$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa File: 22f1cb91-8ecf-3596-adde-62641e5c004e.roa (raw, json) Hash identifier: s1Zvz+O0FfYDwZ5MFjWuMlShoSy3D7hjiSURL8XrbuA= Subject key identifier: B5:BF:1C:22:08:BE:10:00:52:88:87:68:CD:23:00:97:12:BA:B4:89 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F43285847643B751E5DA741251FCCEA00 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 395403 IP address blocks: 2620:4d:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:75:1e:5d:a7:41:25:1f:cc:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=6ec87de5-71c1-40b2-aade-0c8ddc4951e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:4e:ff:f3:23:ec:e5:0f:c3:9a:52:7e:5e: df:d3:f1:2f:70:61:b6:6a:e9:ab:bb:7a:0e:a1:48: a7:9d:59:7f:a8:5e:aa:bb:86:24:b0:6a:30:d6:ae: 75:50:be:2d:17:75:fa:ef:a0:d2:c8:9e:7b:7b:c3: c1:85:67:c6:38:b2:6b:87:42:3d:44:c9:0c:8f:45: 4e:1c:78:01:b1:fb:9f:c7:0e:f1:eb:2d:db:00:fd: 0c:6b:ab:73:8f:e0:b3:63:51:66:50:32:61:1a:fa: db:c0:40:1b:6a:de:5c:a7:1f:5c:72:a8:f2:74:e8: de:a0:77:7a:fc:c9:64:d1:b6:b5:08:11:5d:aa:c8: 36:02:66:e3:0d:11:86:16:69:8a:25:e3:5c:4b:a3: 3c:5f:ef:d3:dd:7e:20:77:0e:32:75:42:71:9d:fb: 33:64:6c:3b:3d:61:a8:b9:b6:b8:4d:5a:97:57:15: ff:9d:42:7d:11:0b:12:e4:20:fa:cf:02:2a:87:11: 78:b9:de:b0:35:f6:d8:b3:2b:7b:13:5f:dc:69:5a: ed:6c:46:45:ad:23:03:65:80:30:21:99:2a:8e:7f: 55:ed:8f:8c:24:b1:16:27:bc:56:40:dd:81:26:14: ca:96:cb:b9:03:78:2f:5c:59:d7:93:5e:81:a1:1e: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BF:1C:22:08:BE:10:00:52:88:87:68:CD:23:00:97:12:BA:B4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/22f1cb91-8ecf-3596-adde-62641e5c004e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4090::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:df:a3:da:1a:b9:a7:32:ba:e8:c0:c8:f7:18:36:25:45:f4: 3f:58:47:8a:a7:e2:9f:b8:18:32:d6:df:ed:b6:d9:93:91:97: 43:b2:2a:17:df:ee:f4:18:68:bb:3d:ce:e3:29:11:71:5a:0b: 49:91:49:23:33:da:02:02:8c:54:11:1d:51:eb:97:aa:59:72: a1:ad:da:ed:ae:4f:b3:33:dd:5f:79:27:ff:c2:25:fd:01:64: 3a:17:51:96:8e:2f:7c:7d:24:cc:41:f3:33:73:2c:c6:fd:2b: c0:92:7f:18:88:27:cf:13:b4:03:60:2a:ca:b1:eb:01:4c:e9: 42:ea:34:f5:80:d4:b9:1c:61:4a:47:a6:a5:10:d8:3b:4e:75: ad:f8:43:0e:4d:eb:da:49:c7:6a:08:6d:f5:60:17:04:d6:79: b5:9e:af:cc:b8:d6:87:d8:87:c7:c5:1f:f9:13:5f:95:7d:17: 07:54:c2:45:da:16:74:0c:b3:38:dd:82:f2:a5:1d:0f:d4:37: fc:97:d4:ac:c9:9f:82:20:59:b5:10:97:e7:e7:d7:d1:e4:b9: cc:6e:9a:0a:56:b5:c6:ae:f3:73:df:cf:81:23:ee:81:43:8b: e9:e9:7f:1a:a8:79:a2:c9:16:09:a0:85:83:31:e5:e6:46:ce: 73:db:43:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdkO3UeXadBJR/M6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk NmVjODdkZTUtNzFjMS00MGIyLWFhZGUtMGM4ZGRjNDk1MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnslO//Mj7OUPw5pSfl7f0/EvcGG2aumru3oO oUinnVl/qF6qu4YksGow1q51UL4tF3X676DSyJ57e8PBhWfGOLJrh0I9RMkMj0VO HHgBsfufxw7x6y3bAP0Ma6tzj+CzY1FmUDJhGvrbwEAbat5cpx9ccqjydOjeoHd6 /Mlk0ba1CBFdqsg2AmbjDRGGFmmKJeNcS6M8X+/T3X4gdw4ydUJxnfszZGw7PWGo uba4TVqXVxX/nUJ9EQsS5CD6zwIqhxF4ud6wNfbYsyt7E1/caVrtbEZFrSMDZYAw IZkqjn9V7Y+MJLEWJ7xWQN2BJhTKlsu5A3gvXFnXk16BoR7GkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLW/HCIIvhAAUoiHaM0jAJcSurSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMjJmMWNiOTEtOGVjZi0z NTk2LWFkZGUtNjI2NDFlNWMwMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPfo9oauacyuujAyPcYNiVF9D9YR4qn4p+4GDLW3+222ZORl0Oy Khff7vQYaLs9zuMpEXFaC0mRSSMz2gICjFQRHVHrl6pZcqGt2u2uT7Mz3V95J//C Jf0BZDoXUZaOL3x9JMxB8zNzLMb9K8CSfxiIJ88TtANgKsqx6wFM6ULqNPWA1Lkc YUpHpqUQ2DtOda34Qw5N69pJx2oIbfVgFwTWebWer8y41ofYh8fFH/kTX5V9FwdU wkXaFnQMszjdgvKlHQ/UN/yX1KzJn4IgWbUQl+fn19HkucxumgpWtcau83Pfz4Ej 7oFDi+npfxqoeaLJFgmghYMx5eZGznPbQ3Q= -----END CERTIFICATE-----Generated at Mon Nov 25 16:00:50 2024 by rpki-client on console-fra.rpki-client.org