$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa File: de58a534-66be-3f5a-bf08-7f6aeec0845e.roa (raw, json) Hash identifier: iGt+r/9wGdPyzIMnWr9oSTzPl7f5RE6xCKCZNoQFUv4= Subject key identifier: BE:BF:E2:E4:23:53:44:A4:52:7A:85:FF:88:11:02:B3:70:D0:A7:F6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475A763C396EDF2D9ECC86FF80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 20940 IP address blocks: 2001:418:1401:2c::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:3c:39:6e:df:2d:9e:cc:86:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=cede8f89-0667-46f2-af65-32ef8d23c36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:23:64:0c:ba:47:eb:41:af:2a:9f:bf:f5: 73:65:9c:2e:55:71:d9:8f:b0:5d:e6:5a:66:26:5a: fb:41:73:b7:f3:05:59:d3:6b:ef:46:1c:7b:e9:99: 2d:74:e4:ba:1d:19:12:2d:ba:34:b0:dd:c3:45:0a: ce:ab:ae:ec:38:2b:cb:47:11:49:e4:63:b7:c9:a2: c4:97:54:4d:49:b5:c9:64:93:d2:6e:d1:cb:fe:35: b7:4b:3d:07:cc:53:97:62:1d:bb:63:88:3a:68:0b: 34:00:82:d5:31:07:00:d7:c5:6e:fa:5b:ef:7b:b4: 4b:9e:36:84:9c:db:96:f0:81:77:bc:63:8b:cb:1e: c4:47:e6:c4:56:c5:ee:d5:50:45:92:7a:1a:ca:7d: f6:6a:c2:b2:e0:07:5f:78:41:0d:e3:91:ca:a3:5e: f0:96:02:35:6d:02:01:a4:f5:9a:69:c5:89:36:e6: aa:44:ef:bf:4d:1b:21:5a:88:6b:77:34:e9:22:3d: 5b:f7:8e:b7:f7:59:36:25:cc:ce:f5:3b:47:3c:70: 34:38:18:88:84:13:83:67:2d:b9:ea:a9:8b:9f:fb: 59:5c:bf:ae:e8:3b:1f:31:b8:bc:cd:ca:d5:1b:38: 6d:b2:ff:1f:86:4b:65:ad:20:24:ef:fa:63:73:b8: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BF:E2:E4:23:53:44:A4:52:7A:85:FF:88:11:02:B3:70:D0:A7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de58a534-66be-3f5a-bf08-7f6aeec0845e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:2c::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:11:02:68:a8:44:d0:10:02:e8:19:34:69:5d:b3:4d:13:16: 17:e1:89:6f:c0:83:e6:eb:2f:76:4e:4a:3f:04:3c:5b:6e:6d: 77:64:a0:bd:03:16:b7:6b:c0:32:87:bb:8d:29:75:d9:a6:55: 51:c8:a3:b3:93:95:04:04:fe:c2:d7:e2:c1:2a:4d:fa:6f:a0: 5b:43:d4:e1:bd:61:b6:ba:34:10:4d:17:8d:1f:fc:8c:3b:6b: 85:8d:ba:9a:e8:6f:b4:45:e1:6a:10:56:2b:2a:c7:eb:90:30: a4:ea:f0:f4:03:3b:81:14:db:f1:de:0e:30:01:56:de:c5:6f: db:06:17:0e:b7:87:33:d4:05:6e:f8:01:81:62:16:11:2e:0b: eb:58:24:73:e9:dd:78:93:97:4a:fa:a9:fa:1a:1e:90:45:4a: 75:43:7e:9e:7f:4b:05:50:fe:6b:48:44:3c:41:e9:03:14:66: a5:ae:8c:d5:59:30:62:8c:29:5d:9f:b8:5e:1f:03:3b:25:c3: c6:12:83:38:7b:86:da:f0:61:e8:7b:ca:73:30:6a:90:35:91: 19:23:e2:a4:56:93:49:84:3c:ff:95:11:11:95:aa:66:a8:31: 51:fe:35:5c:b8:6b:9d:81:62:cd:61:11:03:96:bf:ba:84:87: 2d:93:d6:c8 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEdadjw5bt8tnsyG/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk Y2VkZThmODktMDY2Ny00NmYyLWFmNjUtMzJlZjhkMjNjMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWsjZAy6R+tBryqfv/VzZZwuVXHZj7Bd5lpm Jlr7QXO38wVZ02vvRhx76ZktdOS6HRkSLbo0sN3DRQrOq67sOCvLRxFJ5GO3yaLE l1RNSbXJZJPSbtHL/jW3Sz0HzFOXYh27Y4g6aAs0AILVMQcA18Vu+lvve7RLnjaE nNuW8IF3vGOLyx7ER+bEVsXu1VBFknoayn32asKy4AdfeEEN45HKo17wlgI1bQIB pPWaacWJNuaqRO+/TRshWohrdzTpIj1b946391k2JczO9TtHPHA0OBiIhBODZy25 6qmLn/tZXL+u6DsfMbi8zcrVGzhtsv8fhktlrSAk7/pjc7hGKQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFL6/4uQjU0SkUnqF/4gRArNw0Kf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGU1OGE1MzQtNjZiZS0z ZjVhLWJmMDgtN2Y2YWVlYzA4NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ACwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAEBECaKhE0BAC6Bk0aV2zTRMWF+GJb8CD5usvdk5KPwQ8W25t d2SgvQMWt2vAMoe7jSl12aZVUcijs5OVBAT+wtfiwSpN+m+gW0PU4b1htro0EE0X jR/8jDtrhY26muhvtEXhahBWKyrH65AwpOrw9AM7gRTb8d4OMAFW3sVv2wYXDreH M9QFbvgBgWIWES4L61gkc+ndeJOXSvqp+hoekEVKdUN+nn9LBVD+a0hEPEHpAxRm pa6M1VkwYowpXZ+4Xh8DOyXDxhKDOHuG2vBh6HvKczBqkDWRGSPipFaTSYQ8/5UR EZWqZqgxUf41XLhrnYFizWERA5a/uoSHLZPWyA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:19 2024 by rpki-client on console-ams.rpki-client.org