$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa File: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json) Hash identifier: l89+fuvyXVMdgWnSGGvlmn73sRWT0uGdqjeNsavvmOw= Subject key identifier: D2:C5:15:25:D5:97:BF:BB:24:0E:DC:34:BA:ED:85:D1:11:11:38:90 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F432858474B1B543B188B0552B4B20F00 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 0 IP address blocks: 2001:504:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:54:3b:18:8b:05:52:b4:b2:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=792d666f-a7cc-4188-a894-529b901afa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:a8:e6:83:1d:20:69:f5:33:b3:de:c8:6b: 43:ba:9c:63:36:28:b9:f3:84:80:d7:6e:09:a6:48: f0:7b:bb:4c:2d:fe:48:f8:12:7c:a2:37:f6:8c:50: 22:17:aa:b0:9b:6c:39:d0:7e:4b:48:cd:75:e0:23: 6c:0c:51:60:16:1b:54:06:31:85:0e:08:e7:0f:6e: 7a:f1:18:ca:da:cc:4d:ca:cf:32:61:32:4a:96:a0: 8e:b1:a8:d3:79:67:17:43:33:a0:f4:56:a8:88:95: 4f:e0:e0:54:43:c5:9c:5c:a3:6f:4d:48:67:12:eb: 81:b0:ec:7e:ab:4c:82:a5:9b:a7:23:c9:ff:d5:ba: f4:f1:3b:a0:aa:43:a6:61:ee:37:d1:d6:0b:49:df: ab:70:ad:ee:46:ff:9a:7b:51:3d:2d:c2:98:39:b8: 28:d2:8e:9b:32:01:1c:62:5f:be:71:90:a6:4e:d5: 87:5b:fc:63:4f:0b:17:78:88:8a:db:90:8d:e1:69: 73:65:10:c7:e3:ac:a6:45:bd:a1:e1:29:92:94:97: e1:61:23:1c:89:e3:83:39:26:bf:54:0f:5b:4e:9e: 7a:33:19:6c:c2:ca:4b:cb:78:fe:9b:bf:22:fa:b3: 99:8c:38:77:88:44:e5:cd:7a:37:1e:30:ad:9b:23: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C5:15:25:D5:97:BF:BB:24:0E:DC:34:BA:ED:85:D1:11:11:38:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3c:8a:f0:91:f7:f5:b8:0e:19:bb:f5:0d:f8:09:eb:37:1f: b4:49:7b:7b:6c:11:a2:c8:b0:a6:59:e3:c7:ef:41:2f:56:22: 5f:cd:6b:f5:1c:ce:d0:bc:4f:7e:78:b5:b1:db:c2:40:cc:26: e6:b0:ed:ba:e6:8b:3e:37:9a:5c:bd:a6:b0:fb:d7:ef:73:7e: cd:c3:4b:54:6b:0c:81:25:01:c9:3e:89:b4:b0:24:44:36:64: fd:99:29:99:a9:90:b4:9b:3d:2c:ff:41:3a:85:b4:3a:d0:0a: b3:68:ba:07:90:85:34:55:09:75:8c:54:06:e3:74:00:a9:66: 00:a7:fb:68:d3:44:47:0f:4a:76:b8:12:b0:65:b4:b9:a8:03: 3a:08:91:11:5d:f5:c2:d9:f0:79:d0:96:06:ce:dc:6a:d3:0b: 51:31:69:45:7a:4a:46:3d:4a:a0:64:8b:89:05:9d:6e:49:e1: 4b:35:fc:db:77:0f:b0:8e:b7:9d:83:65:5e:aa:bc:78:33:89: 93:f5:61:99:c5:26:da:98:fc:67:7d:92:1d:11:bf:a7:c6:42: e4:e3:57:0e:e4:6d:3a:ec:8f:e3:55:c4:67:e2:5f:40:41:85: 40:85:cb:5a:dd:a0:a2:0d:40:3c:3d:a0:8d:a7:2b:86:06:6b: 27:a4:58:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdLG1Q7GIsFUrSyDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk NzkyZDY2NmYtYTdjYy00MTg4LWE4OTQtNTI5YjkwMWFmYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE2o5oMdIGn1M7PeyGtDupxjNii584SA124J pkjwe7tMLf5I+BJ8ojf2jFAiF6qwm2w50H5LSM114CNsDFFgFhtUBjGFDgjnD256 8RjK2sxNys8yYTJKlqCOsajTeWcXQzOg9FaoiJVP4OBUQ8WcXKNvTUhnEuuBsOx+ q0yCpZunI8n/1br08TugqkOmYe430dYLSd+rcK3uRv+ae1E9LcKYObgo0o6bMgEc Yl++cZCmTtWHW/xjTwsXeIiK25CN4WlzZRDH46ymRb2h4SmSlJfhYSMcieODOSa/ VA9bTp56MxlswspLy3j+m78i+rOZjDh3iETlzXo3HjCtmyMHiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNLFFSXVl7+7JA7cNLrthdERETiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhNzU4NWYtZDUxYy0z MGRhLWEwZmItMzZkOTQ2MzY1NGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJk8ivCR9/W4Dhm79Q34Ces3H7RJe3tsEaLIsKZZ48fvQS9WIl/N a/UcztC8T354tbHbwkDMJuaw7brmiz43mly9prD71+9zfs3DS1RrDIElAck+ibSw JEQ2ZP2ZKZmpkLSbPSz/QTqFtDrQCrNougeQhTRVCXWMVAbjdACpZgCn+2jTREcP Sna4ErBltLmoAzoIkRFd9cLZ8HnQlgbO3GrTC1ExaUV6SkY9SqBki4kFnW5J4Us1 /Nt3D7COt52DZV6qvHgziZP1YZnFJtqY/Gd9kh0Rv6fGQuTjVw7kbTrsj+NVxGfi X0BBhUCFy1rdoKINQDw9oI2nK4YGayekWBQ= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:24 2024 by rpki-client on console-ams.rpki-client.org