$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa File: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (raw, json) Hash identifier: j8G1Q8E5ADKXq8Msl5xXu/KQipcVB/ozRM1FZ5Knd5U= Subject key identifier: 2D:07:1C:EF:4B:BD:83:C2:9E:9B:39:F7:CA:BD:4B:FB:68:25:54:B5 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F43285847C8D9D129424EA56293F89600 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 400245 IP address blocks: 2602:fb7d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:d1:29:42:4e:a5:62:93:f8:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=5542e434-deca-4e9d-a599-fc15e0f979ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:a0:0b:1c:37:d8:72:60:65:2b:84:c8:86: 38:a4:f6:0b:d1:65:ea:78:e4:42:ac:82:47:4c:07: c8:e2:41:01:56:6f:ba:3a:50:96:e8:b2:58:58:aa: 6e:c6:be:4f:3b:00:d5:5a:8b:eb:08:b1:24:8a:c1: a7:d1:c5:69:a4:61:c5:b4:8c:ae:74:65:23:aa:e3: 31:7a:66:7a:e1:4a:9e:c0:e6:5a:fb:c8:6a:2c:6c: d7:c6:9f:37:13:5d:2c:09:e8:c7:11:38:9f:72:49: a5:b6:ae:05:03:bc:a3:0c:73:61:ff:ff:d6:ca:bd: cd:a5:e4:3c:84:45:12:2e:bc:8f:55:c1:a6:d2:d7: a9:1c:18:98:a5:ff:6a:c3:ee:29:36:a8:04:f8:cb: 43:13:99:ef:72:f9:24:9b:64:33:f6:89:d2:2b:d4: c5:ea:0b:e9:84:a3:c6:bb:70:e0:0b:8e:fb:68:09: eb:38:4f:aa:5b:9b:41:e4:b4:c7:e0:0c:28:80:f5: 84:cc:da:5e:14:bb:1c:75:8f:e7:44:e5:e1:33:3d: a6:75:96:31:3a:1b:8d:de:d2:8e:c8:e5:8d:02:84: 7b:72:c9:b2:a1:45:cb:4a:d4:b6:3a:82:b5:f9:a2: f0:cb:e1:5a:08:02:5a:67:66:14:74:72:c5:5c:97: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:07:1C:EF:4B:BD:83:C2:9E:9B:39:F7:CA:BD:4B:FB:68:25:54:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb7d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a1:69:e6:1e:5a:98:e6:c9:0c:01:86:eb:b5:9b:9d:17:97: 37:97:13:98:a0:dc:1c:43:0d:ec:70:37:d5:a8:80:b8:eb:18: d3:ec:ed:69:a8:62:99:0d:7f:73:5e:fb:be:87:e0:08:36:9a: bc:7e:25:75:16:8e:27:57:6e:d2:88:5f:bb:0d:98:11:96:7d: 79:d9:37:90:75:ba:56:da:e3:9b:6d:a6:7c:04:d0:49:09:9e: 82:66:1a:1b:cb:e7:7c:99:08:c7:6d:aa:32:be:1d:e7:a7:24: 81:b7:6f:1b:8e:46:fa:ee:cd:ff:a6:0c:65:de:8e:1a:50:01: 81:1a:52:cb:1d:35:2e:76:92:95:61:46:f1:4b:cc:d1:a5:62: d1:c1:92:cd:49:63:b7:04:ad:25:91:de:99:95:ba:39:b7:67: b0:f4:63:64:36:a5:07:c8:fa:e9:1b:bb:1d:86:11:78:23:fd: 8e:a9:45:a2:f0:73:83:7b:4b:69:2e:aa:17:11:c2:03:d2:ca: 91:a2:f5:76:3b:6b:74:59:f4:4e:e8:80:ba:32:5c:5f:2b:6d: aa:84:0e:46:f0:95:fc:9d:4d:69:e5:58:74:77:d1:1b:e6:69: fa:94:ae:ec:27:50:81:4b:a4:37:c5:27:38:ec:8a:06:a2:b0: 52:23:87:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfI2dEpQk6lYpP4lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NTU0MmU0MzQtZGVjYS00ZTlkLWE1OTktZmMxNWUwZjk3OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk+gCxw32HJgZSuEyIY4pPYL0WXqeORCrIJH TAfI4kEBVm+6OlCW6LJYWKpuxr5POwDVWovrCLEkisGn0cVppGHFtIyudGUjquMx emZ64UqewOZa+8hqLGzXxp83E10sCejHETifckmltq4FA7yjDHNh///Wyr3NpeQ8 hEUSLryPVcGm0tepHBiYpf9qw+4pNqgE+MtDE5nvcvkkm2Qz9onSK9TF6gvphKPG u3DgC477aAnrOE+qW5tB5LTH4AwogPWEzNpeFLscdY/nROXhMz2mdZYxOhuN3tKO yOWNAoR7csmyoUXLStS2OoK1+aLwy+FaCAJaZ2YUdHLFXJeAMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC0HHO9LvYPCnps598q9S/toJVS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvY2QzY2I3ZGUtMjYyNS0z ODkzLWEzMjMtZDFiZWM3ZDI1OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7fQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkqFp5h5amObJDAGG67WbnReXN5cTmKDcHEMN7HA31aiAuOsY0+zt aahimQ1/c177vofgCDaavH4ldRaOJ1du0ohfuw2YEZZ9edk3kHW6Vtrjm22mfATQ SQmegmYaG8vnfJkIx22qMr4d56ckgbdvG45G+u7N/6YMZd6OGlABgRpSyx01LnaS lWFG8UvM0aVi0cGSzUljtwStJZHemZW6ObdnsPRjZDalB8j66Ru7HYYReCP9jqlF ovBzg3tLaS6qFxHCA9LKkaL1djtrdFn0TuiAujJcXyttqoQORvCV/J1NaeVYdHfR G+Zp+pSu7CdQgUukN8UnOOyKBqKwUiOHug== -----END CERTIFICATE-----Generated at Mon Nov 25 16:21:51 2024 by rpki-client on console-ams.rpki-client.org