$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa File: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (raw, json) Hash identifier: gsF0FSwPjQphWeN9LoJ+nxeXCITretdr/lMaqN9dhrA= Subject key identifier: B2:A6:2D:AD:34:55:D5:4F:43:3B:31:B2:74:1D:62:5A:78:69:11:90 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F432858474F4B793E8FCB8C40F8D41C80 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 8075 IP address blocks: 2606:e540:c00::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:79:3e:8f:cb:8c:40:f8:d4:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=d6f228f6-b8a8-42af-bcb6-8ba7a46d29c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:da:d7:fa:e3:60:11:bf:af:af:95:75:a4: 74:20:bd:bd:a4:5b:2c:e1:54:14:a9:5c:c1:9c:f3: 36:c5:f9:05:7d:8d:09:af:06:ba:52:64:c6:9f:59: e7:b6:51:84:eb:e9:7a:f1:bf:f5:df:15:d6:13:34: cc:a4:a8:ee:95:f0:14:07:4a:c8:49:7a:4d:4e:c0: be:e9:69:6e:9c:36:50:03:4d:f4:95:5a:37:7a:82: 22:2a:1f:7c:29:91:4a:ed:1c:03:85:ef:86:91:11: b7:37:b4:64:97:62:33:2b:85:a6:bf:ad:85:d0:de: 8e:ae:95:75:3e:77:ad:da:18:3f:cb:1e:bc:0f:17: 6b:f7:e9:50:8d:80:83:ed:45:10:81:b6:a8:f3:3c: c4:b9:61:c9:31:c3:5f:e5:4b:03:b6:7d:0e:9e:8d: a0:d0:e7:9a:17:99:db:48:05:07:7e:34:f9:37:1f: 83:43:8a:ea:56:30:8b:84:85:85:7a:3d:ba:3d:74: 26:d3:9e:cd:7f:ac:a1:fc:a0:71:39:7d:43:56:47: 2b:f0:7d:b5:b7:03:2f:e0:cb:7e:65:b3:39:0d:eb: 5e:2f:8c:d5:49:c1:d2:27:7d:0b:f8:ec:c4:1e:b7: 16:13:37:cb:b9:98:fc:ca:69:28:80:38:ea:36:33: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A6:2D:AD:34:55:D5:4F:43:3B:31:B2:74:1D:62:5A:78:69:11:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:9a:fd:3f:e6:5f:de:3f:57:8e:5a:67:02:5b:97:61:d7:a0: 44:c3:fb:c2:d0:74:30:71:93:e5:a6:8a:09:6b:8d:ca:46:65: ad:72:bf:30:e5:a0:40:61:e1:49:3f:c2:7b:c9:7b:9e:b1:89: 07:fa:b2:f4:18:d3:4d:a7:1b:0c:cb:a2:ba:bb:00:7c:57:e2: 4f:36:9f:c7:b5:56:60:ad:9b:2a:cb:77:13:02:bf:50:4b:bb: 04:6c:ab:a3:8c:c9:cb:71:3c:e6:2b:f6:88:02:e5:fc:81:cd: 48:7b:e6:82:ff:60:58:05:c8:fc:85:ae:7f:c5:8f:15:29:3a: 06:58:df:84:2b:2a:87:01:ca:23:00:db:cd:13:26:38:2a:e0: 0e:9e:02:73:06:6a:8d:44:fc:a2:a8:15:cb:a1:94:40:00:51: fb:c2:04:4c:4d:b4:f6:f6:15:0c:e3:1c:36:fb:81:cf:68:23: 86:86:b0:9a:33:f8:83:50:c0:fe:c6:23:dd:fe:4f:15:92:21: 39:b9:41:c5:27:ab:fa:82:37:40:ef:dc:c7:73:46:71:23:8f: 35:b0:1a:57:ab:3b:3a:16:f6:7c:ce:08:35:51:f2:93:09:8f: cd:68:7a:6a:04:29:f0:dc:17:2b:06:05:10:12:98:d1:51:4c: 60:61:2b:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdPS3k+j8uMQPjUHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDZmMjI4ZjYtYjhhOC00MmFmLWJjYjYtOGJhN2E0NmQyOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ura1/rjYBG/r6+VdaR0IL29pFss4VQUqVzB nPM2xfkFfY0Jrwa6UmTGn1nntlGE6+l68b/13xXWEzTMpKjulfAUB0rISXpNTsC+ 6WlunDZQA030lVo3eoIiKh98KZFK7RwDhe+GkRG3N7Rkl2IzK4Wmv62F0N6OrpV1 Pnet2hg/yx68Dxdr9+lQjYCD7UUQgbao8zzEuWHJMcNf5UsDtn0Ono2g0OeaF5nb SAUHfjT5Nx+DQ4rqVjCLhIWFej26PXQm057Nf6yh/KBxOX1DVkcr8H21twMv4Mt+ ZbM5DeteL4zVScHSJ30L+OzEHrcWEzfLuZj8ymkogDjqNjOYqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLKmLa00VdVPQzsxsnQdYlp4aRGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvMzRjZTFlMjItZDgwYi0z Mzk0LTk3NGItZWQ1ZTJiYThjNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABSa/T/mX94/V45aZwJbl2HXoETD+8LQdDBxk+WmiglrjcpGZa1y vzDloEBh4Uk/wnvJe56xiQf6svQY002nGwzLorq7AHxX4k82n8e1VmCtmyrLdxMC v1BLuwRsq6OMyctxPOYr9ogC5fyBzUh75oL/YFgFyPyFrn/FjxUpOgZY34QrKocB yiMA280TJjgq4A6eAnMGao1E/KKoFcuhlEAAUfvCBExNtPb2FQzjHDb7gc9oI4aG sJoz+INQwP7GI93+TxWSITm5QcUnq/qCN0Dv3MdzRnEjjzWwGlerOzoW9nzOCDVR 8pMJj81oemoEKfDcFysGBRASmNFRTGBhKxk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:05 2024 by rpki-client on console-fra.rpki-client.org