$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa File: 2d561adb-c9c4-3c99-91d9-d8a426c46475.roa (raw, json) Hash identifier: 0VCUSl2JPZ+NFVzYEtClRpkozlhR09pZuqL6E2X7n6M= Subject key identifier: 35:32:B9:2E:35:1A:3C:D4:5F:03:CB:B4:BA:E2:30:DD:4E:5C:69:43 Certificate issuer: /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Certificate serial: 010D0C9F43285847D7095E35F8C2BC9173765080 Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa Signing time: Mon 11 Nov 2024 03:57:37 +0000 ROA not before: Mon 11 Nov 2024 03:57:37 +0000 ROA not after: Sun 09 Feb 2025 03:57:37 +0000 asID: 401466 IP address blocks: 2602:f874:be::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d7:09:5e:35:f8:c2:bc:91:73:76:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Validity Not Before: Nov 11 03:57:37 2024 GMT Not After : Feb 9 03:57:37 2025 GMT Subject: CN=b4a7b9fb-ee56-47df-8413-55a933a7899d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:a2:db:66:f4:c0:69:7c:6f:29:11:db:21: bf:18:75:13:39:68:85:a5:74:5e:ee:6c:fe:c1:cf: b3:cb:4c:60:e0:49:73:34:18:47:68:c6:9a:24:15: 19:12:a3:e5:c4:26:f8:c7:cc:e5:92:eb:bc:40:9e: 10:98:a3:30:77:5a:0e:f8:40:5e:c9:46:db:a0:17: 37:4a:91:6a:7c:1c:7a:cd:8b:5a:46:81:8e:c0:a2: 47:4c:01:15:24:7e:ea:2b:d5:bc:90:5d:01:c7:82: 5e:f0:74:1b:d7:b2:ae:d5:c8:b0:5d:94:38:ea:ae: 6b:ff:2b:7d:ff:85:a0:48:e1:9e:e3:1b:0b:20:74: 0f:2b:a9:2d:2d:7a:07:8a:9f:36:07:33:48:c8:13: 1d:4d:c6:9f:f2:06:b1:92:82:7e:76:50:1c:0c:51: ad:9a:a9:76:cc:50:95:c1:ef:46:35:a8:b1:ce:51: dc:a9:93:b1:12:7d:34:e4:81:24:ab:ae:c7:21:63: 3d:d9:7a:86:88:e2:8a:80:65:af:23:41:ce:7d:61: a9:ee:df:8d:ae:da:c7:7a:d3:8e:07:ec:f2:da:b9: ff:ed:d0:b0:98:72:ae:07:4c:26:2c:fb:f7:43:1c: 9c:92:4d:e6:06:ab:40:bc:a1:69:be:2b:3d:ef:dd: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:32:B9:2E:35:1A:3C:D4:5F:03:CB:B4:BA:E2:30:DD:4E:5C:69:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl X509v3 Authority Key Identifier: keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer sbgp-ipAddrBlock: critical IPv6: 2602:f874:be::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:40:40:e0:da:bb:49:ab:07:5d:3b:df:bb:16:2f:73:35:43: 19:e2:4b:fe:90:b3:cd:32:b2:dc:95:d0:68:e7:35:83:36:16: fa:b8:fd:90:3a:56:5d:f4:dd:18:c0:ca:20:95:0f:5d:c1:76: ac:cf:d0:05:ed:2a:84:28:c9:9c:6e:4e:1f:da:02:21:ea:32: bb:5f:8b:99:84:d1:81:c8:83:54:37:92:12:20:6f:74:50:c6: 2a:1c:f8:a6:d8:09:92:23:84:6f:ab:9e:34:d4:aa:cc:63:29: 5c:3f:0c:e4:a6:38:04:bf:13:33:dc:9a:c8:32:66:dc:04:fd: 92:2d:7f:0f:91:a9:7f:57:56:38:1f:f8:ef:2d:0b:32:91:ed: a9:fa:b6:86:1e:bb:12:1c:9e:36:74:1c:68:e8:6e:4f:70:6b: 55:c3:c5:06:45:1c:8f:11:b4:50:e5:1d:67:eb:c3:56:58:c6: c0:81:39:3c:0c:cd:1e:4d:d8:7b:ad:22:5c:61:55:50:b7:43: d3:a2:18:ac:5b:b4:c5:40:29:56:e5:8f:38:49:56:0d:7d:34: e6:a2:44:3e:a9:72:83:ea:c0:43:85:10:46:ce:af:8e:e9:1a: 34:90:3e:44:fd:4e:bd:be:aa:13:51:6a:de:58:1d:b4:23:b1: 9b:7b:1a:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfXCV41+MK8kXN2UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZmI3ZTAtMDBhNi00NTM3LTk4ZGQtODdhNWFjYmQx MjI1MB4XDTI0MTExMTAzNTczN1oXDTI1MDIwOTAzNTczN1owLzEtMCsGA1UEAxMk YjRhN2I5ZmItZWU1Ni00N2RmLTg0MTMtNTVhOTMzYTc4OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+ui22b0wGl8bykR2yG/GHUTOWiFpXRe7mz+ wc+zy0xg4ElzNBhHaMaaJBUZEqPlxCb4x8zlkuu8QJ4QmKMwd1oO+EBeyUbboBc3 SpFqfBx6zYtaRoGOwKJHTAEVJH7qK9W8kF0Bx4Je8HQb17Ku1ciwXZQ46q5r/yt9 /4WgSOGe4xsLIHQPK6ktLXoHip82BzNIyBMdTcaf8gaxkoJ+dlAcDFGtmql2zFCV we9GNaixzlHcqZOxEn005IEkq67HIWM92XqGiOKKgGWvI0HOfWGp7t+NrtrHetOO B+zy2rn/7dCwmHKuB0wmLPv3Qxyckk3mBqtAvKFpvis97907AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUyuS41GjzUXwPLtLriMN1OXGlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdm YjdlMC0wMGE2LTQ1MzctOThkZC04N2E1YWNiZDEyMjUvMmQ1NjFhZGItYzljNC0z Yzk5LTkxZDktZDhhNDI2YzQ2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3ZmI3ZTAtMDBhNi00NTM3LTk4 ZGQtODdhNWFjYmQxMjI1L2Q1N2ZiN2UwLTAwYTYtNDUzNy05OGRkLTg3YTVhY2Jk MTIyNS5jcmwwHwYDVR0jBBgwFoAUEp4euQeWpb0XZcnkKBFzj02ykcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdmYjdlMC0wMGE2LTQ1MzctOThkZC04N2E1 YWNiZDEyMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4dAC+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRAQODau0mrB10737sWL3M1QxniS/6Qs80ystyV0GjnNYM2Fvq4 /ZA6Vl303RjAyiCVD13BdqzP0AXtKoQoyZxuTh/aAiHqMrtfi5mE0YHIg1Q3khIg b3RQxioc+KbYCZIjhG+rnjTUqsxjKVw/DOSmOAS/EzPcmsgyZtwE/ZItfw+RqX9X Vjgf+O8tCzKR7an6toYeuxIcnjZ0HGjobk9wa1XDxQZFHI8RtFDlHWfrw1ZYxsCB OTwMzR5N2HutIlxhVVC3Q9OiGKxbtMVAKVbljzhJVg19NOaiRD6pcoPqwEOFEEbO r47pGjSQPkT9Tr2+qhNRat5YHbQjsZt7GiQ= -----END CERTIFICATE-----Generated at Sun Nov 24 16:04:21 2024 by rpki-client on console-ams.rpki-client.org