$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa File: afcf11f7-4d27-3593-9511-7b35e311c3cf.roa (raw, json) Hash identifier: K/s4mpmXe1Z92hAAswb1uQSzxMbJ2Ur94m5ISYpNCMc= Subject key identifier: CF:25:CF:49:9B:C5:E6:C8:AE:10:21:E6:6A:4E:8F:E6:88:C9:34:DE Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584777C64435280A97B8A09E2200 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa Signing time: Tue 08 Oct 2024 01:00:31 +0000 ROA not before: Tue 08 Oct 2024 01:00:31 +0000 ROA not after: Mon 06 Jan 2025 02:00:31 +0000 asID: 36511 IP address blocks: 2606:2480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:c6:44:35:28:0a:97:b8:a0:9e:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Oct 8 01:00:31 2024 GMT Not After : Jan 6 02:00:31 2025 GMT Subject: CN=bc046ad0-6b63-498d-bc10-2d55f508dba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:b2:08:4e:c9:7c:3c:4b:06:c9:cd:35:b8: 6e:5d:2b:43:e6:d9:3a:12:dd:78:9b:07:e2:11:e5: 0e:b3:62:22:ee:e8:64:4a:da:a6:79:7d:b1:e6:85: 4d:ee:8a:5a:b3:ec:65:69:17:cc:6a:d4:bc:da:c9: 36:b2:f0:f3:36:95:fe:a4:14:9e:2a:06:94:80:6b: ab:f7:64:64:29:e6:6c:05:f1:d3:81:33:dc:3b:55: 40:b3:01:e5:5d:ad:23:83:a5:2b:9d:e3:d2:50:6d: 32:87:6f:c0:19:85:de:6b:d4:4a:8c:dc:ce:b6:d6: 93:aa:76:65:90:eb:5d:21:b6:aa:8a:47:78:a9:f1: c8:2d:84:18:4d:13:31:b7:be:67:eb:96:fb:fb:48: cc:3d:14:6c:06:f6:dd:2f:81:49:21:35:05:62:90: 9c:59:84:5a:9b:64:f6:3a:fa:6d:96:09:6e:fa:43: 75:eb:75:0d:73:1b:8d:fc:bd:a7:2e:38:d3:38:a9: 43:3e:41:fd:2d:79:61:60:89:33:5a:8f:7e:f3:40: ef:b9:e0:e3:3b:d7:d7:7e:61:d8:60:c4:e3:51:18: a5:0c:86:0f:ab:ef:70:c5:23:25:cc:ef:fd:a2:ac: e9:80:86:f4:01:b6:90:ad:bd:cc:4b:e9:f7:8f:2a: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:25:CF:49:9B:C5:E6:C8:AE:10:21:E6:6A:4E:8F:E6:88:C9:34:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/afcf11f7-4d27-3593-9511-7b35e311c3cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv6: 2606:2480::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1c:59:69:93:8a:1a:1d:ef:c2:19:e7:22:4f:cf:7e:a9:83: 9b:4f:5b:72:3b:de:67:3d:76:fe:59:54:ff:27:f3:ae:3e:ef: f7:3b:14:d7:ce:a8:ec:47:f6:a4:94:21:b5:22:9b:15:9f:84: d8:45:e8:74:55:46:af:fa:a5:e2:01:b8:a5:fc:fe:27:70:98: fe:9f:3b:b9:64:29:66:ce:70:e1:9d:bf:c8:c2:4e:28:e1:9c: 24:6f:a3:51:75:5c:28:40:34:0d:89:19:81:6a:1f:e9:48:9f: 11:4a:1f:0d:ad:87:54:b0:73:35:ef:82:45:d0:54:38:0a:46: e7:ae:bc:0a:ed:f6:5d:76:d4:42:b5:d8:5b:90:8a:97:93:9e: f0:24:fd:23:62:fc:86:92:45:4f:36:52:14:32:a6:23:bb:da: d5:c9:31:38:97:0b:6f:ef:95:58:de:0a:6f:3a:28:77:a5:24: 79:53:46:c2:24:d8:9e:2a:b4:5a:da:b8:10:16:f2:f7:f0:96: da:54:3a:13:60:64:a7:38:5d:79:92:18:c6:cc:7d:37:89:37: 6f:b1:9f:40:ef:5b:a5:ff:2c:4d:e2:6a:e1:2c:cd:f8:d6:65: a7:19:5b:83:c0:b4:f3:2a:66:2f:08:f5:e6:89:f9:09:cf:ab: f8:8c:6d:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd3xkQ1KAqXuKCeIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk YmMwNDZhZDAtNmI2My00OThkLWJjMTAtMmQ1NWY1MDhkYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIWyCE7JfDxLBsnNNbhuXStD5tk6Et14mwfi EeUOs2Ii7uhkStqmeX2x5oVN7opas+xlaRfMatS82sk2svDzNpX+pBSeKgaUgGur 92RkKeZsBfHTgTPcO1VAswHlXa0jg6UrnePSUG0yh2/AGYXea9RKjNzOttaTqnZl kOtdIbaqikd4qfHILYQYTRMxt75n65b7+0jMPRRsBvbdL4FJITUFYpCcWYRam2T2 Ovptlglu+kN163UNcxuN/L2nLjjTOKlDPkH9LXlhYIkzWo9+80DvueDjO9fXfmHY YMTjURilDIYPq+9wxSMlzO/9oqzpgIb0AbaQrb3MS+n3jyq5wQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM8lz0mbxebIrhAh5mpOj+aIyTTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWZjZjExZjctNGQyNy0z NTkzLTk1MTEtN2IzNWUzMTFjM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYkgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkHFlpk4oaHe/CGeciT89+qYObT1tyO95nPXb+WVT/J/OuPu/3OxTX zqjsR/aklCG1IpsVn4TYReh0VUav+qXiAbil/P4ncJj+nzu5ZClmznDhnb/Iwk4o 4Zwkb6NRdVwoQDQNiRmBah/pSJ8RSh8NrYdUsHM174JF0FQ4CkbnrrwK7fZddtRC tdhbkIqXk57wJP0jYvyGkkVPNlIUMqYju9rVyTE4lwtv75VY3gpvOih3pSR5U0bC JNieKrRa2rgQFvL38JbaVDoTYGSnOF15khjGzH03iTdvsZ9A71ul/yxN4mrhLM34 1mWnGVuDwLTzKmYvCPXmifkJz6v4jG3B -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org