$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/97851220-3531-3051-a0fa-2c42db160d69.roa File: 97851220-3531-3051-a0fa-2c42db160d69.roa (raw, json) Hash identifier: MAtfWkCPwatykV2x84ldaE9fJHFR07BvGd9mw7OM9vg= Subject key identifier: 8B:D5:A4:16:8F:36:13:1A:A5:38:6F:39:E2:04:00:85:CA:FE:0F:61 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F43285847CFF470A1428B1726312C5680 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/97851220-3531-3051-a0fa-2c42db160d69.roa Signing time: Fri 08 Nov 2024 15:04:48 +0000 ROA not before: Fri 08 Nov 2024 15:04:48 +0000 ROA not after: Thu 06 Feb 2025 15:04:48 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:f4:70:a1:42:8b:17:26:31:2c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Nov 8 15:04:48 2024 GMT Not After : Feb 6 15:04:48 2025 GMT Subject: CN=5ba9b102-ac4d-4346-b2cd-3b88f095dc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:1f:da:81:6a:93:e7:af:0b:e5:0d:e7:18: ca:3a:fe:08:1f:0f:4b:e6:6a:f2:38:cb:fe:bd:00: fd:cd:06:47:4f:ed:00:65:67:87:40:2f:91:84:8a: c6:a0:0e:4f:61:6d:b4:46:88:f7:5e:5e:60:51:af: 47:ca:92:47:57:10:34:b5:76:d3:9a:23:7d:26:87: 9c:cd:fb:26:78:a9:32:92:3a:cc:9f:dd:2c:67:60: 8e:75:5f:70:01:df:32:ed:d4:19:a2:08:99:10:4f: d0:67:54:f1:b5:26:1e:22:47:9f:dd:19:88:1b:c7: 7c:17:e3:49:0e:82:44:1e:72:6a:5e:c5:d3:32:26: 26:29:8c:d4:2e:83:81:6c:a9:ae:ca:bb:87:ee:24: a0:00:d9:85:25:4f:59:b4:22:46:8a:f7:88:f3:0b: 76:95:a7:14:ce:44:b0:1e:b9:e5:24:d7:66:9f:a7: 3e:c1:b5:62:a5:ea:f3:57:44:b2:87:93:67:8e:a8: cd:57:03:b5:5d:6b:a4:41:24:15:d0:a4:01:64:f3: 58:8b:49:42:3a:43:63:e6:90:6c:55:7b:f4:c0:db: 93:e0:7c:33:41:de:7d:43:a0:f1:14:f2:86:e6:9b: a3:f8:ed:42:0a:e5:d2:f9:90:a4:0c:4c:35:a6:4d: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D5:A4:16:8F:36:13:1A:A5:38:6F:39:E2:04:00:85:CA:FE:0F:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/97851220-3531-3051-a0fa-2c42db160d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:83:2a:5f:2c:d1:a3:0a:7c:ef:15:b4:cc:a3:80:09:da:1c: a3:85:fc:8e:3c:b0:9a:a1:b5:4a:cf:d9:93:fa:af:f7:f7:a8: 06:07:f4:56:cd:bb:50:05:7f:a1:a3:5d:22:3c:fd:5a:ef:69: 8c:58:a1:2b:ca:ff:21:3a:db:bd:32:ac:31:09:92:e3:de:ff: b1:4c:47:f1:4d:9a:6e:e0:65:9f:c9:fa:e5:5a:17:f1:a9:9d: 7e:b6:9e:c5:3c:e3:71:61:91:01:00:8b:d1:f6:0c:21:84:90: f2:e9:46:27:e5:b9:64:31:0b:62:fc:68:86:2b:8c:1b:29:b0: 72:43:45:d1:30:70:01:f0:ba:a8:6f:23:f4:75:69:91:0d:b5: 20:e2:4f:90:46:c7:58:85:87:51:87:8f:02:f2:7f:17:43:4c: 74:f0:e4:2b:f0:c3:fa:d0:a3:fb:4f:0b:cb:52:7e:3a:e7:a5: 23:f2:5e:9a:d4:6f:6b:7c:92:50:f4:78:07:0d:ee:14:c8:9c: 03:a8:73:5d:11:97:57:ff:19:99:9b:90:11:80:56:fd:37:3f: 4e:80:56:83:f4:00:7c:a1:52:ef:ed:53:7c:34:82:26:6e:1b: 23:f9:f0:c2:41:75:fb:b4:8e:d3:02:45:e3:94:24:9d:d1:f6: 79:dd:d3:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfP9HChQosXJjEsVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI0MTEwODE1MDQ0OFoXDTI1MDIwNjE1MDQ0OFowLzEtMCsGA1UEAxMk NWJhOWIxMDItYWM0ZC00MzQ2LWIyY2QtM2I4OGYwOTVkYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTwf2oFqk+evC+UN5xjKOv4IHw9L5mryOMv+ vQD9zQZHT+0AZWeHQC+RhIrGoA5PYW20Roj3Xl5gUa9HypJHVxA0tXbTmiN9Joec zfsmeKkykjrMn90sZ2COdV9wAd8y7dQZogiZEE/QZ1TxtSYeIkef3RmIG8d8F+NJ DoJEHnJqXsXTMiYmKYzULoOBbKmuyruH7iSgANmFJU9ZtCJGiveI8wt2lacUzkSw HrnlJNdmn6c+wbViperzV0Syh5NnjqjNVwO1XWukQSQV0KQBZPNYi0lCOkNj5pBs VXv0wNuT4HwzQd59Q6DxFPKG5puj+O1CCuXS+ZCkDEw1pk2d6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIvVpBaPNhMapThvOeIEAIXK/g9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvOTc4NTEyMjAtMzUzMS0z MDUxLWEwZmEtMmM0MmRiMTYwZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsgypfLNGjCnzvFbTMo4AJ2hyjhfyOPLCaobVKz9mT+q/396gGB/RW zbtQBX+ho10iPP1a72mMWKEryv8hOtu9MqwxCZLj3v+xTEfxTZpu4GWfyfrlWhfx qZ1+tp7FPONxYZEBAIvR9gwhhJDy6UYn5blkMQti/GiGK4wbKbByQ0XRMHAB8Lqo byP0dWmRDbUg4k+QRsdYhYdRh48C8n8XQ0x08OQr8MP60KP7TwvLUn4656Uj8l6a 1G9rfJJQ9HgHDe4UyJwDqHNdEZdX/xmZm5ARgFb9Nz9OgFaD9AB8oVLv7VN8NIIm bhsj+fDCQXX7tI7TAkXjlCSd0fZ53dOx -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org