:28:85:3d:c3:03:41:05:c4: 6e:57:83:b2:be:7f:a0:38:9b:f7:9b:3b:c7:5e:85: 75:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6C:7E:06:EE:EE:E3:68:56:72:6C:88:80:72:48:B3:E6:1C:65:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:14:d0:07:8a:bc:4d:90:cd:bc:a8:c0:0f:23:0b:1e:77:23: 1f:96:d2:81:86:82:0a:01:3a:66:1a:fb:6d:67:41:3e:87:f2: 2e:95:3f:30:54:3f:21:e0:1d:9c:8f:ff:c4:31:09:7a:d3:0d: e0:46:48:d2:58:e0:84:ba:f0:96:bc:72:be:ce:9a:74:5c:23: 89:0e:f5:d8:65:de:fe:6d:06:10:b1:e8:fd:84:67:a7:90:8a: 12:93:a9:44:d5:51:3c:c2:b4:39:6c:c0:6b:2e:50:14:48:5d: 5c:48:06:3f:19:9b:00:f5:0a:68:fb:e7:e5:a1:6a:33:0e:a7: db:e6:8f:4c:d0:25:06:e6:90:e3:2d:c4:f9:8b:f5:4f:3f:33: a5:93:d7:aa:ee:89:ce:c3:f5:70:9e:64:83:c1:e6:b2:3c:a4: 2a:d6:d3:ed:39:74:d6:0f:67:be:5f:8e:ff:6e:50:fd:2f:ed: ec:d4:43:f0:50:92:af:4c:51:30:ae:b8:98:5d:bb:cd:77:c9: 0c:54:e9:d6:d2:00:88:f1:af:4d:9a:82:5e:0e:9d:61:00:e3: 2c:a5:e2:d3:f9:b0:e0:fd:2c:28:25:34:a1:4f:14:55:22:aa: a5:3f:b8:bb:84:fd:7e:c3:6e:ac:15:df:93:3d:ae:c0:fe:24: 99:40:c4:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeTsRepW0GOnHunkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk OTQ1OTU3OWItNzM2Mi00OTIwLTljOWUtYmQ5ZDQ1ZTg0NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkQnGGnp5Nvc6Md8yG1ne4rNn9PFqGehkvuV 9wDF0dfX5LvtbgoaRCR0ShuIi0BLPYYrS1GpwfVI5cPQeZcUBODpRa1WcAYMNpm9 5NPXmPynCGv2eHV/sKcGUfch+QNCRi3/0fMI58hX0ZMgLUvHWgUrqTsDhwVJsVgt LXoHRaqI8iUxq/Bajooc1gS3DM4s6N4AIlX/cjQthnzqJFkLLqi9KgJymLrIE0c0 LeAzRBplPL3BrBmcqFfUO30EOf/ZN0bgxiEriib6EkSPRozfgL26DNoiq9/HDfj4 lMtz6Qy/6zUxmg2FKIU9wwNBBcRuV4Oyvn+gOJv3mzvHXoV1/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPZsfgbu7uNoVnJsiIBySLPmHGWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCFNAHirxNkM28qMAPIwsedyMfltKBhoIKATpmGvttZ0E+h/IulT8w VD8h4B2cj//EMQl60w3gRkjSWOCEuvCWvHK+zpp0XCOJDvXYZd7+bQYQsej9hGen kIoSk6lE1VE8wrQ5bMBrLlAUSF1cSAY/GZsA9Qpo++floWozDqfb5o9M0CUG5pDj LcT5i/VPPzOlk9eq7onOw/VwnmSDweayPKQq1tPtOXTWD2e+X47/blD9L+3s1EPw UJKvTFEwrriYXbvNd8kMVOnW0gCI8a9NmoJeDp1hAOMspeLT+bDg/SwoJTShTxRV IqqlP7i7hP1+w26sFd+TPa7A/iSZQMTE -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org