$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa File: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json) Hash identifier: z8cbMgZIrAYkzvezosx2It65rd0hfm6U+QbX2OaDeZc= Subject key identifier: 3D:19:1A:3F:A2:C1:62:AB:40:BE:A2:EF:91:80:BF:70:2E:D9:34:9B Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F432858474B1B5465EA17FF22E85D5880 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 0 IP address blocks: 2001:504:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:54:65:ea:17:ff:22:e8:5d:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=ae39db5c-547a-4432-9a67-7bb562e80bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:72:8c:cc:2d:4b:d6:dc:cf:ff:8b:a6:0c: 88:92:22:4c:d9:cc:9e:99:ad:ea:fc:d5:11:14:0f: f0:51:ee:3e:ce:15:21:a2:30:3e:48:69:af:c1:2e: 1d:22:46:ab:8d:84:00:8f:df:d1:f4:e7:3a:20:dd: c9:97:d7:40:f2:7b:c4:92:26:17:d5:a2:14:0f:11: ff:b5:01:be:d4:37:4b:32:90:90:79:d7:c6:4c:77: b0:8e:f5:61:ab:7d:46:12:51:68:c4:db:07:54:02: 2d:3b:e9:48:fe:9c:7b:f0:a8:02:48:53:8f:68:72: 89:5f:93:2d:64:b8:94:5a:1a:ad:b8:4c:44:a7:6c: 44:01:7a:59:90:85:96:df:72:b4:17:0e:25:3f:95: 84:dc:ac:9b:b4:64:13:99:77:20:6b:cc:1f:97:be: 36:64:07:e2:80:df:e5:b5:89:31:4e:bf:41:40:d3: 13:ab:a3:f0:a4:2e:83:6c:8f:58:2a:03:a7:cd:e7: 1a:fc:19:40:c7:ac:19:1f:e3:46:47:77:5b:3d:43: 85:2a:ab:4e:59:37:fe:e1:c8:79:37:03:f5:58:7d: 94:ac:72:c9:51:bc:70:a3:1c:7f:de:cb:21:96:d5: a7:fa:47:17:08:f7:cd:9b:7c:b8:76:89:d8:3f:25: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:19:1A:3F:A2:C1:62:AB:40:BE:A2:EF:91:80:BF:70:2E:D9:34:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b1:ee:ef:d2:18:4f:ff:7e:9d:50:98:3b:41:8b:5a:ec:d4: 02:4a:6a:fa:13:8e:0c:4c:e5:db:93:9f:b1:37:d7:0e:77:d0: 95:2f:8e:69:04:02:00:f0:e2:93:b8:f6:fb:8c:c2:32:38:41: a6:42:a2:ef:63:53:2b:4f:3e:ad:9e:51:45:e6:20:20:3f:82: ed:f7:37:5d:0e:82:0c:a3:1b:1e:02:8a:00:ad:52:bc:08:42: 01:50:70:4a:a7:ce:f7:e3:6d:c8:3a:c1:00:09:08:33:4a:dd: d9:4f:c3:df:b3:b5:06:ec:b8:ff:c3:94:db:13:dd:90:0a:21: 96:a5:d1:7b:e2:80:fc:82:d2:66:08:0c:d3:87:3c:22:2d:b6: 3c:d7:5b:e3:47:62:0a:4c:d0:98:97:a7:3e:d5:aa:04:22:51: af:ba:ca:2d:4f:2e:ad:bb:9b:08:dc:fb:32:31:84:85:29:de: 35:e2:0c:d2:d5:41:71:fc:98:36:c7:db:1c:2a:70:03:23:ec: 9e:92:74:61:9d:b4:34:a5:9b:20:7c:73:fe:65:42:1e:c5:83: da:c2:af:d8:04:f3:e3:af:00:36:19:78:7d:3c:68:b7:fc:2b: 2f:c2:74:b8:76:e6:07:9f:6d:3b:8d:95:90:6e:8d:06:01:37: da:70:3e:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdLG1Rl6hf/IuhdWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk YWUzOWRiNWMtNTQ3YS00NDMyLTlhNjctN2JiNTYyZTgwYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDRyjMwtS9bcz/+LpgyIkiJM2cyema3q/NUR FA/wUe4+zhUhojA+SGmvwS4dIkarjYQAj9/R9Oc6IN3Jl9dA8nvEkiYX1aIUDxH/ tQG+1DdLMpCQedfGTHewjvVhq31GElFoxNsHVAItO+lI/px78KgCSFOPaHKJX5Mt ZLiUWhqtuExEp2xEAXpZkIWW33K0Fw4lP5WE3KybtGQTmXcga8wfl742ZAfigN/l tYkxTr9BQNMTq6PwpC6DbI9YKgOnzeca/BlAx6wZH+NGR3dbPUOFKqtOWTf+4ch5 NwP1WH2UrHLJUbxwoxx/3sshltWn+kcXCPfNm3y4donYPyUSoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0ZGj+iwWKrQL6i75GAv3Au2TSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmExMWZmMDUtMGQxYy0z YmU4LTkzNjEtMmEwOTE0ODJjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICx7u/SGE//fp1QmDtBi1rs1AJKavoTjgxM5duTn7E31w530JUv jmkEAgDw4pO49vuMwjI4QaZCou9jUytPPq2eUUXmICA/gu33N10OggyjGx4CigCt UrwIQgFQcEqnzvfjbcg6wQAJCDNK3dlPw9+ztQbsuP/DlNsT3ZAKIZal0XvigPyC 0mYIDNOHPCIttjzXW+NHYgpM0JiXpz7VqgQiUa+6yi1PLq27mwjc+zIxhIUp3jXi DNLVQXH8mDbH2xwqcAMj7J6SdGGdtDSlmyB8c/5lQh7Fg9rCr9gE8+OvADYZeH08 aLf8Ky/CdLh25gefbTuNlZBujQYBN9pwPrQ= -----END CERTIFICATE-----Generated at Thu Nov 21 15:34:57 2024 by rpki-client on console-fra.rpki-client.org