$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa File: bdfa9f99-9030-3231-847b-1cc988121e52.roa (raw, json) Hash identifier: Kh3h2CMOQs2PB2awE4VZzeXurYHEk3xPtjGmudOZGs4= Subject key identifier: 71:63:A8:C0:57:07:23:F0:9B:46:DA:FA:2C:FE:13:57:51:80:81:87 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584780268F74515D0FB486C79E00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 2607:8940:45c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:8f:74:51:5d:0f:b4:86:c7:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=d610d2d5-1ef6-46a7-a0af-0b8fb7f92916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:52:39:65:a6:e4:48:ae:62:d7:42:6a:5a: 0d:42:a0:46:65:fd:d8:e3:39:87:e4:b8:48:5f:72: dd:04:a5:38:0f:35:1b:80:48:f3:a1:86:88:a9:24: fe:91:7c:bc:f4:77:5f:07:3e:8a:12:ad:da:d0:25: 6e:82:8a:54:4f:91:d0:86:42:66:0f:ca:6b:9e:eb: 14:d7:82:c6:b8:fe:b4:22:fc:fd:57:54:34:8d:b9: 20:e6:69:8b:31:80:04:76:ac:73:bd:b0:0a:4c:5e: ca:30:ea:12:57:02:fe:d8:10:81:8c:c4:bb:24:1d: 11:ba:78:31:4c:1e:c7:f6:69:f7:62:ab:e7:db:75: a0:46:0d:39:40:e4:e9:a3:84:bf:f4:1c:18:dd:a9: 69:dc:d7:f2:ac:23:a0:b0:e9:d4:c8:e0:10:5c:3f: 8c:8b:c7:5f:cd:b9:7e:9d:63:0e:e1:86:6e:7c:8e: 10:2c:11:22:a3:63:42:ea:e1:cf:d1:e5:73:ec:53: 72:df:3a:34:6c:b5:04:6c:d5:ea:fb:b8:66:bd:ae: f3:e9:d9:1c:a9:1e:d6:0e:de:42:f8:67:22:a0:eb: bf:2f:de:34:a6:70:ef:5b:44:e6:16:6a:be:b9:3c: c0:78:e5:b7:83:d2:c3:bb:67:06:2a:fb:93:5f:02: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:A8:C0:57:07:23:F0:9B:46:DA:FA:2C:FE:13:57:51:80:81:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:45c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:43:80:75:1b:e5:bc:31:4c:22:80:95:6a:d5:dd:29:9f:4e: b2:ff:a3:80:b5:e6:2b:c4:55:28:67:62:94:c5:58:b8:9f:4c: 3f:bc:8e:a7:88:88:c5:26:9f:d3:ae:b2:be:a1:b9:f4:1e:56: 07:e9:30:e5:0f:ee:7a:3d:49:e2:25:a5:e5:20:9e:37:34:27: 27:63:1c:56:53:cc:ce:7b:88:08:6d:da:22:0a:18:68:9b:61: d5:78:d8:7d:61:b1:a3:32:7d:50:62:90:b1:a3:77:d8:71:0a: 97:72:8b:4f:8b:97:41:cf:39:fd:27:2d:77:88:35:74:bd:5c: f8:e5:29:86:81:2d:b5:9c:14:67:80:4d:39:a7:49:51:c6:9e: 79:4d:79:9d:d1:17:9e:17:52:07:12:17:33:ef:2a:6b:66:90: 6c:15:7d:d2:0d:76:2b:3d:c5:32:9a:70:cc:87:71:23:43:c2: c6:25:6c:d1:4e:b9:57:e8:20:ed:c0:78:3b:a6:cd:fc:a7:df: bf:0f:19:76:6a:e8:ca:a5:9f:19:c7:ae:8a:35:d0:0d:9a:87: 7c:71:59:f0:00:c7:46:e9:2f:ab:db:47:d5:31:1b:e7:27:23: 26:e5:1f:d1:03:d4:cf:36:e2:77:23:bb:e3:a6:2a:9d:f5:f8: 92:8c:6c:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJo90UV0PtIbHngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDYxMGQyZDUtMWVmNi00NmE3LWEwYWYtMGI4ZmI3ZjkyOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP5SOWWm5EiuYtdCaloNQqBGZf3Y4zmH5LhI X3LdBKU4DzUbgEjzoYaIqST+kXy89HdfBz6KEq3a0CVugopUT5HQhkJmD8prnusU 14LGuP60Ivz9V1Q0jbkg5mmLMYAEdqxzvbAKTF7KMOoSVwL+2BCBjMS7JB0Rungx TB7H9mn3Yqvn23WgRg05QOTpo4S/9BwY3alp3NfyrCOgsOnUyOAQXD+Mi8dfzbl+ nWMO4YZufI4QLBEio2NC6uHP0eVz7FNy3zo0bLUEbNXq+7hmva7z6dkcqR7WDt5C +GcioOu/L940pnDvW0TmFmq+uTzAeOW3g9LDu2cGKvuTXwJIWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFjqMBXByPwm0ba+iz+E1dRgIGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmRmYTlmOTktOTAzMC0z MjMxLTg0N2ItMWNjOTg4MTIxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEXA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1DgHUb5bwxTCKAlWrV3SmfTrL/o4C15ivEVShnYpTFWLifTD+8 jqeIiMUmn9Ousr6hufQeVgfpMOUP7no9SeIlpeUgnjc0JydjHFZTzM57iAht2iIK GGibYdV42H1hsaMyfVBikLGjd9hxCpdyi0+Ll0HPOf0nLXeINXS9XPjlKYaBLbWc FGeATTmnSVHGnnlNeZ3RF54XUgcSFzPvKmtmkGwVfdINdis9xTKacMyHcSNDwsYl bNFOuVfoIO3AeDumzfyn378PGXZq6MqlnxnHroo10A2ah3xxWfAAx0bpL6vbR9Ux G+cnIyblH9ED1M824ncju+OmKp31+JKMbB0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:15 2024 by rpki-client on console-ams.rpki-client.org