$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa File: 3aa84767-460c-349d-872b-57420ab5927b.roa (raw, json) Hash identifier: q+RvCpIqPaNMjGcKkqr/aOwum70xW3uDxG6GEZVUwY0= Subject key identifier: 3C:A1:85:C7:3C:44:6A:D3:7F:63:AD:14:7C:8D:7D:84:49:1E:1F:94 Certificate issuer: /CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047 Certificate serial: 010D0C9F43285847213B1C4809F9FF21BA475B80 Authority key identifier: B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 40216 IP address blocks: 2620:12f:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:1c:48:09:f9:ff:21:ba:47:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047 Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=a227b3aa-2b53-4240-88c8-0824a361a89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:8a:9a:dc:8a:66:96:91:6c:a2:a5:ef:75: b6:36:db:03:f3:d2:55:0b:59:6c:73:8e:f7:1a:e9: ea:db:95:f0:8f:5a:c0:29:2d:1f:87:c1:4e:c7:35: 33:3f:bd:67:de:19:a4:2c:cd:3f:f7:c7:71:0e:ef: 25:2d:3b:7e:5f:9d:fd:84:a9:44:d6:16:e2:ad:fd: ab:b3:67:f3:58:27:86:ca:cd:91:48:1e:0b:82:56: 2a:a8:cb:66:3a:db:3f:61:6e:12:f1:11:3b:c2:33: 5c:7d:3a:9a:0b:cf:e7:1b:e6:6f:c2:c3:d5:55:c0: 18:72:b8:e3:0f:ad:63:76:da:5c:eb:f0:55:30:d0: ee:f4:14:15:e8:68:d9:01:b9:02:a5:1d:c6:af:ae: 5f:f8:2c:cc:37:c2:8a:3a:5a:52:a3:a0:c8:ad:a9: 2d:bc:97:db:66:1f:ea:7b:d4:2c:64:5c:26:d3:66: 73:be:ce:29:af:35:e4:71:f4:8b:ac:de:84:4a:4e: ea:45:84:bb:2e:c3:78:1f:7c:8c:58:61:85:92:57: bc:fa:ef:09:07:14:8f:65:c9:01:b7:f4:6c:e4:8c: 4f:49:1c:58:01:fb:91:19:df:f3:8c:b3:9a:de:8e: 4a:7d:7b:e0:83:97:1c:2f:b0:27:38:23:6c:e5:08: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A1:85:C7:3C:44:6A:D3:7F:63:AD:14:7C:8D:7D:84:49:1E:1F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/3aa84767-460c-349d-872b-57420ab5927b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl X509v3 Authority Key Identifier: keyid:B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer sbgp-ipAddrBlock: critical IPv6: 2620:12f:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1c:98:d2:95:5c:18:51:88:cb:0f:3d:22:69:df:e4:55:d0: 23:94:00:e4:a4:c9:b2:cc:3a:55:cf:ec:cd:b4:5a:7b:24:df: 9f:f9:41:96:cc:f1:4b:14:fb:4c:43:94:5a:68:ac:8e:4d:50: 36:c6:f4:01:3a:d7:d7:c2:62:7d:93:ff:4f:a0:c2:c8:94:3b: a1:3d:5f:bf:c7:2c:73:30:34:21:db:a1:08:c4:dd:69:fe:d1: 66:32:a6:fe:1c:d2:4d:75:2d:6c:e6:63:20:75:48:bc:ac:79: fa:10:e3:0f:b5:9b:49:10:55:d4:de:9d:d6:17:3a:06:5e:9c: 60:7d:0d:e2:3a:40:d0:24:3a:a7:fa:a2:a5:f2:f9:b9:5f:fb: eb:3c:6c:b1:fa:89:b8:a0:98:d2:b8:dd:4f:66:77:f1:dc:ef: a2:a5:e1:af:a5:61:87:ac:39:53:58:ef:3f:bb:7a:d6:09:92: 8a:34:2e:20:f7:fe:1e:5d:76:1b:fd:15:1d:f3:7d:a3:cc:e0: 47:de:b8:dc:14:85:e5:26:be:73:5b:ad:5c:37:87:1f:0d:db: d6:2a:a0:15:d4:34:a0:cc:4a:d5:5e:00:be:8c:bc:e6:d6:d9: 4b:05:f0:8a:46:84:99:bd:06:44:a2:d4:65:af:97:8f:da:ba: ce:d2:65:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEchOxxICfn/IbpHW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFiNmVjN2QtY2EyZC00Y2RiLTllMGItOWZjNGE2YjYz MDQ3MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk YTIyN2IzYWEtMmI1My00MjQwLTg4YzgtMDgyNGEzNjFhODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtCKmtyKZpaRbKKl73W2NtsD89JVC1lsc473 Gunq25Xwj1rAKS0fh8FOxzUzP71n3hmkLM0/98dxDu8lLTt+X539hKlE1hbirf2r s2fzWCeGys2RSB4LglYqqMtmOts/YW4S8RE7wjNcfTqaC8/nG+ZvwsPVVcAYcrjj D61jdtpc6/BVMNDu9BQV6GjZAbkCpR3Gr65f+CzMN8KKOlpSo6DIraktvJfbZh/q e9QsZFwm02Zzvs4przXkcfSLrN6ESk7qRYS7LsN4H3yMWGGFkle8+u8JBxSPZckB t/Rs5IxPSRxYAfuRGd/zjLOa3o5KfXvgg5ccL7AnOCNs5QiozQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDyhhcc8RGrTf2OtFHyNfYRJHh+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2 ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0YTZiNjMwNDcvM2FhODQ3NjctNDYwYy0z NDlkLTg3MmItNTc0MjBhYjU5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzFiNmVjN2QtY2EyZC00Y2RiLTll MGItOWZjNGE2YjYzMDQ3LzMxYjZlYzdkLWNhMmQtNGNkYi05ZTBiLTlmYzRhNmI2 MzA0Ny5jcmwwHwYDVR0jBBgwFoAUtdECXlWBNDCKtbOUa/RkFl4E+lYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0 YTZiNjMwNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABL+Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHRyY0pVcGFGIyw89Imnf5FXQI5QA5KTJssw6Vc/szbRaeyTfn/lB lszxSxT7TEOUWmisjk1QNsb0ATrX18JifZP/T6DCyJQ7oT1fv8csczA0IduhCMTd af7RZjKm/hzSTXUtbOZjIHVIvKx5+hDjD7WbSRBV1N6d1hc6Bl6cYH0N4jpA0CQ6 p/qipfL5uV/76zxssfqJuKCY0rjdT2Z38dzvoqXhr6Vhh6w5U1jvP7t61gmSijQu IPf+Hl12G/0VHfN9o8zgR9643BSF5Sa+c1utXDeHHw3b1iqgFdQ0oMxK1V4Avoy8 5tbZSwXwikaEmb0GRKLUZa+Xj9q6ztJlGA== -----END CERTIFICATE-----Generated at Sun Nov 24 05:20:33 2024 by rpki-client on console-ams.rpki-client.org