$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a278e6a8-9db1-3dd6-841e-f30a42c888e7.roa File: a278e6a8-9db1-3dd6-841e-f30a42c888e7.roa (raw, json) Hash identifier: Jf/5X7Bi6xFDpBxbQQ6LjzcfBlSZGRiTMBr7QN2l3Fk= Subject key identifier: B7:7B:91:6B:ED:59:9F:B2:A6:BB:71:78:99:98:15:05:5A:83:1E:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285847BEF73C81621F0165663B0640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a278e6a8-9db1-3dd6-841e-f30a42c888e7.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 7725 IP address blocks: 2603:3025::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f7:3c:81:62:1f:01:65:66:3b:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=12a1a189-13b6-4cb3-8822-9ef66f2bf841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:6f:d2:e9:ed:15:83:a1:e7:cb:e8:23:bd: 56:25:99:39:d3:12:13:42:cb:b5:61:75:88:d3:02: 13:40:dd:ee:45:a8:1f:a4:e3:49:9a:e2:1b:b1:70: 80:f2:0f:9d:88:6f:e6:02:dd:70:43:7a:43:18:09: 63:03:4f:78:db:1b:40:b5:7c:14:65:75:59:ac:1a: f4:4e:62:d5:3d:b7:1d:d3:b4:5e:2b:84:89:99:c6: 59:d1:cd:2e:9f:d6:f1:d2:6a:cc:fc:de:22:05:2f: c7:9c:b0:d5:70:02:3b:f5:29:ee:b8:ff:49:d7:b0: 1c:2e:a4:f2:37:03:11:a8:6d:ce:46:c0:8c:6e:7f: 8d:92:76:d9:5e:40:59:42:af:51:4d:4a:7b:4c:98: 07:d9:b2:59:bd:c5:e9:8b:4e:8f:4f:ad:15:ed:f7: 0a:fd:4c:fe:61:ff:b7:a1:4a:06:00:7d:b5:94:8a: 01:2f:a1:a9:4a:1f:d9:b7:d5:51:51:40:94:58:79: b5:0a:28:c5:26:7b:1c:3e:e4:63:6b:7a:5a:77:9b: d7:3b:05:b5:08:27:32:bf:eb:b6:03:37:55:53:68: c1:08:69:a0:56:43:d8:da:eb:48:b4:9f:d2:bf:b8: 81:75:87:d6:b2:ec:f0:94:c9:3a:af:b0:9a:46:6c: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7B:91:6B:ED:59:9F:B2:A6:BB:71:78:99:98:15:05:5A:83:1E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a278e6a8-9db1-3dd6-841e-f30a42c888e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3025::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bd:c5:89:3f:7a:29:92:fa:0d:9e:ad:d6:5c:54:12:e8:65: 94:43:17:15:e4:6a:f1:2c:e6:0e:5f:5d:4d:66:66:e2:ab:14: 34:95:8d:39:ff:0c:8a:d8:cb:1a:cb:c5:56:3b:fa:c9:c6:11: c8:e8:cc:71:af:94:e2:40:74:24:87:c9:76:8a:d4:f5:97:c0: 3b:2a:97:4c:73:02:5c:a7:c5:e7:19:a1:58:95:b6:ee:f9:43: e0:1a:49:54:bc:2e:9f:d2:cc:24:52:8d:73:b5:55:f8:fb:84: f7:d4:72:85:f7:8c:b3:ee:69:2d:10:e0:55:20:2a:c9:68:8d: c3:d6:20:a8:c9:dc:6e:e4:e2:f9:bd:a2:37:f8:4d:c3:b9:59: be:da:89:64:64:49:5d:6a:90:99:c7:49:0c:ac:74:17:9e:f8: d5:82:0b:d0:b9:71:45:3f:89:83:5d:a0:70:ee:b7:3f:56:db: ae:03:4a:16:45:e9:c6:3d:1a:f3:c5:e6:15:23:f4:f7:b9:99: f0:29:10:62:3f:cd:ab:d2:14:15:43:03:b0:20:37:1e:47:aa: d5:ba:fb:52:00:5b:53:15:bc:c7:03:17:19:15:df:ae:ae:15: c5:54:97:6d:12:3f:b7:de:f2:a9:7e:44:39:ff:8e:e1:75:27: 44:0d:ba:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe+9zyBYh8BZWY7BkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MTJhMWExODktMTNiNi00Y2IzLTg4MjItOWVmNjZmMmJmODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaFv0untFYOh58voI71WJZk50xITQsu1YXWI 0wITQN3uRagfpONJmuIbsXCA8g+diG/mAt1wQ3pDGAljA0942xtAtXwUZXVZrBr0 TmLVPbcd07ReK4SJmcZZ0c0un9bx0mrM/N4iBS/HnLDVcAI79SnuuP9J17AcLqTy NwMRqG3ORsCMbn+NknbZXkBZQq9RTUp7TJgH2bJZvcXpi06PT60V7fcK/Uz+Yf+3 oUoGAH21lIoBL6GpSh/Zt9VRUUCUWHm1CijFJnscPuRja3pad5vXOwW1CCcyv+u2 AzdVU2jBCGmgVkPY2utItJ/Sv7iBdYfWsuzwlMk6r7CaRmz18wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLd7kWvtWZ+yprtxeJmYFQVagx68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI3OGU2YTgtOWRiMS0z ZGQ2LTg0MWUtZjMwYTQyYzg4OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgMwJTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAvcWJP3opkvoNnq3WXFQS6GWUQxcV5GrxLOYOX11NZmbiqxQ0lY05 /wyK2Msay8VWO/rJxhHI6Mxxr5TiQHQkh8l2itT1l8A7KpdMcwJcp8XnGaFYlbbu +UPgGklUvC6f0swkUo1ztVX4+4T31HKF94yz7mktEOBVICrJaI3D1iCoydxu5OL5 vaI3+E3DuVm+2olkZEldapCZx0kMrHQXnvjVggvQuXFFP4mDXaBw7rc/VtuuA0oW RenGPRrzxeYVI/T3uZnwKRBiP82r0hQVQwOwIDceR6rVuvtSAFtTFbzHAxcZFd+u rhXFVJdtEj+33vKpfkQ5/47hdSdEDboq -----END CERTIFICATE-----Generated at Sun Dec 22 13:11:54 2024 by rpki-client on console-ams.rpki-client.org