$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa File: 643dea32-ad94-36d9-a6c5-90366af478b2.roa (raw, json) Hash identifier: PAEkzskCJx3KxD8YUWcou2WoNwMV6iXd4iQmOewx05s= Subject key identifier: 52:4A:03:09:1A:C7:08:16:7E:54:75:88:68:56:3F:DB:49:D9:42:B2 Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584795168B741E30094A15899D80 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa Signing time: Fri 18 Oct 2024 13:00:41 +0000 ROA not before: Fri 18 Oct 2024 13:00:41 +0000 ROA not after: Thu 16 Jan 2025 14:00:41 +0000 asID: 40249 IP address blocks: 2602:fb78:10::/44 maxlen: 48 2602:fb78:20::/44 maxlen: 48 2602:fb78:30::/44 maxlen: 48 2602:fb78:40::/44 maxlen: 48 2602:fb78:50::/44 maxlen: 48 2602:fb78:60::/44 maxlen: 48 2602:fb78:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:95:16:8b:74:1e:30:09:4a:15:89:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Oct 18 13:00:41 2024 GMT Not After : Jan 16 14:00:41 2025 GMT Subject: CN=c1d92ec5-3fbd-4f6c-8e94-a6aba4c3fe02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:99:e3:4b:68:e7:3a:25:56:60:7b:e9:3c:c9: 80:af:50:b8:57:48:a4:6a:e5:2c:eb:b9:f4:81:64: 2c:3e:e6:54:8c:71:c7:ca:5a:a6:10:62:be:ab:ff: c4:97:e8:0d:41:72:1f:14:27:4d:f2:97:40:2b:22: 82:0f:1b:51:97:d4:0b:a4:46:f7:26:88:47:1b:3e: 28:e5:0d:08:85:70:88:c0:0c:5d:f6:04:ff:fb:85: 72:bf:80:2b:23:d5:b6:b4:79:db:18:57:78:03:3a: 11:98:ab:97:07:ec:cf:7a:f1:d0:5a:12:45:a3:f9: 9f:6a:93:9d:13:b9:73:43:ac:92:dd:d4:40:73:55: 5b:6a:a6:81:cf:70:a0:c0:bb:e4:91:62:1d:b0:b6: 7b:73:4d:f5:3a:2a:66:33:e7:08:1a:43:68:f0:9f: 17:f1:99:4a:f8:12:0d:23:b8:1c:87:99:78:29:cc: 5b:dc:1f:7f:b6:08:4d:4e:82:32:04:84:1a:3e:1c: 94:a9:80:d8:21:ef:b7:4d:b7:f6:a0:44:15:98:5a: 65:b5:87:15:06:95:71:37:12:06:61:85:c4:66:a0: b0:1c:c5:dc:b9:87:35:97:a7:9d:38:1e:d2:91:0f: 17:68:dc:89:43:d3:61:05:bf:af:d3:43:b5:07:e9: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4A:03:09:1A:C7:08:16:7E:54:75:88:68:56:3F:DB:49:D9:42:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/643dea32-ad94-36d9-a6c5-90366af478b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb78:10::-2602:fb78:7f:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e0:c0:b2:b5:71:d4:cd:84:09:15:34:27:0b:6e:a8:03:84: 1c:16:a6:6d:7a:67:32:50:44:d0:22:e9:b4:71:4f:dc:2b:a7: 38:7b:95:38:23:24:25:c9:f3:cf:96:88:43:91:78:6c:e1:99: b2:86:18:05:32:d5:4a:07:66:c8:4a:5a:9c:e7:ce:1c:8e:40: bc:e8:98:27:a3:f4:09:2a:8e:95:4a:5d:60:e6:ad:c5:36:f8: 83:db:a0:26:91:1b:fc:c6:15:d9:92:8f:9f:9c:88:fa:a9:c8: fe:92:e3:69:7a:d2:91:b0:ba:89:57:51:97:8b:f0:e8:5a:4b: cc:3e:5a:1f:65:50:b3:5d:1e:95:7c:5a:df:49:35:d6:a8:f9: aa:e5:fc:67:a2:7a:f8:d8:35:d3:42:9c:9f:41:d6:30:b5:ca: b9:df:f6:7b:2c:e7:4e:02:c7:c0:ac:22:74:87:34:fe:25:7c: 3b:1b:ec:50:22:88:d4:86:65:88:82:fe:95:99:1e:d3:1c:1d: e3:5d:38:20:c9:df:e7:9d:6a:14:c5:c4:2c:8f:80:96:1d:a3: 64:91:5a:a3:ba:1c:43:48:50:5a:27:b1:ba:b3:db:01:20:a6: 0d:99:9e:35:09:e2:ec:7d:4e:b0:71:df:51:33:26:ea:5a:c1: 0e:b5:6f:90 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEeVFot0HjAJShWJnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk YzFkOTJlYzUtM2ZiZC00ZjZjLThlOTQtYTZhYmE0YzNmZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJnjS2jnOiVWYHvpPMmAr1C4V0ikauUs67n0 gWQsPuZUjHHHylqmEGK+q//El+gNQXIfFCdN8pdAKyKCDxtRl9QLpEb3JohHGz4o 5Q0IhXCIwAxd9gT/+4Vyv4ArI9W2tHnbGFd4AzoRmKuXB+zPevHQWhJFo/mfapOd E7lzQ6yS3dRAc1VbaqaBz3CgwLvkkWIdsLZ7c031OipmM+cIGkNo8J8X8ZlK+BIN I7gch5l4Kcxb3B9/tghNToIyBIQaPhyUqYDYIe+3Tbf2oEQVmFpltYcVBpVxNxIG YYXEZqCwHMXcuYc1l6edOB7SkQ8XaNyJQ9NhBb+v00O1B+lkXQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFFJKAwkaxwgWflR1iGhWP9tJ2UKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvNjQzZGVhMzItYWQ5NC0z NmQ5LWE2YzUtOTAzNjZhZjQ3OGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQmAvt4 ABADBwcmAvt4AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEASuDAsrVx1M2ECRU0JwtuqAOEHBambXpnMlBE 0CLptHFP3CunOHuVOCMkJcnzz5aIQ5F4bOGZsoYYBTLVSgdmyEpanOfOHI5AvOiY J6P0CSqOlUpdYOatxTb4g9ugJpEb/MYV2ZKPn5yI+qnI/pLjaXrSkbC6iVdRl4vw 6FpLzD5aH2VQs10elXxa30k11qj5quX8Z6J6+Ng100Kcn0HWMLXKud/2eyznTgLH wKwidIc0/iV8OxvsUCKI1IZliIL+lZke0xwd4104IMnf551qFMXELI+Alh2jZJFa o7ocQ0hQWiexurPbASCmDZmeNQni7H1OsHHfUTMm6lrBDrVvkA== -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:05 2024 by rpki-client on console-ams.rpki-client.org