$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f495328c-fa24-3d01-8a2f-db66f7b756b7.roa File: f495328c-fa24-3d01-8a2f-db66f7b756b7.roa (raw, json) Hash identifier: 52mdvh4XvrY1MXo4ZyTw+Ajg2mdAnNP86T5G0bPfLgY= Subject key identifier: 91:48:65:52:E7:1C:76:8C:0A:65:6D:6C:E2:55:04:AA:B1:A1:0B:A6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584780269495D61D4E8C7A092180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f495328c-fa24-3d01-8a2f-db66f7b756b7.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 209242 IP address blocks: 2607:8940:2830::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:94:95:d6:1d:4e:8c:7a:09:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=d556f680-16b4-40cf-bb00-2115624a03e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:f8:1d:20:b2:ca:fb:68:8d:32:e9:a2:27: cf:95:e0:25:22:ff:af:6a:89:d9:05:ec:e4:47:82: ca:72:41:9e:fb:d8:40:f4:ac:e1:44:37:75:d1:62: b4:e2:72:16:34:20:e2:49:43:53:74:e6:28:f4:4f: 07:70:f2:9b:fa:dc:94:d6:1c:4f:fc:1a:24:55:38: 45:3e:01:56:34:e5:8c:7d:93:12:99:d7:96:84:ab: dc:8d:63:ad:bc:63:e0:62:bb:49:fa:6a:8b:d4:1e: 3d:8f:51:d9:bd:53:47:52:9f:15:c7:30:0b:6c:36: dc:f0:a5:63:66:60:b3:b7:dd:7f:21:12:0d:7b:e7: 21:30:17:45:0f:e7:9b:f2:d8:66:4f:b2:65:b8:bd: 74:53:27:ca:22:98:89:3c:d2:e7:e8:16:8e:b9:73: 09:f2:b7:25:62:ee:2f:c9:fe:60:40:61:dc:d0:06: fa:28:5a:49:08:98:cc:20:9d:b1:cf:3c:e3:5b:c5: b1:84:69:64:f3:51:1b:f7:3e:54:28:3f:3b:37:b6: 97:1e:28:56:ae:b7:0b:28:0f:56:82:14:0a:f9:58: 85:a7:b5:4c:a1:41:d7:62:4f:a4:14:9b:08:f1:01: bf:5d:81:32:2e:4b:dc:67:23:c6:4e:27:9c:a9:82: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:48:65:52:E7:1C:76:8C:0A:65:6D:6C:E2:55:04:AA:B1:A1:0B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f495328c-fa24-3d01-8a2f-db66f7b756b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:2830::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e2:3c:3f:8f:dd:59:26:ad:a7:ff:9e:9a:b5:a2:2d:3b:4f: 19:e1:a0:51:ad:e4:a1:4a:77:d4:23:22:99:df:3d:00:da:44: 03:2a:07:3c:75:4e:a1:11:cc:f2:aa:ea:c0:4b:b6:18:12:93: 75:8a:df:8c:3a:d1:fc:15:a1:33:98:3f:42:22:b2:78:72:bf: e9:c3:d7:18:1d:64:0f:ed:42:c2:43:bc:e8:49:3e:d6:2c:5d: 11:c9:f1:46:19:62:8f:97:38:c8:2c:86:da:30:8b:a5:07:fe: 5d:b1:6f:ff:89:3f:99:f2:a7:39:eb:c8:55:a5:eb:e7:67:55: 26:6f:4c:80:18:ef:05:f2:2f:5a:89:a5:51:27:68:ef:3e:4b: a6:08:0e:72:04:33:8d:3b:60:35:b4:ab:9d:4e:6b:c3:4d:80: 17:b0:1b:bf:a0:bb:c7:a4:7b:44:39:58:11:48:66:4f:f4:d2: 1f:24:4c:81:4a:41:d3:24:b3:74:0f:6b:6b:94:64:1a:c9:d4: 95:da:a1:cc:3c:19:f5:03:ce:cc:fb:97:67:69:b0:ed:9e:b1: d2:5e:f3:02:27:5c:78:7a:59:7a:f3:13:53:f6:2e:30:1f:f9: 03:fa:c1:07:87:dd:96:c2:25:c8:7f:ef:61:c4:72:b8:d5:b4: 91:79:fb:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpSV1h1OjHoJIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDU1NmY2ODAtMTZiNC00MGNmLWJiMDAtMjExNTYyNGEwM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp34HSCyyvtojTLpoifPleAlIv+vaonZBezk R4LKckGe+9hA9KzhRDd10WK04nIWNCDiSUNTdOYo9E8HcPKb+tyU1hxP/BokVThF PgFWNOWMfZMSmdeWhKvcjWOtvGPgYrtJ+mqL1B49j1HZvVNHUp8VxzALbDbc8KVj ZmCzt91/IRINe+chMBdFD+eb8thmT7JluL10UyfKIpiJPNLn6BaOuXMJ8rclYu4v yf5gQGHc0Ab6KFpJCJjMIJ2xzzzjW8WxhGlk81Eb9z5UKD87N7aXHihWrrcLKA9W ghQK+ViFp7VMoUHXYk+kFJsI8QG/XYEyLkvcZyPGTiecqYLV9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFIZVLnHHaMCmVtbOJVBKqxoQumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjQ5NTMyOGMtZmEyNC0z ZDAxLThhMmYtZGI2NmY3Yjc1NmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCgw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC3iPD+P3Vkmraf/npq1oi07TxnhoFGt5KFKd9QjIpnfPQDaRAMq Bzx1TqERzPKq6sBLthgSk3WK34w60fwVoTOYP0Iisnhyv+nD1xgdZA/tQsJDvOhJ PtYsXRHJ8UYZYo+XOMgshtowi6UH/l2xb/+JP5nypznryFWl6+dnVSZvTIAY7wXy L1qJpVEnaO8+S6YIDnIEM407YDW0q51Oa8NNgBewG7+gu8eke0Q5WBFIZk/00h8k TIFKQdMks3QPa2uUZBrJ1JXaocw8GfUDzsz7l2dpsO2esdJe8wInXHh6WXrzE1P2 LjAf+QP6wQeH3ZbCJch/72HEcrjVtJF5+w0= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:28 2024 by rpki-client on console-ams.rpki-client.org