$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa File: da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa (raw, json) Hash identifier: K2XB2vuhy0taTzgMTGhlKEgLMGoKrW1tHyG4BxjRQjw= Subject key identifier: 39:FF:2A:F8:6B:DF:7A:2F:E8:F2:78:5B:AF:F8:6D:7C:B7:13:A2:B0 Certificate issuer: /CN=d87bb806-e83b-438e-bf0b-6c487902c669 Certificate serial: 010D0C9F432858475910C2FF1678CEA6972A21F2 Authority key identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 53361 IP address blocks: 2620:d3:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:c2:ff:16:78:ce:a6:97:2a:21:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87bb806-e83b-438e-bf0b-6c487902c669 Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=ff343f63-0df9-4e88-a420-7e842015efd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:ac:27:3b:d4:22:a2:f0:b8:b6:97:a2:00: 3c:ae:e7:c1:75:68:ba:21:77:84:7f:a2:47:d8:28: e2:2e:44:77:20:80:03:89:14:a2:9c:f5:c8:1b:cb: 4a:f0:7f:94:da:a9:17:17:3b:f4:ac:bc:dc:be:92: b3:0b:e2:96:f5:c3:23:f6:37:20:b7:2e:54:5f:a1: 76:d9:a8:84:65:06:aa:92:90:b7:55:77:df:4d:92: a8:30:10:5e:68:62:1a:66:3f:ea:23:54:66:70:dd: b7:18:cc:ae:db:d5:fb:da:5b:68:fc:2b:0b:2c:41: bb:e9:eb:ba:af:e0:8f:70:0a:90:1d:4e:58:d2:5e: de:21:18:8a:a9:e8:12:43:47:c4:ea:1d:33:61:bb: ea:5a:a3:51:49:e8:f3:07:2c:65:3f:94:ec:4c:62: 87:8b:0d:0a:a2:5b:5c:53:95:4b:9d:49:6c:61:d0: b0:52:fc:aa:a1:20:7f:75:ae:63:2d:4f:de:5a:07: ce:fb:11:6c:dc:48:16:63:dc:bd:57:8e:f9:02:f8: a6:16:dc:77:30:70:18:b2:e0:61:54:95:c1:c1:a9: a8:df:9c:2b:1c:2f:2d:05:75:b1:25:5a:04:ce:19: 14:3d:d7:d8:cf:a9:cc:99:37:5e:72:7e:ce:68:40: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FF:2A:F8:6B:DF:7A:2F:E8:F2:78:5B:AF:F8:6D:7C:B7:13:A2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl X509v3 Authority Key Identifier: keyid:B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer sbgp-ipAddrBlock: critical IPv6: 2620:d3:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6e:4f:4c:09:b0:35:49:b1:a2:7c:a5:4d:73:d3:c8:4f:2f: 6e:ad:3b:7a:28:8c:a2:77:ed:c1:bd:9a:5f:cd:d2:70:27:8c: 56:52:80:d4:57:cc:64:58:a3:6d:b4:23:8e:a9:d4:cc:44:12: 74:e4:50:39:96:8a:91:15:a9:74:39:a1:c5:86:75:bf:59:fa: 09:67:0f:95:a2:1f:89:90:12:d3:ef:d8:5f:f6:e7:fa:45:4a: d9:e9:00:0c:86:cd:5c:89:b0:fb:d8:e1:f1:8f:23:60:a2:1b: cc:ac:64:48:be:92:7a:26:02:ec:52:3a:26:b7:21:b0:be:8a: 80:57:b1:df:23:c0:f7:f3:9c:09:bf:e8:8e:3e:ab:45:07:ef: b5:12:ce:00:6f:29:e1:ed:15:3a:55:5f:7a:b0:b3:48:35:59: ad:b6:b9:08:2a:9d:9d:ae:f4:75:1c:e8:2c:db:b8:d1:30:0b: 3f:1c:ba:1b:0a:c3:e7:72:30:5c:cd:db:2a:a8:9d:80:75:05: 9e:78:65:91:9d:f4:8f:11:6b:07:94:a5:a7:22:95:90:c7:92: 6f:bc:73:13:66:7d:a3:0a:74:24:89:a7:a9:59:16:81:28:1e: 90:8f:a0:0b:62:d2:b2:42:a0:e9:7c:3f:a8:b3:86:88:ed:f2: c4:ec:8a:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdZEML/FnjOppcqIfIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg3YmI4MDYtZTgzYi00MzhlLWJmMGItNmM0ODc5MDJj NjY5MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZmYzNDNmNjMtMGRmOS00ZTg4LWE0MjAtN2U4NDIwMTVlZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3isJzvUIqLwuLaXogA8rufBdWi6IXeEf6JH 2CjiLkR3IIADiRSinPXIG8tK8H+U2qkXFzv0rLzcvpKzC+KW9cMj9jcgty5UX6F2 2aiEZQaqkpC3VXffTZKoMBBeaGIaZj/qI1RmcN23GMyu29X72lto/CsLLEG76eu6 r+CPcAqQHU5Y0l7eIRiKqegSQ0fE6h0zYbvqWqNRSejzByxlP5TsTGKHiw0Koltc U5VLnUlsYdCwUvyqoSB/da5jLU/eWgfO+xFs3EgWY9y9V475AvimFtx3MHAYsuBh VJXBwamo35wrHC8tBXWxJVoEzhkUPdfYz6nMmTdecn7OaEDDRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDn/Kvhr33ov6PJ4W6/4bXy3E6KwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kODdi YjgwNi1lODNiLTQzOGUtYmYwYi02YzQ4NzkwMmM2NjkvZGE1ZjgyMDYtN2RjZi0z ZWZmLWEyZjYtZjM0OWExN2VlNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDg3YmI4MDYtZTgzYi00MzhlLWJm MGItNmM0ODc5MDJjNjY5L2Q4N2JiODA2LWU4M2ItNDM4ZS1iZjBiLTZjNDg3OTAy YzY2OS5jcmwwHwYDVR0jBBgwFoAUtp0VIeJn8ziJKeODVRLhzRpMn1YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kODdiYjgwNi1lODNiLTQzOGUtYmYwYi02YzQ4 NzkwMmM2NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA00AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJRuT0wJsDVJsaJ8pU1z08hPL26tO3oojKJ37cG9ml/N0nAnjFZS gNRXzGRYo220I46p1MxEEnTkUDmWipEVqXQ5ocWGdb9Z+glnD5WiH4mQEtPv2F/2 5/pFStnpAAyGzVyJsPvY4fGPI2CiG8ysZEi+knomAuxSOia3IbC+ioBXsd8jwPfz nAm/6I4+q0UH77USzgBvKeHtFTpVX3qws0g1Wa22uQgqnZ2u9HUc6CzbuNEwCz8c uhsKw+dyMFzN2yqonYB1BZ54ZZGd9I8RaweUpacilZDHkm+8cxNmfaMKdCSJp6lZ FoEoHpCPoAti0rJCoOl8P6izhojt8sTsiso= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:22 2024 by rpki-client on console-ams.rpki-client.org