$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/389942c1-a26c-3aa1-9450-0f50f4389f9e.roa File: 389942c1-a26c-3aa1-9450-0f50f4389f9e.roa (raw, json) Hash identifier: zB7PFos0ArBC4ZkUMnJkx1PkKKosoknY0uhiQtHmQ7c= Subject key identifier: B9:1E:DB:8A:A5:0A:7F:A2:3E:C1:EA:E5:1F:0F:C2:82:5D:01:09:B6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584780268E8CD19A3B2A96F4EC10 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/389942c1-a26c-3aa1-9450-0f50f4389f9e.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 2607:8940:5a20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:8e:8c:d1:9a:3b:2a:96:f4:ec:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=8d245595-7a91-482c-b4a8-31ea9dc43618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:1f:aa:d0:93:44:79:db:fd:25:70:c4:22: b3:06:50:9e:92:f9:6f:16:3a:08:99:5e:d4:bd:b2: f1:f4:df:e8:8f:b7:fc:45:67:bc:10:c2:38:c3:cf: ad:c6:88:5d:94:86:d3:b7:fe:91:e2:b6:cb:9b:fa: f4:7d:64:d5:e7:3e:57:67:32:78:00:83:f0:16:59: a8:09:4d:1a:63:b8:72:b6:63:94:6b:8d:a8:9d:e4: 47:6f:10:7b:37:34:c0:58:4d:ea:dc:fc:46:ec:3e: 0d:06:3e:dd:dc:75:44:21:87:e5:61:3a:63:41:82: 3e:5f:d9:92:cb:2a:f6:af:50:11:b9:17:0a:ff:cd: 60:77:16:f0:e6:a7:b6:e3:52:76:57:75:27:07:0e: ac:a9:2a:c8:8e:38:73:e3:38:cc:2a:bc:cb:97:ea: 19:24:18:c7:d8:90:ae:3f:68:0e:72:6b:56:16:bf: 98:8a:f1:9d:1c:4d:f2:2c:16:6b:3e:b2:9f:a2:40: 7c:8d:02:24:96:ff:b2:c1:62:08:ab:3b:b3:c9:d8: 18:1d:1a:dc:26:9f:8e:c0:a7:66:eb:ab:45:6f:6d: 16:48:cb:04:d6:7e:7b:e8:0c:bd:75:6a:2d:aa:c7: bc:4d:40:c5:6f:5e:14:ce:c2:82:75:c4:1a:66:56: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1E:DB:8A:A5:0A:7F:A2:3E:C1:EA:E5:1F:0F:C2:82:5D:01:09:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/389942c1-a26c-3aa1-9450-0f50f4389f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5a20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c4:36:5a:2e:34:cd:5a:c7:95:7d:b1:db:b2:eb:c6:55:54: 83:e2:37:93:b1:ba:dc:17:ea:ae:1b:f3:fe:96:c0:3d:b8:10: bc:87:82:33:d7:9d:8d:45:dc:f2:71:c6:40:52:b2:68:c9:63: 74:f8:65:25:b4:97:c5:2d:32:6c:d5:86:11:81:7b:7e:68:81: 73:fb:e2:00:37:ab:23:e8:de:7a:59:ea:22:e8:f1:29:7f:fb: e9:bd:65:c2:62:e9:26:d5:18:d0:7a:94:2c:c5:ee:41:54:80: da:e1:a8:13:cd:3f:c4:5b:3e:89:a6:f4:0d:8b:25:fd:be:2f: 99:49:5a:0d:69:f1:16:f4:f7:29:79:2b:35:cf:e3:96:58:6e: 90:04:32:59:fe:02:3c:a5:72:7d:6c:04:59:c5:5c:73:52:ca: 98:ca:36:6a:c6:d8:a6:f9:fa:fe:89:36:42:3f:b3:c3:fa:2f: 21:51:51:ab:31:23:b3:3e:4c:18:be:d9:2b:3f:b3:64:8f:0e: 55:f8:a6:59:a9:84:58:17:30:e2:3a:f9:b5:2d:d3:35:91:40: 07:f8:7f:a0:06:87:c8:b1:64:aa:f4:96:cf:fc:29:6f:9d:8e: d2:3d:62:80:af:4c:4f:09:fa:f3:69:e0:d9:bc:37:c3:11:85: df:c2:1a:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJo6M0Zo7Kpb07BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk OGQyNDU1OTUtN2E5MS00ODJjLWI0YTgtMzFlYTlkYzQzNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4sfqtCTRHnb/SVwxCKzBlCekvlvFjoImV7U vbLx9N/oj7f8RWe8EMI4w8+txohdlIbTt/6R4rbLm/r0fWTV5z5XZzJ4AIPwFlmo CU0aY7hytmOUa42oneRHbxB7NzTAWE3q3PxG7D4NBj7d3HVEIYflYTpjQYI+X9mS yyr2r1ARuRcK/81gdxbw5qe241J2V3UnBw6sqSrIjjhz4zjMKrzLl+oZJBjH2JCu P2gOcmtWFr+YivGdHE3yLBZrPrKfokB8jQIklv+ywWIIqzuzydgYHRrcJp+OwKdm 66tFb20WSMsE1n576Ay9dWotqse8TUDFb14UzsKCdcQaZlYhSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLke24qlCn+iPsHq5R8PwoJdAQm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzg5OTQyYzEtYTI2Yy0z YWExLTk0NTAtMGY1MGY0Mzg5ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFog MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHENlouNM1ax5V9sduy68ZVVIPiN5OxutwX6q4b8/6WwD24ELyH gjPXnY1F3PJxxkBSsmjJY3T4ZSW0l8UtMmzVhhGBe35ogXP74gA3qyPo3npZ6iLo 8Sl/++m9ZcJi6SbVGNB6lCzF7kFUgNrhqBPNP8RbPomm9A2LJf2+L5lJWg1p8Rb0 9yl5KzXP45ZYbpAEMln+Ajylcn1sBFnFXHNSypjKNmrG2Kb5+v6JNkI/s8P6LyFR UasxI7M+TBi+2Ss/s2SPDlX4plmphFgXMOI6+bUt0zWRQAf4f6AGh8ixZKr0ls/8 KW+djtI9YoCvTE8J+vNp4Nm8N8MRhd/CGgQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:11 2024 by rpki-client on console-ams.rpki-client.org