$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa File: 170476b8-4860-35be-ac73-ad6f764c5d01.roa (raw, json) Hash identifier: K8He6rhVavSFO8JI5EbYWm96xdtpzQn6cZDX3iTrdhM= Subject key identifier: 3A:E4:79:66:B0:39:71:EB:1E:66:A5:FF:26:C9:26:6D:4B:BC:1C:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF85FD7240411229F8C9200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 22909 IP address blocks: 2603:3009:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f8:5f:d7:24:04:11:22:9f:8c:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=4dccce0f-d2be-44e7-a982-d12a4fbd38a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:11:a2:d3:9a:d9:e6:a2:78:56:70:35:17: ef:ee:2e:9f:5f:3c:6f:2e:f3:19:15:a1:b9:fb:be: 4d:b0:0d:a8:73:1a:50:ee:87:e0:d0:31:aa:e4:03: 07:d1:5b:b9:27:2e:ad:ed:7e:5e:12:7f:af:fa:e4: ee:f3:bb:e9:eb:f6:09:7c:bf:36:63:52:8e:51:c9: 19:8b:98:ee:d8:d0:e5:2e:52:db:f2:03:6f:d5:57: aa:79:7e:bb:b2:bd:eb:74:fe:e0:c8:c4:66:c9:82: e2:b8:50:7f:c5:82:e7:70:79:66:bc:28:b4:4c:ff: b4:56:09:f8:ce:4f:b0:17:70:b7:a2:26:b1:49:37: 41:46:88:2f:78:d1:e2:e6:61:75:d1:e4:d0:22:69: d6:4f:e8:e4:28:cf:98:df:db:b9:2a:4f:8f:1a:75: e4:7e:02:3f:23:7a:6c:9e:c4:8c:7c:7f:dd:5a:9b: 1d:26:80:b7:a1:ff:eb:32:e6:dc:c7:41:ea:0c:56: 54:c8:d5:d7:06:fc:b3:88:03:26:67:8d:53:23:1e: d3:16:e6:e0:6a:d1:6a:8b:d5:73:9c:a9:49:0e:05: 12:fb:6a:ed:bb:3b:79:78:96:6e:2d:75:6b:b4:48: b2:bd:12:ea:36:18:7c:13:cd:f2:a3:a1:5c:f8:a7: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:79:66:B0:39:71:EB:1E:66:A5:FF:26:C9:26:6D:4B:BC:1C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3009:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c5:16:49:e2:87:31:d7:5d:e2:b4:65:61:65:1e:c8:8d:66: 13:e2:cb:28:13:53:a2:09:c4:df:b2:2e:81:93:53:4f:ea:96: aa:5f:37:d4:6f:c6:83:66:7d:0c:dc:db:87:16:a5:34:5e:fb: a2:96:1a:07:30:ac:47:e6:ee:0c:29:a9:27:d8:84:32:51:6c: 4f:f0:84:9e:28:02:b3:da:ed:c8:0d:77:d7:20:d2:25:96:c1: 38:90:a7:7b:9d:1b:ed:c0:8b:dd:58:de:98:89:76:3c:82:6f: 06:00:a0:ee:31:f6:d2:e1:d5:99:d0:2c:cf:cd:10:b4:41:c9: bd:bd:bd:09:32:a2:06:37:b0:7b:d0:13:e8:3f:84:33:11:c0: 3e:e6:1a:31:59:dc:4e:7c:77:d2:1a:70:97:68:5a:d5:f6:28: e9:cb:8e:43:bd:d4:69:a0:53:df:6e:54:d9:49:f9:ec:e5:a0: fb:29:73:56:15:ab:7c:6a:fb:48:c6:b2:0e:43:d7:84:47:26: 8a:aa:49:ce:fd:e1:06:c0:d5:a7:64:1e:6f:75:c8:13:d6:f5: c3:e2:ca:78:fb:6f:33:b6:8f:8c:5b:db:fa:38:dd:4a:a8:9f: 56:aa:79:a9:91:ad:48:8d:e2:50:27:53:2b:09:0e:3a:28:83: d9:38:6f:8b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEe++F/XJAQRIp+MkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk NGRjY2NlMGYtZDJiZS00NGU3LWE5ODItZDEyYTRmYmQzOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcgRotOa2eaieFZwNRfv7i6fXzxvLvMZFaG5 +75NsA2ocxpQ7ofg0DGq5AMH0Vu5Jy6t7X5eEn+v+uTu87vp6/YJfL82Y1KOUckZ i5ju2NDlLlLb8gNv1VeqeX67sr3rdP7gyMRmyYLiuFB/xYLncHlmvCi0TP+0Vgn4 zk+wF3C3oiaxSTdBRogveNHi5mF10eTQImnWT+jkKM+Y39u5Kk+PGnXkfgI/I3ps nsSMfH/dWpsdJoC3of/rMubcx0HqDFZUyNXXBvyziAMmZ41TIx7TFubgatFqi9Vz nKlJDgUS+2rtuzt5eJZuLXVrtEiyvRLqNhh8E83yo6Fc+KcqwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDrkeWawOXHrHmal/ybJJm1LvBxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTcwNDc2YjgtNDg2MC0z NWJlLWFjNzMtYWQ2Zjc2NGM1ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwCQUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAssUWSeKHMddd4rRlYWUeyI1mE+LLKBNTognE37IugZNTT+qWql83 1G/Gg2Z9DNzbhxalNF77opYaBzCsR+buDCmpJ9iEMlFsT/CEnigCs9rtyA131yDS JZbBOJCne50b7cCL3VjemIl2PIJvBgCg7jH20uHVmdAsz80QtEHJvb29CTKiBjew e9AT6D+EMxHAPuYaMVncTnx30hpwl2ha1fYo6cuOQ73UaaBT325U2Un57OWg+ylz VhWrfGr7SMayDkPXhEcmiqpJzv3hBsDVp2Qeb3XIE9b1w+LKePtvM7aPjFvb+jjd SqifVqp5qZGtSI3iUCdTKwkOOiiD2Thviw== -----END CERTIFICATE-----Generated at Sun Dec 22 03:53:40 2024 by rpki-client on console-ams.rpki-client.org