$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/01b005ad-afcb-33ae-b312-fd75fea79d2e.roa File: 01b005ad-afcb-33ae-b312-fd75fea79d2e.roa (raw, json) Hash identifier: lVcFME/w2B1eA9AM5ZHGYUAVUbDLIhd7WUWUcDmwyIg= Subject key identifier: DA:D3:8E:F0:E8:0B:DC:07:5E:F1:F6:AF:C1:63:10:31:DB:65:62:89 Certificate issuer: /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Certificate serial: 010D0C9F432858476C9DB583BBACEF9306DF5300 Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/01b005ad-afcb-33ae-b312-fd75fea79d2e.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 6528 IP address blocks: 2607:cd80::/36 maxlen: 36 2607:cd80:2000::/36 maxlen: 36 2607:cd80:3000::/36 maxlen: 36 2607:cd80:4000::/36 maxlen: 36 2607:cd80:6000::/36 maxlen: 36 2607:cd80:a000::/36 maxlen: 36 2607:cd80:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b5:83:bb:ac:ef:93:06:df:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=8f24c5d2-81d0-443f-abca-15505af30c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:06:cc:68:50:96:fb:d1:e3:d2:2a:cd:03: 50:c5:14:45:80:16:f3:6a:79:91:91:f9:a8:bc:0f: d3:42:18:d1:6b:1a:92:8f:34:3e:6f:0f:07:17:e3: 77:d7:a0:1c:fc:db:2e:39:e8:7e:f9:43:b5:1a:78: ea:ea:76:b5:b0:c4:ac:10:17:61:bc:00:52:99:09: 48:14:66:66:26:69:31:a7:4f:7b:c1:13:69:d6:15: e7:81:3f:b4:2f:24:12:dc:5f:64:19:15:2c:e4:de: 84:6f:81:d8:c5:84:ef:b2:09:fb:d1:47:76:c9:55: 80:93:d4:b8:c2:ba:75:b2:1c:19:69:66:19:34:3c: 4b:af:cd:d0:90:cc:93:e7:98:c8:f3:aa:59:06:23: 8b:e1:61:0a:79:99:7c:ef:5b:64:01:de:1c:46:65: e4:c2:fc:c8:4f:34:61:28:ac:fa:e4:f1:62:71:ad: 97:b4:a3:5d:f3:c9:ad:e6:0e:f3:e4:d4:2e:4d:1d: 34:18:54:45:3a:cf:76:dc:44:00:e1:fa:d0:a5:e1: 29:03:9f:6e:7c:d8:8e:31:c8:20:dc:76:fd:d6:cd: 74:b3:9a:19:4c:c4:0d:20:1b:cc:36:92:4a:c4:01: 29:63:88:a1:35:88:ab:c2:28:d6:2c:bf:9c:3e:99: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D3:8E:F0:E8:0B:DC:07:5E:F1:F6:AF:C1:63:10:31:DB:65:62:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/01b005ad-afcb-33ae-b312-fd75fea79d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl X509v3 Authority Key Identifier: keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer sbgp-ipAddrBlock: critical IPv6: 2607:cd80::/36 2607:cd80:2000::-2607:cd80:4fff:ffff:ffff:ffff:ffff:ffff 2607:cd80:6000::/36 2607:cd80:a000::/36 2607:cd80:c000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:06:85:68:bb:10:28:7e:8c:40:85:2b:dc:b4:9c:92:ff:30: 18:ec:ba:1f:11:40:9e:82:29:b5:10:76:68:c4:9b:ea:9e:94: 07:7c:61:d5:33:16:17:db:31:38:0b:12:33:89:26:55:ce:c9: