$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/714dfcfd-2e7e-3e01-9fd6-4419f89af7fb.roa File: 714dfcfd-2e7e-3e01-9fd6-4419f89af7fb.roa (raw, json) Hash identifier: Ml89rrw8xEaFKtdQhBB+RPJ6o2M60wbsz9oyCQzIMZg= Subject key identifier: E5:6F:14:4E:8A:A0:34:0E:38:6B:87:1F:0F:A8:E6:AF:60:88:61:E3 Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af Certificate serial: 010D0C9F43285847F91BC9DB37C8342FA8648A00 Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/714dfcfd-2e7e-3e01-9fd6-4419f89af7fb.roa Signing time: Sat 23 Nov 2024 08:52:13 +0000 ROA not before: Sat 23 Nov 2024 08:52:13 +0000 ROA not after: Fri 21 Feb 2025 08:52:13 +0000 asID: 401507 IP address blocks: 2602:f78a:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f9:1b:c9:db:37:c8:34:2f:a8:64:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af Validity Not Before: Nov 23 08:52:13 2024 GMT Not After : Feb 21 08:52:13 2025 GMT Subject: CN=4d9b09bb-3af7-4421-9fe4-aeb5941a4625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7f:c1:df:27:a5:d7:b9:eb:6f:d7:3c:83:5a: fa:81:86:13:d0:7c:47:ff:40:8d:b1:85:d0:04:a0: f1:0f:4a:24:9e:7f:0b:93:f6:c7:5b:e4:25:94:83: 33:c1:9f:1d:f8:db:ad:c1:11:73:3b:f8:1e:a1:04: 1d:a0:2a:be:cc:78:00:6f:45:6a:14:65:a9:e0:a4: 02:72:9c:1c:06:61:d2:c0:64:88:d0:20:bd:ed:8a: be:05:9a:16:46:ee:e7:2b:c4:dc:cb:46:58:a1:5e: 02:07:a3:ad:e0:8a:66:e6:75:a1:ee:0f:27:e9:e6: b2:85:f2:b9:69:f1:49:74:d9:30:cc:81:4e:ed:9e: fa:c6:86:f0:ac:4d:13:36:d7:ec:9e:d0:fa:75:4c: 66:57:60:6f:ee:e0:a0:ec:d0:2f:d4:f0:09:78:a5: 26:9d:65:be:3e:d6:ae:8a:bd:f5:aa:1a:37:ec:14: 95:8f:a5:91:46:be:71:f1:12:51:01:4e:4e:e6:99: aa:3c:bc:20:78:ed:21:b9:44:37:6d:1f:79:d0:23: 7c:dd:23:07:f1:ca:bf:59:e2:a8:a1:68:dd:96:70: 72:a1:3e:81:41:16:4b:92:d3:80:a7:ce:ad:ac:b7: 75:f0:4c:4d:1b:7f:72:db:c2:52:9e:4e:df:60:5f: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6F:14:4E:8A:A0:34:0E:38:6B:87:1F:0F:A8:E6:AF:60:88:61:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/714dfcfd-2e7e-3e01-9fd6-4419f89af7fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl X509v3 Authority Key Identifier: keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer sbgp-ipAddrBlock: critical IPv6: 2602:f78a:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1f:27:10:79:c2:b7:0a:0f:c1:57:bc:71:3f:ec:1a:6a:48: c6:30:dc:38:c7:25:c1:10:01:74:eb:cc:7b:ce:35:7b:34:8e: f2:d5:f9:ae:18:8e:6f:7a:b5:6b:35:97:ec:e3:bf:39:9a:c5: 