$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa File: a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa (raw, json) Hash identifier: GhuulXwbqCp4XFA+Itv/vXq+xiJxQQMerhoLkxUbY7w= Subject key identifier: 41:80:6A:3E:F7:A3:DA:21:A2:89:CB:F0:23:17:74:B6:F0:FE:C2:1B Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F43285847B101632F660574719E304E80 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 8075 IP address blocks: 2602:fc31:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:63:2f:66:05:74:71:9e:30:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=8c596745-0c37-40b3-9587-e78626e65736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:85:46:44:a8:6c:d6:08:5d:d7:74:d8:23: fc:2d:42:e6:71:0b:5a:ba:67:5c:46:4e:a9:2f:f3: 35:76:4b:c7:1f:cd:4d:27:7c:cc:30:f0:0f:5d:c5: 56:c8:ee:f3:08:cf:8f:73:8b:ea:02:4f:61:49:e9: 5d:a2:ac:da:6e:fa:66:04:86:91:f9:a6:54:4c:a7: ee:51:af:dd:29:d0:63:ab:3a:6f:c6:b3:74:81:72: 2c:11:be:0e:4f:b5:51:80:01:b6:fa:7a:c0:9a:21: 05:db:b4:7f:fd:06:d7:ad:bc:48:1e:8f:61:d7:a1: d0:26:7f:dd:fa:08:cd:e6:7a:01:a4:a5:e7:35:f0: 49:c0:96:61:9d:a7:02:ff:5b:c3:14:d5:c7:30:6e: da:40:64:92:30:88:c8:59:25:10:a7:db:9e:f2:37: 44:99:75:6a:dd:fd:9f:c9:55:70:b3:79:28:6d:e7: 8e:85:65:52:ab:42:da:47:02:93:fb:6f:dd:7f:2c: 23:8f:35:00:1e:43:b2:0a:cd:dc:68:75:39:6a:38: 9e:2b:6b:b7:2b:d4:81:09:9b:b0:52:82:e6:eb:2e: 9c:46:a3:21:11:9c:55:74:3a:0b:39:e0:43:a2:b7: 1a:71:ab:c3:f8:40:32:ed:69:2b:6c:4b:6a:d6:e4: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:80:6A:3E:F7:A3:DA:21:A2:89:CB:F0:23:17:74:B6:F0:FE:C2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/a7b7e1b8-103e-3bb2-bc5f-89e1657fc951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc31:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9c:a3:a9:65:e7:b2:73:d9:91:47:24:17:5d:ed:b7:32:34: 8d:6d:0d:95:b5:cc:f7:3b:d8:25:58:76:d3:f9:91:18:90:94: 4d:b4:4f:92:2b:dd:5e:6b:cb:10:0a:58:02:ff:4c:f2:81:7f: 64:6d:00:c8:ff:21:23:98:49:5d:0b:30:85:46:06:64:82:9f: 1b:f7:29:c9:35:ca:4c:be:1a:a5:32:c9:45:dd:fd:ff:a1:07: 73:02:07:68:e2:b2:21:a4:0c:fa:49:2a:16:e9:46:87:32:19: cb:5f:44:09:3b:81:71:75:86:23:6b:dc:5c:11:5e:fb:95:66: b7:3a:65:1a:9c:eb:f4:b2:9b:a8:fb:70:76:2c:24:7e:9b:f8: d1:35:ca:b4:60:cd:48:8e:d8:61:4a:a1:b3:93:5c:49:24:c9: 4b:0f:ee:f4:d4:66:f2:01:19:a9:c4:c3:52:c4:31:d3:b9:80: 08:b8:06:1b:92:17:67:40:65:98:b3:8b:a0:0b:48:15:38:7d: 13:8b:3c:34:37:8c:db:20:46:92:11:96:53:93:7d:ca:18:c3: ad:43:96:e7:d3:a0:60:8b:52:f8:8b:63:0d:e3:3b:77:97:bc: 01:68:92:c4:01:30:ed:36:57:e6:b9:68:09:97:de:58:93:1c: d6:7d:9f:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEexAWMvZgV0cZ4wToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk OGM1OTY3NDUtMGMzNy00MGIzLTk1ODctZTc4NjI2ZTY1NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqteFRkSobNYIXdd02CP8LULmcQtaumdcRk6p L/M1dkvHH81NJ3zMMPAPXcVWyO7zCM+Pc4vqAk9hSeldoqzabvpmBIaR+aZUTKfu Ua/dKdBjqzpvxrN0gXIsEb4OT7VRgAG2+nrAmiEF27R//QbXrbxIHo9h16HQJn/d +gjN5noBpKXnNfBJwJZhnacC/1vDFNXHMG7aQGSSMIjIWSUQp9ue8jdEmXVq3f2f yVVws3kobeeOhWVSq0LaRwKT+2/dfywjjzUAHkOyCs3caHU5ajieK2u3K9SBCZuw UoLm6y6cRqMhEZxVdDoLOeBDorcacavD+EAy7WkrbEtq1uSSlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGAaj73o9ohoonL8CMXdLbw/sIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvYTdiN2UxYjgtMTAzZS0z YmIyLWJjNWYtODllMTY1N2ZjOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqco6ll57Jz2ZFHJBdd7bcyNI1tDZW1zPc72CVYdtP5kRiQlE20 T5Ir3V5ryxAKWAL/TPKBf2RtAMj/ISOYSV0LMIVGBmSCnxv3Kck1yky+GqUyyUXd /f+hB3MCB2jisiGkDPpJKhbpRocyGctfRAk7gXF1hiNr3FwRXvuVZrc6ZRqc6/Sy m6j7cHYsJH6b+NE1yrRgzUiO2GFKobOTXEkkyUsP7vTUZvIBGanEw1LEMdO5gAi4 BhuSF2dAZZizi6ALSBU4fROLPDQ3jNsgRpIRllOTfcoYw61DlufToGCLUviLYw3j O3eXvAFoksQBMO02V+a5aAmX3liTHNZ9n30= -----END CERTIFICATE-----Generated at Thu Nov 21 16:18:04 2024 by rpki-client on console-ams.rpki-client.org