$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: t+/E5ajXRUq5TFQrQpnlv5S2B6PQHhkVfL4aOiofNEE= Subject key identifier: 00:4A:0D:C2:72:D8:5A:28:01:A1:D2:0F:1D:AC:E2:BB:7E:F7:13:6C Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F432858476E00FCD560A38AA0AA550A00 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Fri 04 Oct 2024 13:00:42 +0000 ROA not before: Fri 04 Oct 2024 13:00:42 +0000 ROA not after: Thu 02 Jan 2025 14:00:42 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:00:fc:d5:60:a3:8a:a0:aa:55:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Oct 4 13:00:42 2024 GMT Not After : Jan 2 14:00:42 2025 GMT Subject: CN=fde0c1da-266e-4c6d-91f2-ddc1056bf308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:30:f5:2a:11:8f:67:ba:fc:ec:f9:9a:e9: 23:03:35:9b:8a:81:ce:c6:55:6d:12:ef:cb:ce:35: ce:da:87:cb:64:a6:86:74:82:2d:27:41:3b:16:34: 56:50:dc:f0:91:db:9e:ef:10:96:91:03:02:1c:b0: d0:78:9b:75:cc:c6:79:22:ba:ff:c6:a0:9d:c1:48: 5c:49:7a:c9:cb:bf:1c:eb:c5:6c:bb:11:5b:94:02: 24:3c:ad:d8:a7:6b:b5:ca:a7:6a:3b:a0:a5:e5:a1: d5:ee:c7:05:ac:5d:58:1a:c8:f3:9e:42:21:dd:1b: 25:0f:aa:20:02:6a:39:3d:17:43:3e:85:8b:19:75: 84:8d:51:14:26:18:64:69:71:74:38:6b:48:8f:85: a2:30:31:6b:0e:11:68:83:bf:be:d0:9f:7c:67:77: d1:09:f9:fa:e1:10:30:49:dc:a2:f7:46:70:c9:27: a7:48:8c:77:68:d4:2e:e9:03:98:63:93:17:ff:66: b6:f2:a8:a6:cd:51:67:49:1d:f0:ad:f5:9f:e2:89: 30:a4:34:ed:57:03:da:1a:f6:79:c6:f0:56:3f:c1: 01:5a:38:ef:30:47:59:41:2d:c8:f9:93:62:71:ed: a5:6a:11:8f:d1:e7:ea:ec:df:f7:c3:f5:cd:43:85: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:0D:C2:72:D8:5A:28:01:A1:D2:0F:1D:AC:E2:BB:7E:F7:13:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:22:d1:87:a3:a9:11:c4:5e:81:57:e5:7f:fd:11:6d:83:e4: 55:1c:c7:d0:30:2e:de:b4:4e:97:43:d4:32:6e:13:df:e2:4b: d6:bd:eb:b8:34:79:5b:3d:fb:26:52:60:33:2d:b0:37:8f:63: 83:77:10:8c:d4:74:f1:92:ec:e8:78:e4:31:87:76:18:be:78: ed:80:19:21:ae:74:ab:d7:bf:fe:f5:25:d7:ed:67:8b:0f:3d: 6d:9d:d3:22:2e:6e:9d:43:4e:4f:f3:d5:0e:7b:25:d8:c8:e2: 84:08:b6:bc:48:4c:59:9c:82:f1:30:c4:f6:a7:01:6f:da:b3: ad:a8:aa:59:a0:8d:29:e1:ca:8a:ee:c9:ae:76:ec:7b:6a:74: 72:56:73:3d:f2:1e:89:ec:5f:18:4f:1f:f3:5d:ea:b3:1a:3f: aa:9a:ee:92:d4:57:d8:35:ca:98:0a:af:4d:14:bc:c6:eb:1b: 31:11:13:1c:ee:b8:7e:98:81:ec:be:6e:6e:ce:aa:66:d1:f0: 1d:4e:e4:c6:c3:c9:1e:bd:04:12:30:1f:ff:c0:a0:5f:b1:bc: e9:84:c3:34:b7:28:40:cd:be:ce:a9:5a:24:8d:19:57:32:98: ae:8a:92:75:76:da:81:cd:d0:6d:f7:66:19:18:a0:f4:d2:ce: 18:b8:e3:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEduAPzVYKOKoKpVCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk ZmRlMGMxZGEtMjY2ZS00YzZkLTkxZjItZGRjMTA1NmJmMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm60w9SoRj2e6/Oz5mukjAzWbioHOxlVtEu/L zjXO2ofLZKaGdIItJ0E7FjRWUNzwkdue7xCWkQMCHLDQeJt1zMZ5Irr/xqCdwUhc SXrJy78c68VsuxFblAIkPK3Yp2u1yqdqO6Cl5aHV7scFrF1YGsjznkIh3RslD6og Amo5PRdDPoWLGXWEjVEUJhhkaXF0OGtIj4WiMDFrDhFog7++0J98Z3fRCfn64RAw Sdyi90ZwySenSIx3aNQu6QOYY5MX/2a28qimzVFnSR3wrfWf4okwpDTtVwPaGvZ5 xvBWP8EBWjjvMEdZQS3I+ZNice2lahGP0efq7N/3w/XNQ4V8ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFABKDcJy2FooAaHSDx2s4rt+9xNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADEi0YejqRHEXoFX5X/9EW2D5FUcx9AwLt60TpdD1DJuE9/iS9a9 67g0eVs9+yZSYDMtsDePY4N3EIzUdPGS7Oh45DGHdhi+eO2AGSGudKvXv/71Jdft Z4sPPW2d0yIubp1DTk/z1Q57JdjI4oQItrxITFmcgvEwxPanAW/as62oqlmgjSnh yoruya527HtqdHJWcz3yHonsXxhPH/Nd6rMaP6qa7pLUV9g1ypgKr00UvMbrGzER ExzuuH6Ygey+bm7OqmbR8B1O5MbDyR69BBIwH//AoF+xvOmEwzS3KEDNvs6pWiSN GVcymK6KknV22oHN0G33ZhkYoPTSzhi445g= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org