$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa File: 5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa (raw, json) Hash identifier: GMEM5Tpuai+Jt3IkJjUbh8C62g7PXn8dDQAOzUdtdNM= Subject key identifier: A0:66:AA:68:DA:AF:22:67:BF:99:99:53:E1:3D:03:65:D6:30:6B:85 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D404906FFDC01DD50D389140 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 2001:56b:3ff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:90:6f:fd:c0:1d:d5:0d:38:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=9bf74dd9-61d9-416a-bfa3-7f090b65fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ed:9d:f9:45:0b:db:45:e9:e4:d6:59:93:cf: 8f:f2:0f:3b:23:e6:9f:5e:dd:61:0d:d7:fd:e1:da: 64:93:b2:cf:29:d9:62:78:1e:01:7e:51:ea:8a:09: 76:dd:8b:26:db:7e:0d:ce:88:6a:85:f4:c6:ce:df: df:86:c5:f5:02:a0:84:97:d9:e6:fc:3a:13:a2:16: e9:6c:a9:da:c6:db:12:dc:1b:db:82:72:4e:c4:0f: 7c:73:8e:17:f0:f6:53:c9:f7:9c:98:22:a2:ab:02: a7:d3:ca:ab:25:54:b4:13:ee:7e:3c:00:1f:a5:22: 16:70:5f:5c:bb:23:8c:da:4b:c7:07:5f:56:34:63: 6f:8d:70:1c:9a:36:7a:65:6f:ec:b1:33:2c:d7:0e: a3:28:66:6d:35:73:ca:c8:e8:a4:79:90:b8:e3:c5: ef:3c:27:0e:83:1a:46:11:c6:16:1e:47:d8:5f:25: 75:4c:45:ea:bb:e0:35:48:0c:7a:b3:a8:32:65:6e: 1e:22:71:7a:49:0c:66:51:e4:4b:85:35:18:f7:65: 12:fc:27:a8:cc:f8:0f:db:bf:30:d0:9a:38:85:98: c2:18:9b:51:31:32:0d:14:26:6c:1f:0a:78:17:04: fb:f7:ca:7c:1f:94:e2:c2:9b:5b:a3:82:47:cd:f4: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:AA:68:DA:AF:22:67:BF:99:99:53:E1:3D:03:65:D6:30:6B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:3ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:13:a2:e8:a0:5a:51:88:a6:3d:ff:e9:da:79:cc:37:00:02: 0e:18:2e:91:47:56:84:fb:e2:b3:f8:fc:cc:5e:40:47:94:31: c3:74:c4:79:7e:b2:54:49:34:d0:35:4a:6d:e4:d5:fd:1a:20: e5:cd:53:bc:c5:02:d6:3c:52:aa:7d:87:7a:ab:9a:e9:ba:cc: a6:af:e0:c5:e0:d9:34:cb:bc:2b:be:dc:f8:85:cf:3b:0a:11: 1f:6e:7c:f5:24:ea:87:f1:7e:1e:cf:62:2d:ad:de:ee:1a:50: d9:a0:e6:6d:46:f6:76:8a:b2:bc:90:87:0a:4b:ca:05:c0:7e: 2f:e5:54:bc:12:8a:b3:a7:a5:c0:28:a6:71:2e:13:1c:a0:55: b4:1a:e6:ee:47:2e:dc:fa:97:00:aa:7d:4e:bc:6f:f7:e4:f7: 4e:b8:ba:a7:46:8c:35:cc:41:83:c8:8e:df:38:74:09:bd:92: 99:ca:b0:f4:86:f2:a7:2b:78:02:70:8d:9a:c2:69:05:c4:5d: 61:e2:04:12:58:ba:64:db:cd:61:5a:af:8b:a7:41:6b:cd:b5: 70:80:a0:34:09:fd:6a:54:e0:4c:19:c6:35:58:d7:f9:52:22: 36:59:68:ef:db:0a:01:31:ea:d2:e8:9c:ed:d5:21:a7:aa:58: 01:d4:9b:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfUBJBv/cAd1Q04kUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk OWJmNzRkZDktNjFkOS00MTZhLWJmYTMtN2YwOTBiNjVmYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie2d+UUL20Xp5NZZk8+P8g87I+afXt1hDdf9 4dpkk7LPKdlieB4BflHqigl23Ysm234NzohqhfTGzt/fhsX1AqCEl9nm/DoTohbp bKnaxtsS3BvbgnJOxA98c44X8PZTyfecmCKiqwKn08qrJVS0E+5+PAAfpSIWcF9c uyOM2kvHB19WNGNvjXAcmjZ6ZW/ssTMs1w6jKGZtNXPKyOikeZC448XvPCcOgxpG EcYWHkfYXyV1TEXqu+A1SAx6s6gyZW4eInF6SQxmUeRLhTUY92US/CeozPgP278w 0Jo4hZjCGJtRMTINFCZsHwp4FwT798p8H5Tiwptbo4JHzfQaKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKBmqmjaryJnv5mZU+E9A2XWMGuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWJlNzI2OTMtZTc3ZS0z MDE4LWFhZjktOWQxYjMzMGYxZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaz/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJoTouigWlGIpj3/6dp5zDcAAg4YLpFHVoT74rP4/MxeQEeUMcN0 xHl+slRJNNA1Sm3k1f0aIOXNU7zFAtY8Uqp9h3qrmum6zKav4MXg2TTLvCu+3PiF zzsKER9ufPUk6ofxfh7PYi2t3u4aUNmg5m1G9naKsryQhwpLygXAfi/lVLwSirOn pcAopnEuExygVbQa5u5HLtz6lwCqfU68b/fk9064uqdGjDXMQYPIjt84dAm9kpnK sPSG8qcreAJwjZrCaQXEXWHiBBJYumTbzWFar4unQWvNtXCAoDQJ/WpU4EwZxjVY 1/lSIjZZaO/bCgEx6tLonO3VIaeqWAHUm5E= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:34 2024 by rpki-client on console-ams.rpki-client.org