$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa File: 5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa (raw, json) Hash identifier: GZ6fgr2usP/AtKVnQ4iAnKBtS+qrs5b5p0M0nMxAnUA= Subject key identifier: BC:48:A3:C4:DE:2B:66:31:DA:0B:EB:8F:B7:FB:5E:4F:ED:B8:1B:71 Certificate issuer: /CN=595941d6-63c3-448f-a1d8-89c887c32b78 Certificate serial: 010D0C9F43285847A7408E26B4F777BE9DC9B980 Authority key identifier: B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa Signing time: Fri 25 Oct 2024 01:10:01 +0000 ROA not before: Fri 25 Oct 2024 01:10:01 +0000 ROA not after: Thu 23 Jan 2025 02:10:01 +0000 asID: 400797 IP address blocks: 2602:faf3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:40:8e:26:b4:f7:77:be:9d:c9:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595941d6-63c3-448f-a1d8-89c887c32b78 Validity Not Before: Oct 25 01:10:01 2024 GMT Not After : Jan 23 02:10:01 2025 GMT Subject: CN=aebfdd29-e317-46ea-a646-c5279768882d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1d:ba:52:dd:fe:9d:cd:58:e5:72:53:dc:e1: d5:22:30:44:71:68:00:31:34:ff:da:a0:07:2b:4b: 88:aa:6a:2a:fd:8a:04:f2:01:37:a2:b3:4a:4e:50: 28:5f:96:32:6f:7d:2b:43:b4:86:65:33:d7:55:30: ce:45:81:d7:14:23:bf:cb:eb:dc:7b:e8:ee:a8:0a: 92:be:5e:38:25:59:f2:2b:ab:cc:32:f9:fa:82:07: ed:4e:5c:b1:5c:81:44:b2:f3:5c:22:31:87:98:bd: a8:44:60:d1:c4:e8:80:3a:3f:f2:13:98:e2:69:14: e2:cb:2b:cc:27:a6:8e:3b:11:48:41:fb:6d:cc:e7: ec:ad:7f:16:87:a2:fb:f2:15:5d:f4:cd:0e:69:0a: d4:28:f3:2f:dc:48:da:ea:14:73:ea:fb:55:1b:56: 56:05:d0:75:61:e7:81:dc:89:b4:ce:29:0c:0b:fe: 3a:c4:10:bd:c8:f6:45:b0:09:8f:7f:e6:a1:23:90: 00:35:af:6b:ed:97:23:2e:cc:aa:fb:70:97:ec:43: b0:1d:c0:31:aa:db:26:19:2b:b9:ea:d8:b5:b6:64: f8:ae:8b:9e:b5:59:0b:40:78:61:3f:2d:56:1a:e9: 58:ee:af:0a:36:4f:26:88:71:2e:55:00:fe:43:78: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:A3:C4:DE:2B:66:31:DA:0B:EB:8F:B7:FB:5E:4F:ED:B8:1B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/5ea8e1fe-2c15-3579-a81d-8ec1df6eb13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78/595941d6-63c3-448f-a1d8-89c887c32b78.crl X509v3 Authority Key Identifier: keyid:B6:42:E5:7E:3E:A4:D3:23:86:80:63:9B:C8:3C:75:9E:80:B8:26:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/595941d6-63c3-448f-a1d8-89c887c32b78.cer sbgp-ipAddrBlock: critical IPv6: 2602:faf3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ba:ce:06:87:d3:62:7a:9a:c9:cf:32:89:78:6d:f7:ab:dc: 27:a4:6b:8b:f7:52:cf:3a:37:97:8c:1f:15:cb:2b:a9:c3:a1: 