$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa File: 0d8ac99f-834b-392d-8de0-99e74008bf17.roa (raw, json) Hash identifier: lT0sQeAmYD1SsRmmA6aBhXwwSuywNAPjjN8jSE4Cgpk= Subject key identifier: A3:C0:67:E1:B1:F8:C0:65:B2:2A:EF:69:04:CD:29:D7:22:D3:4F:E6 Certificate issuer: /CN=0575435f-d6e9-4d29-9519-fff0e513c74e Certificate serial: 010D0C9F43285847A5D6A0887DC9961ACD5142C0 Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 396319 IP address blocks: 2601:1300::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a0:88:7d:c9:96:1a:cd:51:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=bc10148f-f38d-4fca-b241-fc2feca81139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b2:74:d2:05:5d:df:ba:cf:82:8c:aa:2c:89: 58:bf:21:b7:d5:3e:64:5d:08:57:0e:48:ef:dc:90: 12:8c:67:a3:1b:ac:e2:41:f8:82:d9:f8:59:e1:a2: 71:4f:d6:19:b9:d2:f0:17:59:3a:ce:da:83:d4:4d: 32:16:48:f1:59:bc:2e:3f:61:3e:14:13:e0:f1:47: a0:a9:7c:3e:4a:64:7e:eb:d7:95:d5:ff:63:07:8d: 87:3f:58:1b:ff:b2:f1:43:cb:fd:4a:47:a3:e8:45: c5:5d:db:da:3c:fa:13:1b:da:71:8d:6b:54:de:f9: 48:d4:48:78:08:05:90:3c:cb:2e:50:08:05:dc:ae: d6:26:60:9d:a5:9c:a3:a0:5b:6b:1d:32:6f:ec:0a: 0b:ab:28:ed:ce:07:f9:10:9c:ef:27:dc:f0:c3:45: 74:c3:f7:50:28:d3:29:31:30:24:26:c0:6a:2e:3d: 1f:86:73:1a:8f:e6:39:d3:b1:ad:fb:41:6c:16:7a: d3:ff:3b:21:a0:c8:12:5a:28:e7:f4:d1:92:87:22: c2:78:67:3a:c1:7e:72:7a:d9:73:ef:b9:c4:6a:1a: f0:1a:3f:0d:0d:5d:ac:75:15:0a:71:d7:9d:9d:f7: 92:f6:3f:75:36:90:0c:2d:f2:bf:5d:8a:09:71:9f: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C0:67:E1:B1:F8:C0:65:B2:2A:EF:69:04:CD:29:D7:22:D3:4F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0d8ac99f-834b-392d-8de0-99e74008bf17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl X509v3 Authority Key Identifier: keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer sbgp-ipAddrBlock: critical IPv6: 2601:1300::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d2:1e:29:8a:d0:e1:4d:99:da:75:db:20:33:a4:4c:8a:56: 36:43:5d:80:da:fe:54:54:7d:ae:55:1f:73:6d:52:cc:e0:2f: d6:1b:4b:75:2e:46:10:ae:f7:10:f2:83:ee:eb:0f:e0:94:0a: 63:d3:fd:a2:ff:9d:13:5a:6e:2c:f1:b8:2e:92:48:8a:05:ca: 72:be:a1:db:43:00:42:a8:26:fd:42:00:e7:4f:2c:d2:e2:01: 2f:48:86:49:d4:ea:f8:58:28:0c:07:9e:2b:ae:44:7e:f2:ae: 82:26:5b:c8:87:67:30:08:38:b6:c8:bf:b6:06:ea:d3:d5:e8: 59:6a:1e:38:24:8c:45:11:35:0c:71:4b:97:51:9c:08:05:5a: 38:d9:ae:c8:30:45:51:86:28:d0:6e:48:cd:a7:6d:c0:e9:87: e5:93:43:54:44:e4:19:77:ab:da:84:29:17:1f:8a:b6:93:a5: 0c:a8:55:f8:78:6e:99:89:c8:07:56:0f:be:56:8d:1b:87:90: 40:0e:f6:15:8d:d4:5a:64:f7:dc:6c:6e:d5:95:95:91:b6:b7: fc:43:b2:76:78:77:0a:7b:dc:9a:5e:8f:99:7d:42:3b:1a:05: 4d:65:d3:f1:ad:94:de:48:87:b5:ce:80:b3:8b:57:b1:5f:ff: 9d:02:f0:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEel1qCIfcmWGs1RQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU3NTQzNWYtZDZlOS00ZDI5LTk1MTktZmZmMGU1MTNj NzRlMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YmMxMDE0OGYtZjM4ZC00ZmNhLWIyNDEtZmMyZmVjYTgxMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLJ00gVd37rPgoyqLIlYvyG31T5kXQhXDkjv 3JASjGejG6ziQfiC2fhZ4aJxT9YZudLwF1k6ztqD1E0yFkjxWbwuP2E+FBPg8Ueg qXw+SmR+69eV1f9jB42HP1gb/7LxQ8v9Skej6EXFXdvaPPoTG9pxjWtU3vlI1Eh4 CAWQPMsuUAgF3K7WJmCdpZyjoFtrHTJv7AoLqyjtzgf5EJzvJ9zww0V0w/dQKNMp MTAkJsBqLj0fhnMaj+Y507Gt+0FsFnrT/zshoMgSWijn9NGShyLCeGc6wX5yetlz 77nEahrwGj8NDV2sdRUKcdednfeS9j91NpAMLfK/XYoJcZ8uhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKPAZ+Gx+MBlsirvaQTNKdci00/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTc1 NDM1Zi1kNmU5LTRkMjktOTUxOS1mZmYwZTUxM2M3NGUvMGQ4YWM5OWYtODM0Yi0z OTJkLThkZTAtOTllNzQwMDhiZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDU3NTQzNWYtZDZlOS00ZDI5LTk1 MTktZmZmMGU1MTNjNzRlLzA1NzU0MzVmLWQ2ZTktNGQyOS05NTE5LWZmZjBlNTEz Yzc0ZS5jcmwwHwYDVR0jBBgwFoAUQcnxodTICWqyzEs1fgawzpF+7i0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTc1NDM1Zi1kNmU5LTRkMjktOTUxOS1mZmYw ZTUxM2M3NGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgETADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBv0h4pitDhTZnaddsgM6RMilY2Q12A2v5UVH2uVR9zbVLM4C/WG0t1 LkYQrvcQ8oPu6w/glApj0/2i/50TWm4s8bgukkiKBcpyvqHbQwBCqCb9QgDnTyzS 4gEvSIZJ1Or4WCgMB54rrkR+8q6CJlvIh2cwCDi2yL+2BurT1ehZah44JIxFETUM cUuXUZwIBVo42a7IMEVRhijQbkjNp23A6Yflk0NUROQZd6vahCkXH4q2k6UMqFX4 eG6ZicgHVg++Vo0bh5BADvYVjdRaZPfcbG7VlZWRtrf8Q7J2eHcKe9yaXo+ZfUI7 GgVNZdPxrZTeSIe1zoCzi1exX/+dAvCR -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:26 2024 by rpki-client on console-ams.rpki-client.org