$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa File: 2a914a87-d42f-3891-842c-4a60b90e559d.roa (raw, json) Hash identifier: /uNfT5chSWW/ciChn826rxLc4IEERGjHuymWJIcYSCg= Subject key identifier: A9:C0:3B:0E:75:75:24:68:78:70:99:C2:3D:79:AD:7A:2C:14:0F:75 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858478026945A34B8D04BC7F25400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 2607:8940:5670::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:94:5a:34:b8:d0:4b:c7:f2:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=7e07f79e-f6a1-4099-92e2-b2b36adec501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:71:12:a4:7b:fe:59:fe:a1:ee:38:68:43:6e: 2a:9d:4b:12:cf:ef:2e:48:68:d4:c3:ec:ae:b8:6c: 27:be:1c:64:de:b1:fd:74:f1:24:54:71:79:f9:83: 5f:6b:f2:2c:c0:36:83:d1:f0:ab:03:56:d1:6a:7b: 9a:20:d1:68:49:19:88:ee:d0:c7:e8:aa:4c:d6:81: bf:98:7c:cb:00:cc:93:42:8c:91:b0:25:c6:60:a3: 55:0c:c4:70:ea:5c:1d:81:46:18:fe:60:a8:f2:73: 12:13:fa:ad:53:25:70:5f:28:8d:96:9a:6a:cc:8e: 88:92:bb:e5:b7:7a:ae:ad:b7:8c:3b:c9:e3:51:e9: 12:3d:33:3a:f8:b0:9e:36:13:f9:af:24:c7:ca:f9: 00:32:1d:06:01:5a:a9:66:64:dc:a6:71:8c:64:2a: 7b:cf:09:63:ef:89:a9:0f:63:4a:c2:86:88:4e:60: 1e:7d:50:ce:cb:a3:cc:6f:47:94:6c:f8:8c:82:bf: c2:46:d0:f2:2e:6a:99:6e:25:09:f2:65:56:77:6f: bc:93:bc:9c:bb:84:56:96:68:e0:f5:f1:49:c8:b1: 8f:90:50:c3:b7:61:8e:d9:e0:bf:59:07:b6:17:01: 83:87:30:84:b0:87:5c:92:41:a9:4c:12:76:2d:a8: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:3B:0E:75:75:24:68:78:70:99:C2:3D:79:AD:7A:2C:14:0F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5670::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:68:fe:c3:57:ba:70:1e:86:3d:6e:54:25:45:71:5a:9c:aa: 83:98:db:ef:54:8b:f1:81:b2:c3:1f:55:31:51:41:e6:3f:68: f6:0f:6b:35:cb:c2:65:93:df:ad:33:83:17:1b:72:76:7d:2c: 93:cb:3d:66:6f:7f:98:79:7f:91:51:4c:20:8d:5c:03:c2:69: c8:73:2c:88:b9:93:04:c1:aa:ed:64:dc:ed:6c:d7:09:67:aa: 42:e6:86:ed:e1:55:d7:85:c2:95:2b:1f:f2:85:49:cf:3f:f6: c0:38:af:35:a3:3e:47:f2:9d:ae:44:9f:1e:9e:de:6d:56:03: 9c:a7:be:04:97:8d:50:74:67:1a:a1:63:8b:9a:74:2e:05:c6: 2f:d7:19:85:78:66:21:30:67:62:7d:1d:1d:56:7d:c7:3d:21: 6a:6c:01:a9:2a:72:d5:d7:f5:f8:a1:15:c8:99:21:5a:5b:8f: a6:ab:b0:46:e6:bc:fa:f9:13:b7:e2:a6:45:08:0e:0b:58:85: 98:ef:1b:09:cb:7c:02:73:f4:6a:32:d4:3e:2d:e2:43:2b:1e: 39:74:32:10:a3:1d:23:0e:de:3b:e8:21:c1:47:00:7e:36:5a: 9a:55:63:82:4c:a4:f3:52:91:6e:8c:ca:6a:5a:64:bf:fe:67: 2f:ca:58:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpRaNLjQS8fyVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk N2UwN2Y3OWUtZjZhMS00MDk5LTkyZTItYjJiMzZhZGVjNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnESpHv+Wf6h7jhoQ24qnUsSz+8uSGjUw+yu uGwnvhxk3rH9dPEkVHF5+YNfa/IswDaD0fCrA1bRanuaINFoSRmI7tDH6KpM1oG/ mHzLAMyTQoyRsCXGYKNVDMRw6lwdgUYY/mCo8nMSE/qtUyVwXyiNlppqzI6Ikrvl t3qurbeMO8njUekSPTM6+LCeNhP5ryTHyvkAMh0GAVqpZmTcpnGMZCp7zwlj74mp D2NKwoaITmAefVDOy6PMb0eUbPiMgr/CRtDyLmqZbiUJ8mVWd2+8k7ycu4RWlmjg 9fFJyLGPkFDDt2GO2eC/WQe2FwGDhzCEsIdckkGpTBJ2LahwtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKnAOw51dSRoeHCZwj15rXosFA91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmE5MTRhODctZDQyZi0z ODkxLTg0MmMtNGE2MGI5MGU1NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFZw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxo/sNXunAehj1uVCVFcVqcqoOY2+9Ui/GBssMfVTFRQeY/aPYP azXLwmWT360zgxcbcnZ9LJPLPWZvf5h5f5FRTCCNXAPCachzLIi5kwTBqu1k3O1s 1wlnqkLmhu3hVdeFwpUrH/KFSc8/9sA4rzWjPkfyna5Enx6e3m1WA5ynvgSXjVB0 ZxqhY4uadC4Fxi/XGYV4ZiEwZ2J9HR1Wfcc9IWpsAakqctXX9fihFciZIVpbj6ar sEbmvPr5E7fipkUIDgtYhZjvGwnLfAJz9Goy1D4t4kMrHjl0MhCjHSMO3jvoIcFH AH42WppVY4JMpPNSkW6MympaZL/+Zy/KWGI= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:11 2024 by rpki-client on console-ams.rpki-client.org