26:1d:43:03:16:0a:e7:bb:80:d7:3b:dd:d5:16:7b:c2:72:48: b2:02:ca:fc:4b:52:22:5b:34:42:dc:e4:c3:8f:7b:c6:d8:e6: fd:f9:9a:81:6f:a9:e5:26:8e:29:dc:07:7b:ab:80:79:2d:01: 1c:a1:ee:02:57:e7:3a:28:96:bc:a3:23:91:cc:27:44:40:3c: b7:56:e2:04:2b:7b:8d:62:13:3f:84:f5:b5:48:64:2f:8d:4d: 83:39:67:a5:1f:a6:fe:42:f3:f0:b1:b2:b6:23:81:aa:1c:5c: cd:6c:08:a3:f5:c4:ef:cf:d7:20:76:9a:14:8c:5c:b1:4d:33: ad:8f:20:6a:76:77:5a:12:54:13:27:a8:40:b0:27:c1:d3:e3: 1a:13:fb:c0:1d:3b:17:10:11:6d:38:87:b3:96:34:95:a9:a0: d4:60:1e:e7:d6:18:7f:35:f8:a6:38:d5:49:55:c5:82:f9:25: be:c1:60:f8:1e:72:f5:3d:23:db:ba:0d:c2:85:44:52:c9:b6: da:7d:be:1b:e5:57:8d:13:36:a0:cc:53:8b:b5:32:ce:65:b2: f1:88:22:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEenQI4mtPd3vp3JuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTk1OTQxZDYtNjNjMy00NDhmLWExZDgtODljODg3YzMy Yjc4MB4XDTI0MTAyNTAxMTAwMVoXDTI1MDEyMzAyMTAwMVowLzEtMCsGA1UEAxMk YWViZmRkMjktZTMxNy00NmVhLWE2NDYtYzUyNzk3Njg4ODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB26Ut3+nc1Y5XJT3OHVIjBEcWgAMTT/2qAH K0uIqmoq/YoE8gE3orNKTlAoX5Yyb30rQ7SGZTPXVTDORYHXFCO/y+vce+juqAqS vl44JVnyK6vMMvn6ggftTlyxXIFEsvNcIjGHmL2oRGDRxOiAOj/yE5jiaRTiyyvM J6aOOxFIQfttzOfsrX8Wh6L78hVd9M0OaQrUKPMv3Eja6hRz6vtVG1ZWBdB1YeeB 3Im0zikMC/46xBC9yPZFsAmPf+ahI5AANa9r7ZcjLsyq+3CX7EOwHcAxqtsmGSu5 6ti1tmT4rouetVkLQHhhPy1WGulY7q8KNk8miHEuVQD+Q3gf2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxIo8TeK2Yx2gvrj7f7Xk/tuBtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5 NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4ODdjMzJiNzgvNWVhOGUxZmUtMmMxNS0z NTc5LWE4MWQtOGVjMWRmNmViMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTk1OTQxZDYtNjNjMy00NDhmLWEx ZDgtODljODg3YzMyYjc4LzU5NTk0MWQ2LTYzYzMtNDQ4Zi1hMWQ4LTg5Yzg4N2Mz MmI3OC5jcmwwHwYDVR0jBBgwFoAUtkLlfj6k0yOGgGObyDx1noC4Jg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81OTU5NDFkNi02M2MzLTQ0OGYtYTFkOC04OWM4 ODdjMzJiNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL68wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAC6zgaH02J6msnPMol4bfer3Ceka4v3Us86N5eMHxXLK6nDoSYd QwMWCue7gNc73dUWe8JySLICyvxLUiJbNELc5MOPe8bY5v35moFvqeUmjincB3ur gHktARyh7gJX5zoolryjI5HMJ0RAPLdW4gQre41iEz+E9bVIZC+NTYM5Z6Ufpv5C 8/CxsrYjgaocXM1sCKP1xO/P1yB2mhSMXLFNM62PIGp2d1oSVBMnqECwJ8HT4xoT +8AdOxcQEW04h7OWNJWpoNRgHufWGH81+KY41UlVxYL5Jb7BYPgecvU9I9u6DcKF RFLJttp9vhvlV40TNqDMU4u1Ms5lsvGIIkk= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:17 2024 by rpki-client on console-ams.rpki-client.org