6d:10:75:98:63:da:36:ea:dc:84:6d:bf:93:30:62:4f:a9:ac: 2b:d3:af:53:46:f6:bb:58:2f:e1:0c:78:8e:d9:ab:d5:b6:8a: 58:9d:1b:19:34:27:7a:6d:ba:4c:4d:d7:a9:25:93:8a:9b:ce: 60:e9:40:15:a3:6d:35:ec:4a:57:f7:cd:ef:7f:b8:ec:bb:8b: 27:50:87:03:78:bf:fc:d7:27:8d:9a:a5:7e:1d:dd:0f:cb:70: a6:bc:90:1c:2b:89:93:ab:8f:35:b8:85:7f:7c:8c:ad:d0:13: b4:3e:53:d4:b9:12:04:5c:c7:ba:16:2f:f6:2b:9f:83:6e:ef: 78:64:2f:71:72:89:62:eb:90:fc:80:ee:c2:f5:2d:8b:1f:bf: e1:90:0d:ca:e0:be:da:83:fb:f4:78:ff:95:9f:c1:bf:d2:cc: 4d:82:b4:00:c1:a9:2b:d8:ec:96:a7:ea:85:88:53:86:98:d4: d2:1c:74:2a:bd:3d:00:0f:e7:1d:1e:16:31:d2:cc:38:f1:2b: ef:db:02:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEf5G8nbN8g0L6hkigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlMzdmNWItY2ZlMi00YWVkLTg2MTYtOTk5N2QzZjJm MGFmMB4XDTI0MTEyMzA4NTIxM1oXDTI1MDIyMTA4NTIxM1owLzEtMCsGA1UEAxMk NGQ5YjA5YmItM2FmNy00NDIxLTlmZTQtYWViNTk0MWE0NjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX/B3yel17nrb9c8g1r6gYYT0HxH/0CNsYXQ BKDxD0oknn8Lk/bHW+QllIMzwZ8d+NutwRFzO/geoQQdoCq+zHgAb0VqFGWp4KQC cpwcBmHSwGSI0CC97Yq+BZoWRu7nK8Tcy0ZYoV4CB6Ot4Ipm5nWh7g8n6eayhfK5 afFJdNkwzIFO7Z76xobwrE0TNtfsntD6dUxmV2Bv7uCg7NAv1PAJeKUmnWW+Ptau ir31qho37BSVj6WRRr5x8RJRAU5O5pmqPLwgeO0huUQ3bR950CN83SMH8cq/WeKo oWjdlnByoT6BQRZLktOAp86trLd18ExNG39y28JSnk7fYF+MCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOVvFE6KoDQOOGuHHw+o5q9giGHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUz N2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNmMmYwYWYvNzE0ZGZjZmQtMmU3ZS0z ZTAxLTlmZDYtNDQxOWY4OWFmN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmFlMzdmNWItY2ZlMi00YWVkLTg2 MTYtOTk5N2QzZjJmMGFmL2JhZTM3ZjViLWNmZTItNGFlZC04NjE2LTk5OTdkM2Yy ZjBhZi5jcmwwHwYDVR0jBBgwFoAU61+QtmDWCOe68zylk+CiekPL5yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3 ZDNmMmYwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3igAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABgfJxB5wrcKD8FXvHE/7BpqSMYw3DjHJcEQAXTrzHvONXs0jvLV +a4Yjm96tWs1l+zjvzmaxW0QdZhj2jbq3IRtv5MwYk+prCvTr1NG9rtYL+EMeI7Z q9W2ilidGxk0J3ptukxN16klk4qbzmDpQBWjbTXsSlf3ze9/uOy7iydQhwN4v/zX J42apX4d3Q/LcKa8kBwriZOrjzW4hX98jK3QE7Q+U9S5EgRcx7oWL/Yrn4Nu73hk L3FyiWLrkPyA7sL1LYsfv+GQDcrgvtqD+/R4/5Wfwb/SzE2CtADBqSvY7Jan6oWI U4aY1NIcdCq9PQAP5x0eFjHSzDjxK+/bAmE= -----END CERTIFICATE-----Generated at Sat Nov 23 16:59:43 2024 by rpki-client on console-ams.rpki-client.org