$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cf01cbfd-8717-37b3-9546-7090c15f1a22.roa File: cf01cbfd-8717-37b3-9546-7090c15f1a22.roa (raw, json) Hash identifier: NgxXSijJ0/Rgq0nmHUIxFoZMJ/9WpXwKEdB10ZGp4Z8= Subject key identifier: ED:61:2C:FF:9B:F2:62:C6:AC:D5:42:E0:D1:36:67:A5:0F:08:E9:5C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B5CE8C310FB5096DD867E40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cf01cbfd-8717-37b3-9546-7090c15f1a22.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 2606:4700:3057::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:5c:e8:c3:10:fb:50:96:dd:86:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=c6ea1851-a904-452c-98fc-33ab619eaf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:41:0a:b8:99:ae:b4:91:83:1a:97:ca:76:61: ef:c5:c0:fe:f6:8d:72:70:3c:3a:b7:c3:6c:f1:6a: 24:4f:9a:f3:e7:ea:82:ac:5f:22:55:ce:2a:4a:0d: ad:72:93:ad:a7:45:47:9b:a0:90:3d:7f:f2:dc:87: 0b:3f:7b:01:45:b7:e4:7f:73:85:53:0c:e5:5c:d5: c1:b5:58:b2:90:7e:68:92:47:bd:51:24:af:7d:f0: fc:a4:49:77:3f:f3:1c:cc:91:57:60:9c:e4:7d:27: 88:aa:b2:0d:79:34:34:1a:b5:84:b9:cb:ff:b9:e9: 7d:50:c6:11:dc:eb:64:f9:40:62:d7:92:97:75:c3: 41:41:eb:56:b1:7b:b8:57:90:20:18:22:7b:b0:88: 1f:c5:e1:da:32:52:91:d9:6b:19:12:76:d7:2c:86: bb:9b:27:ac:bc:59:a1:0f:a4:3e:7f:93:41:d5:cb: 18:c9:66:ad:b2:55:f6:ca:bc:44:99:18:af:47:eb: cc:b4:fe:e4:59:42:ea:4a:c0:54:bf:e2:a8:81:47: 9c:93:d8:c9:3c:4c:54:a0:e8:ce:85:9d:2c:b0:99: 95:c6:68:3c:6f:9e:67:b8:a8:3e:ac:a1:42:88:cb: d0:85:14:d4:1d:61:30:b5:4a:aa:ec:1e:7f:71:ab: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:2C:FF:9B:F2:62:C6:AC:D5:42:E0:D1:36:67:A5:0F:08:E9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cf01cbfd-8717-37b3-9546-7090c15f1a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3057::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b5:03:d8:22:16:47:10:92:7b:bf:f4:8f:f1:49:a6:18:f7: 0c:f4:e5:6f:71:45:d1:4d:2d:93:80:e7:be:ee:f9:5a:f9:a2: ce:0d:88:b7:37:a8:41:9e:60:66:cc:1e:57:26:6b:e8:48:b1: b2:22:7f:c5:27:75:8b:d3:40:86:83:27:a4:38:33:6d:2a:1a: ff:8b:3a:da:a2:ef:87:0a:76:4c:ad:eb:82:e6:56:39:b2:54: de:69:d3:26:a4:53:bf:bb:19:b0:7d:15:3f:8e:9f:da:88:ba: b4:f0:13:60:0d:44:63:9b:31:c7:47:2f:d1:48:c4:88:23:54: 36:d9:a0:60:e0:53:4e:1f:14:aa:5b:51:5c:b9:85:1f:4d:55: 29:7f:f7:85:3e:a9:f9:a2:59:d7:f0:de:e8:91:f5:a7:5a:32: 14:7b:25:e9:72:65:8d:3c:f7:48:72:99:7e:93:cc:c7:73:68: d2:a5:9c:46:0e:53:9e:84:b8:34:a4:1a:78:c3:12:4a:f7:90: 44:0f:03:0d:20:14:ac:20:3c:71:eb:81:bd:bf:71:5c:06:07: ab:b8:59:18:93:e2:2e:90:47:29:51:fe:87:ad:65:b9:26:75: 81:1a:91:b0:20:bb:99:36:b8:00:f3:03:f1:40:20:3c:3b:85: 73:9f:17:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc7XOjDEPtQlt2GfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk YzZlYTE4NTEtYTkwNC00NTJjLTk4ZmMtMzNhYjYxOWVhZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kEKuJmutJGDGpfKdmHvxcD+9o1ycDw6t8Ns 8WokT5rz5+qCrF8iVc4qSg2tcpOtp0VHm6CQPX/y3IcLP3sBRbfkf3OFUwzlXNXB tViykH5okke9USSvffD8pEl3P/MczJFXYJzkfSeIqrINeTQ0GrWEucv/uel9UMYR 3Otk+UBi15KXdcNBQetWsXu4V5AgGCJ7sIgfxeHaMlKR2WsZEnbXLIa7myesvFmh D6Q+f5NB1csYyWatslX2yrxEmRivR+vMtP7kWULqSsBUv+KogUeck9jJPExUoOjO hZ0ssJmVxmg8b55nuKg+rKFCiMvQhRTUHWEwtUqq7B5/cavp+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO1hLP+b8mLGrNVC4NE2Z6UPCOlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2YwMWNiZmQtODcxNy0z N2IzLTk1NDYtNzA5MGMxNWYxYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADBX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIq1A9giFkcQknu/9I/xSaYY9wz05W9xRdFNLZOA577u+Vr5os4N iLc3qEGeYGbMHlcma+hIsbIif8UndYvTQIaDJ6Q4M20qGv+LOtqi74cKdkyt64Lm VjmyVN5p0yakU7+7GbB9FT+On9qIurTwE2ANRGObMcdHL9FIxIgjVDbZoGDgU04f FKpbUVy5hR9NVSl/94U+qfmiWdfw3uiR9adaMhR7JelyZY0890hymX6TzMdzaNKl nEYOU56EuDSkGnjDEkr3kEQPAw0gFKwgPHHrgb2/cVwGB6u4WRiT4i6QRylR/oet ZbkmdYEakbAgu5k2uADzA/FAIDw7hXOfF0M= -----END CERTIFICATE-----Generated at Mon Nov 25 01:27:11 2024 by rpki-client on console-ams.rpki-client.org