e2:14:6b:08:3f:64:0c:2c:42:34:c4:78:a2:50:c8:50:16:fa: 63:d6:7b:7d:d6:4b:82:61:df:0e:17:72:5b:22:a8:04:53:fc: 53:f6:73:2b:0d:e6:1e:dd:8f:e9:e7:d6:5a:db:6b:d4:41:37: 9a:ab:6f:08:29:3c:89:9b:da:33:f1:a8:34:a3:31:69:91:25: 47:44:97:41:d2:35:0a:4d:81:af:3d:6a:73:24:8c:ee:f6:b8: 9a:d7:88:e5:5d:63:25:88:48:48:2a:6e:76:45:10:09:e2:03: d2:ae:9d:b1:c4:12:be:0e:a8:5e:05:e0:fe:84:52:36:3f:a1: f1:88:1f:4a:f2:76:a1:ec:fd:32:9e:a9:14:98:e2:d0:18:bf: 12:d7:33:41:64:d4:39:91:ff:d7:17:1e:fd:ec:40:35:ab:e8: 5e:46:a9:42:a3:dd:93:0f:80:5c:b2:77:1d:49:17:6f:b6:22: 25:a3:85:22:81:b0:5e:41:1f:e1:a7:46:c8:0f:10:da:49:b3: fd:7d:01:c3 -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEdsnbWDu6zvkwbfUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlY2NhNmUtZTRhZi00YTU2LTg5MWQtYzJlMzA1MWEx YmMyMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk OGYyNGM1ZDItODFkMC00NDNmLWFiY2EtMTU1MDVhZjMwYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkasGzGhQlvvR49IqzQNQxRRFgBbzanmRkfmo vA/TQhjRaxqSjzQ+bw8HF+N316Ac/NsuOeh++UO1Gnjq6na1sMSsEBdhvABSmQlI FGZmJmkxp097wRNp1hXngT+0LyQS3F9kGRUs5N6Eb4HYxYTvsgn70Ud2yVWAk9S4 wrp1shwZaWYZNDxLr83QkMyT55jI86pZBiOL4WEKeZl871tkAd4cRmXkwvzITzRh KKz65PFica2XtKNd88mt5g7z5NQuTR00GFRFOs923EQA4frQpeEpA59ufNiOMcgg 3Hb91s10s5oZTMQNIBvMNpJKxAEpY4ihNYirwijWLL+cPpkxpQIDAQABo4IDgTCC A30wHQYDVR0OBBYEFNrTjvDoC9wHXvH2r8FjEDHbZWKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OGVj Y2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUzMDUxYTFiYzIvMDFiMDA1YWQtYWZjYi0z M2FlLWIzMTItZmQ3NWZlYTc5ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNThlY2NhNmUtZTRhZi00YTU2LTg5 MWQtYzJlMzA1MWExYmMyLzU4ZWNjYTZlLWU0YWYtNGE1Ni04OTFkLWMyZTMwNTFh MWJjMi5jcmwwHwYDVR0jBBgwFoAUUuGuIUtwcT5isDYp+pRXmy2QESwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OGVjY2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUz MDUxYTFiYzIuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAAjAyAwYEJgfNgAAw EAMGBSYHzYAgAwYEJgfNgEADBgQmB82AYAMGBCYHzYCgAwYEJgfNgMAwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAAAaFaLsQKH6MQIUr3LSckv8wGOy6HxFAnoIptRB2aMSb6p6UB3xh1TMWF9sx OAsSM4kmVc7J4hRrCD9kDCxCNMR4olDIUBb6Y9Z7fdZLgmHfDhdyWyKoBFP8U/Zz Kw3mHt2P6efWWttr1EE3mqtvCCk8iZvaM/GoNKMxaZElR0SXQdI1Ck2Brz1qcySM 7va4mteI5V1jJYhISCpudkUQCeID0q6dscQSvg6oXgXg/oRSNj+h8YgfSvJ2oez9 Mp6pFJji0Bi/EtczQWTUOZH/1xce/exANavoXkapQqPdkw+AXLJ3HUkXb7YiJaOF IoGwXkEf4adGyA8Q2kmz/X0Bww== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:04 2024 by rpki-client on console-ams.rpki-client.org