$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa File: 4d778317-bfa9-32da-b5ef-d588603e5ac9.roa (raw, json) Hash identifier: tiazbwmH7Lya8R43pGCPILOsWczW9JgWNXeaA5X3F6E= Subject key identifier: D9:22:43:28:D1:AF:CD:E1:C0:1B:44:39:38:7C:DC:4C:1E:A4:9F:2E Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F432858477396587BB3B2652FBEE0C380 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa Signing time: Sun 06 Oct 2024 13:00:41 +0000 ROA not before: Sun 06 Oct 2024 13:00:41 +0000 ROA not after: Sat 04 Jan 2025 14:00:41 +0000 asID: 397026 IP address blocks: 2604:f840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:96:58:7b:b3:b2:65:2f:be:e0:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Oct 6 13:00:41 2024 GMT Not After : Jan 4 14:00:41 2025 GMT Subject: CN=2b8bc00b-0736-45e7-a657-a84589fcbc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:17:d7:a9:88:79:e8:71:3f:c0:db:b2:cc: 35:b3:fa:d5:37:e5:cf:fc:25:5f:f7:74:17:f1:b6: cb:cd:e7:05:d7:dd:51:8b:78:f0:c2:65:b9:23:54: 4a:14:9f:54:36:a2:99:48:41:04:fd:8c:ac:aa:86: 89:b6:7f:b7:c3:d1:15:72:0a:7d:0d:2d:a6:eb:16: 41:45:a4:a3:fe:34:25:a1:d1:80:b3:1c:62:93:19: d3:62:ba:c1:1c:f4:d1:f0:6a:e2:8d:c4:52:fc:4d: b1:27:f8:9c:de:dd:20:ec:4e:f8:6c:b6:2d:7c:eb: 16:56:44:df:e8:3b:86:71:46:96:8e:3d:77:d6:4e: 82:8b:29:63:a7:9a:43:b2:4f:a1:29:9a:7b:92:e8: 0b:a6:74:1f:bb:74:3d:90:18:5a:7e:aa:e4:dd:7b: 0f:11:42:6d:18:38:e9:6d:35:7a:47:fe:3d:39:31: a3:38:c8:b5:5d:91:1d:39:ef:ad:ab:ac:b6:ff:f8: 9a:9b:4a:e1:01:04:ce:b6:fe:a0:7b:4b:bc:bd:53: 76:83:35:e5:1e:09:39:03:c4:a0:9b:ab:69:28:f4: 0f:68:75:8a:7d:70:c1:53:ce:b1:ac:7e:20:e8:9a: da:47:e9:58:43:a9:39:8b:10:a5:1d:40:f4:b4:18: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:43:28:D1:AF:CD:E1:C0:1B:44:39:38:7C:DC:4C:1E:A4:9F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/4d778317-bfa9-32da-b5ef-d588603e5ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv6: 2604:f840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:03:08:5b:fb:f6:af:9a:e8:a6:c7:45:fa:8e:ae:b2:b8:f1: 2e:0b:76:3b:dc:86:c8:cf:ce:b1:6e:5c:d9:03:e2:9d:7f:8e: 34:61:e2:2d:2b:4a:41:52:be:13:14:2f:22:57:92:8a:d5:a1: 04:86:0f:f5:05:6f:e9:61:ec:09:34:0d:2a:2f:d4:cc:b2:57: 82:21:9d:ab:01:fc:d6:9f:e2:bf:23:91:3a:98:90:7e:9f:3c: 28:e3:fb:9b:d8:6c:cf:13:92:f2:05:dd:75:7d:2a:fb:8a:23: 30:60:61:4a:22:c9:05:45:fb:13:3c:31:bb:8d:fc:ae:55:e9: 46:e9:f8:15:b0:ea:1a:54:d1:b8:b2:b8:51:fe:c9:ab:e5:6e: 0a:22:71:e9:c5:18:03:5b:8b:9b:d0:d5:1f:83:2c:91:8d:d1: 80:e3:4b:9b:fc:dd:8b:7d:8b:7e:b6:f1:f9:34:c8:44:31:a3: 6a:97:e9:ef:b7:60:dc:9c:67:81:ef:ce:28:92:e9:86:62:cb: 91:ca:b8:6f:b5:3d:fc:48:d2:e4:26:c2:22:fc:19:67:8f:d8: 4a:7d:c5:29:09:92:ef:df:44:ef:43:2c:f8:c8:14:1a:df:35: 7e:ec:6b:f4:23:8d:5f:72:ae:bf:a4:b1:70:b4:4d:9b:69:b2: 3b:5c:28:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdzllh7s7JlL77gw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MmI4YmMwMGItMDczNi00NWU3LWE2NTctYTg0NTg5ZmNiYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIAX16mIeehxP8Dbssw1s/rVN+XP/CVf93QX 8bbLzecF191Ri3jwwmW5I1RKFJ9UNqKZSEEE/YysqoaJtn+3w9EVcgp9DS2m6xZB RaSj/jQlodGAsxxikxnTYrrBHPTR8GrijcRS/E2xJ/ic3t0g7E74bLYtfOsWVkTf 6DuGcUaWjj131k6Ciyljp5pDsk+hKZp7kugLpnQfu3Q9kBhafqrk3XsPEUJtGDjp bTV6R/49OTGjOMi1XZEdOe+tq6y2//iam0rhAQTOtv6ge0u8vVN2gzXlHgk5A8Sg m6tpKPQPaHWKfXDBU86xrH4g6JraR+lYQ6k5ixClHUD0tBixJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNkiQyjRr83hwBtEOTh83EwepJ8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvNGQ3NzgzMTctYmZhOS0z MmRhLWI1ZWYtZDU4ODYwM2U1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPAwhb+/avmuimx0X6jq6yuPEuC3Y73IbIz86xblzZA+Kdf440YeIt K0pBUr4TFC8iV5KK1aEEhg/1BW/pYewJNA0qL9TMsleCIZ2rAfzWn+K/I5E6mJB+ nzwo4/ub2GzPE5LyBd11fSr7iiMwYGFKIskFRfsTPDG7jfyuVelG6fgVsOoaVNG4 srhR/smr5W4KInHpxRgDW4ub0NUfgyyRjdGA40ub/N2LfYt+tvH5NMhEMaNql+nv t2DcnGeB784okumGYsuRyrhvtT38SNLkJsIi/Blnj9hKfcUpCZLv30TvQyz4yBQa 3zV+7Gv0I41fcq6/pLFwtE2babI7XCgA -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:28 2024 by rpki-client on console-ams.rpki-client.org