$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa File: 67ad4caf-49f0-33da-b621-fa3822cdc420.roa (raw, json) Hash identifier: ho5vvxrlcV9RA0kHWCKmtm+JKociqRR/g4aDQr+opEU= Subject key identifier: 17:25:29:DE:3C:14:F8:D5:96:E1:FE:A0:F9:96:15:6C:16:A1:96:02 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D4048F92499B9BFFDC614B40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 2001:568:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:8f:92:49:9b:9b:ff:dc:61:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=191ba0d3-47b6-470c-a52f-f830f4edc156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:c6:60:9f:ff:30:e1:ea:25:ee:4c:20:ed: e8:62:3c:8a:d2:c5:49:b6:8b:ff:0e:45:38:c1:9f: ca:4a:a0:d2:94:59:75:cd:b8:6d:3c:45:c9:a8:9d: 57:cf:6a:70:0e:7b:91:2f:32:d0:c1:26:32:64:06: 66:af:3c:34:4c:f0:1a:1d:77:30:e8:79:48:0d:4a: 00:7d:9c:a5:66:ad:02:c8:b0:e8:e3:c2:21:ef:42: a6:96:0e:cf:5f:25:71:9b:86:5a:e7:a9:2b:f7:5b: e3:c5:f2:a1:c4:23:39:51:b9:bc:fc:be:86:a7:bb: fe:b8:ff:28:8d:45:56:97:87:c3:75:b4:86:6f:e1: a3:ea:fb:62:7a:e5:c7:63:f6:05:c8:49:ab:c1:e9: eb:35:02:ea:c7:64:0c:8d:4a:96:a1:17:43:bb:1a: 0d:23:f4:53:a4:dc:26:67:d9:1d:ea:06:a4:c5:5e: 48:d1:f9:3d:ca:cf:aa:f9:94:21:25:e2:f5:fe:c9: c4:fb:d0:e7:37:a4:4b:0e:76:3a:83:a9:cd:23:d4: 54:ff:65:f7:6b:dc:02:8a:f8:b7:87:66:02:90:96: f3:62:ee:ec:5b:c7:6c:bd:7c:ec:20:f4:b6:ba:87: 24:6d:10:f6:ab:2c:76:28:78:e9:7b:02:1e:71:16: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:29:DE:3C:14:F8:D5:96:E1:FE:A0:F9:96:15:6C:16:A1:96:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:203::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c7:db:13:9b:14:6f:b3:f8:19:e3:8c:db:b4:37:db:14:04: db:00:5b:9c:37:13:85:30:33:69:eb:ca:0f:5c:58:f4:2e:69: 36:bf:14:6c:72:28:33:b7:ef:c0:ae:f4:90:c5:f0:e2:67:5a: e2:29:5f:d9:b8:4c:23:c2:4f:0f:7e:6f:58:8c:0d:db:e5:85: b2:c0:ac:2a:35:ed:45:02:ec:fb:0f:8b:9e:97:d2:5d:d9:50: 09:89:cd:31:ad:74:6b:2d:54:86:1f:53:c5:91:d2:b7:28:99: 1d:2b:50:7c:01:e2:d5:bb:b9:e8:f0:d4:39:3c:3f:98:ec:1e: cf:d9:90:a5:d7:9a:34:0d:2f:99:89:b0:e2:86:ea:49:6e:e8: 86:37:5d:36:a9:87:e6:ba:ca:8a:41:cc:4a:69:2c:a3:2f:f4: 16:9b:f6:20:7f:fb:02:cb:3a:4d:b1:62:6f:16:7a:3f:9a:eb: e3:03:11:43:94:1d:cc:64:e9:cc:a4:d6:67:f1:f1:5a:03:16: 7d:08:09:0c:2e:29:8c:fa:f4:1e:b5:20:ed:59:2f:78:33:47: 78:dd:ad:6b:bc:bb:54:66:68:46:32:51:52:ca:0d:cc:f5:79: 37:49:d3:f9:c2:af:90:6b:8d:4a:4c:8c:35:02:2d:0b:2e:6c: bb:57:3f:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfUBI+SSZub/9xhS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk MTkxYmEwZDMtNDdiNi00NzBjLWE1MmYtZjgzMGY0ZWRjMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TXGYJ//MOHqJe5MIO3oYjyK0sVJtov/DkU4 wZ/KSqDSlFl1zbhtPEXJqJ1Xz2pwDnuRLzLQwSYyZAZmrzw0TPAaHXcw6HlIDUoA fZylZq0CyLDo48Ih70Kmlg7PXyVxm4Za56kr91vjxfKhxCM5Ubm8/L6Gp7v+uP8o jUVWl4fDdbSGb+Gj6vtieuXHY/YFyEmrwenrNQLqx2QMjUqWoRdDuxoNI/RTpNwm Z9kd6gakxV5I0fk9ys+q+ZQhJeL1/snE+9DnN6RLDnY6g6nNI9RU/2X3a9wCivi3 h2YCkJbzYu7sW8dsvXzsIPS2uockbRD2qyx2KHjpewIecRacVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBclKd48FPjVluH+oPmWFWwWoZYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjdhZDRjYWYtNDlmMC0z M2RhLWI2MjEtZmEzODIyY2RjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAID MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzH2xObFG+z+BnjjNu0N9sUBNsAW5w3E4UwM2nryg9cWPQuaTa/ FGxyKDO378Cu9JDF8OJnWuIpX9m4TCPCTw9+b1iMDdvlhbLArCo17UUC7PsPi56X 0l3ZUAmJzTGtdGstVIYfU8WR0rcomR0rUHwB4tW7uejw1Dk8P5jsHs/ZkKXXmjQN L5mJsOKG6klu6IY3XTaph+a6yopBzEppLKMv9Bab9iB/+wLLOk2xYm8Wej+a6+MD EUOUHcxk6cyk1mfx8VoDFn0ICQwuKYz69B61IO1ZL3gzR3jdrWu8u1RmaEYyUVLK Dcz1eTdJ0/nCr5BrjUpMjDUCLQsubLtXPw8= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:35 2024 by rpki-client on console-ams.rpki-client.org