$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa File: 43d41a34-62e7-3694-95c2-94d2452f5f65.roa (raw, json) Hash identifier: S4lcj3t0NoT+kRfL/KggJ0LOewn+mwCd8T7SJ3zbXGw= Subject key identifier: DC:C1:C4:A5:7E:52:4D:C0:F1:10:C1:6D:48:4D:AD:EF:EE:41:EA:D9 Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6 Certificate serial: 010D0C9F43285847C4AA1C14B5ADE32C66134F00 Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa Signing time: Mon 04 Nov 2024 14:00:48 +0000 ROA not before: Mon 04 Nov 2024 14:00:48 +0000 ROA not after: Sun 02 Feb 2025 14:00:48 +0000 asID: 401009 IP address blocks: 2602:f919::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c4:aa:1c:14:b5:ad:e3:2c:66:13:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6 Validity Not Before: Nov 4 14:00:48 2024 GMT Not After : Feb 2 14:00:48 2025 GMT Subject: CN=3e8dde12-65da-4947-830b-a2d548ff0829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:91:97:15:ca:5a:90:4c:e5:d8:f5:3b:82: 42:b3:d6:7d:f5:38:91:52:53:4a:7a:f9:c6:da:3d: a4:55:1a:c7:9d:b3:84:2f:a8:c1:fe:5d:ee:41:32: bf:76:cc:fd:67:c5:cd:b3:e3:e8:e2:0a:88:b0:4e: 58:b9:22:13:7a:05:80:85:58:1d:cb:14:07:e2:c7: b8:90:5f:ec:e5:6d:01:5d:72:84:f2:6f:8f:05:50: 45:1b:36:38:e6:45:8f:ce:b5:9e:f6:fe:40:0f:d0: 89:2b:92:3f:f7:64:e5:42:76:a3:8b:aa:b8:60:86: e1:c9:41:7c:7e:3e:34:88:9e:01:23:ce:de:1f:02: 06:ac:2a:1d:00:83:c5:08:f8:f5:04:3d:58:88:b9: 8b:39:1e:ed:a3:dc:f0:7c:82:14:0e:0b:08:8a:17: 70:30:99:ab:57:fe:b1:2d:45:1f:27:ce:44:52:da: 0d:26:22:20:01:dc:7a:e9:42:6d:69:6d:07:ec:ef: 2a:01:3f:68:7f:d1:13:b4:de:42:61:c4:69:ed:e3: 3f:d1:e5:7f:00:3e:55:08:44:fe:83:26:89:46:88: 4c:54:aa:b3:c6:28:48:21:f7:40:b7:f1:a8:ca:e9: fa:23:8e:9e:87:f5:f5:88:22:28:bf:3b:68:72:7d: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C1:C4:A5:7E:52:4D:C0:F1:10:C1:6D:48:4D:AD:EF:EE:41:EA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/43d41a34-62e7-3694-95c2-94d2452f5f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl X509v3 Authority Key Identifier: keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f919::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9c:07:3e:6c:8d:e9:87:81:a8:16:0f:0a:e4:e6:60:84:d9: 18:e4:52:a8:b3:38:f3:b7:7b:ed:cc:08:eb:4b:83:10:1a:91: 95:3f:53:c4:09:7f:c7:1a:7a:14:db:84:a8:35:58:47:37:9a: 69:9d:d7:1d:e9:e4:79:05:7f:81:30:18:06:bb:04:74:a1:6e: e2:16:03:7b:e2:c7:bd:84:46:86:64:33:06:33:be:eb:76:96: 83:07:5a:82:e0:4e:49:db:30:f4:e0:0c:a8:02:26:05:c3:a8: 16:d7:72:62:50:8f:b7:22:f4:22:11:e6:fa:c0:a3:33:a4:7f: 1b:fa:64:45:a8:ee:29:32:49:5d:76:cb:6e:25:16:b6:2b:8c: c0:de:2a:2a:1a:20:3d:f9:83:45:2c:1d:43:69:e5:68:df:0c: 9a:3d:5d:dc:e4:94:33:76:8d:df:25:04:8b:47:bf:79:48:5d: 77:a3:4f:13:f2:bf:08:fa:af:8b:12:78:77:12:dd:51:de:81: 45:18:d5:7b:6d:7f:a5:27:b8:cc:3f:fa:91:c4:17:b5:96:d5: cf:ea:15:4c:11:f4:ff:76:c0:cc:7c:6c:5b:77:ef:eb:04:4f: 76:9b:77:f3:20:ae:a0:a1:77:a8:a0:6f:b9:2d:5d:5d:92:9d: bf:19:ea:ac -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfEqhwUta3jLGYTTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5 MmQ2MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk M2U4ZGRlMTItNjVkYS00OTQ3LTgzMGItYTJkNTQ4ZmYwODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVGRlxXKWpBM5dj1O4JCs9Z99TiRUlNKevnG 2j2kVRrHnbOEL6jB/l3uQTK/dsz9Z8XNs+Po4gqIsE5YuSITegWAhVgdyxQH4se4 kF/s5W0BXXKE8m+PBVBFGzY45kWPzrWe9v5AD9CJK5I/92TlQnaji6q4YIbhyUF8 fj40iJ4BI87eHwIGrCodAIPFCPj1BD1YiLmLOR7to9zwfIIUDgsIihdwMJmrV/6x LUUfJ85EUtoNJiIgAdx66UJtaW0H7O8qAT9of9ETtN5CYcRp7eM/0eV/AD5VCET+ gyaJRohMVKqzxihIIfdAt/Goyun6I46eh/X1iCIovztocn3c9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNzBxKV+Uk3A8RDBbUhNre/uQerZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4 Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvNDNkNDFhMzQtNjJlNy0z Njk0LTk1YzItOTRkMjQ1MmY1ZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5 M2I1ZDkyZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5GQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKJwHPmyN6YeBqBYPCuTmYITZGORSqLM487d77cwI60uDEBqRlT9T xAl/xxp6FNuEqDVYRzeaaZ3XHenkeQV/gTAYBrsEdKFu4hYDe+LHvYRGhmQzBjO+ 63aWgwdaguBOSdsw9OAMqAImBcOoFtdyYlCPtyL0IhHm+sCjM6R/G/pkRajuKTJJ XXbLbiUWtiuMwN4qKhogPfmDRSwdQ2nlaN8Mmj1d3OSUM3aN3yUEi0e/eUhdd6NP E/K/CPqvixJ4dxLdUd6BRRjVe21/pSe4zD/6kcQXtZbVz+oVTBH0/3bAzHxsW3fv 6wRPdpt38yCuoKF3qKBvuS1dXZKdvxnqrA== -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:07 2024 by rpki-client on console-ams.rpki-client.org