$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa File: c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa (raw, json) Hash identifier: E4EMjtRXknWLdLBQokTGzfrkBK6yLEfM+VLutMpzzTI= Subject key identifier: 02:90:FE:92:F4:8D:05:4A:08:8E:9C:B5:A3:16:D0:0E:D0:F8:8C:28 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DF2F482A36BCB81F235B2900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 2001:569:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:48:2a:36:bc:b8:1f:23:5b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=e56119a8-797f-4114-8ae2-b96b73f0b4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:5c:17:17:6b:d7:06:ef:c6:7c:4e:2c:91: fc:d8:d1:e0:a7:e6:3d:4a:fe:24:c3:55:18:c5:e3: 3b:6a:ac:67:5b:34:1d:c1:01:83:59:f2:db:25:2c: d6:53:3f:99:84:e6:09:de:93:b0:d8:f7:d2:3c:37: 38:0e:1c:11:d8:e6:7d:ad:8b:1d:7d:b0:d2:7c:a4: aa:44:64:f4:df:18:a0:7e:1d:a4:66:ea:8f:13:88: b5:8c:eb:9d:59:ce:32:a9:60:06:30:b2:92:e8:26: 5c:1b:19:ff:69:1b:90:f9:ff:9f:ef:a6:44:23:aa: 54:28:21:55:cc:2a:48:f9:e4:fb:92:65:2d:30:1e: c2:6a:f3:ff:53:15:d5:e4:79:f9:89:15:db:f3:8b: 00:c6:97:6b:75:c6:c1:26:84:f4:25:51:e9:9a:02: 5c:ca:ca:d5:9c:4b:70:d7:8b:c4:62:b2:b5:24:30: 0c:3b:91:fa:75:df:63:7c:6e:e1:85:2d:75:82:0f: 08:c1:2c:27:e8:a1:eb:ce:a3:42:d4:bb:ca:d7:a9: 79:00:f8:37:55:35:c0:81:c9:d5:87:78:a0:f6:f8: 94:4d:17:f9:90:90:f9:d0:92:f3:3f:19:ab:e0:ae: bb:67:9c:c9:95:73:c1:b4:ed:5a:98:55:c6:76:3b: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:90:FE:92:F4:8D:05:4A:08:8E:9C:B5:A3:16:D0:0E:D0:F8:8C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b4:e8:22:6d:ec:61:7c:c9:e3:3b:1f:14:38:50:d9:91:ad: 86:54:7c:2f:17:9d:68:81:41:24:e5:9c:a7:92:21:89:5e:5b: c0:16:5c:fb:74:47:e4:99:73:98:8f:06:2d:d5:47:76:f0:ca: 35:01:dd:10:64:34:93:4c:9c:9b:79:d1:5e:b9:8a:9e:4d:7b: 86:aa:d4:a3:1e:91:b2:8c:27:cc:9a:80:39:ed:d9:95:43:64: 23:ad:91:2c:d6:a5:30:08:64:bc:00:29:79:7f:2e:bf:7a:31: 2e:c7:a6:3d:b8:4a:10:10:4e:cc:b8:87:18:ac:56:1f:70:aa: ed:ce:91:11:53:d9:81:55:1a:98:6d:33:19:0a:43:58:4e:96: ef:5b:d8:98:21:f9:1e:52:da:bd:16:bb:4b:0d:44:b7:d6:75: e2:92:89:54:bd:ea:6f:b9:9c:e1:2b:66:49:64:76:3c:d7:f3: e8:4f:70:b6:8b:a3:2f:86:fc:03:47:d6:55:15:2b:fb:04:a0: 82:49:1c:4c:4b:28:66:c0:97:77:01:0d:72:fb:f6:f2:04:f7: 35:4d:be:c7:cc:f1:65:b8:2e:11:86:06:02:16:f5:23:31:8c: 0b:00:7a:1e:1d:09:de:5b:7a:a4:dd:64:d6:32:67:65:1c:c9: db:30:d4:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEffL0gqNry4HyNbKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk ZTU2MTE5YTgtNzk3Zi00MTE0LThhZTItYjk2YjczZjBiNGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQlcFxdr1wbvxnxOLJH82NHgp+Y9Sv4kw1UY xeM7aqxnWzQdwQGDWfLbJSzWUz+ZhOYJ3pOw2PfSPDc4DhwR2OZ9rYsdfbDSfKSq RGT03xigfh2kZuqPE4i1jOudWc4yqWAGMLKS6CZcGxn/aRuQ+f+f76ZEI6pUKCFV zCpI+eT7kmUtMB7CavP/UxXV5Hn5iRXb84sAxpdrdcbBJoT0JVHpmgJcysrVnEtw 14vEYrK1JDAMO5H6dd9jfG7hhS11gg8IwSwn6KHrzqNC1LvK16l5APg3VTXAgcnV h3ig9viUTRf5kJD50JLzPxmr4K67Z5zJlXPBtO1amFXGdjuUyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAKQ/pL0jQVKCI6ctaMW0A7Q+IwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzFkYzI3YTAtZGJjMi0z N2Y5LWJhYjctZTMzYzFlN2E2NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaQAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJK06CJt7GF8yeM7HxQ4UNmRrYZUfC8XnWiBQSTlnKeSIYleW8AW XPt0R+SZc5iPBi3VR3bwyjUB3RBkNJNMnJt50V65ip5Ne4aq1KMekbKMJ8yagDnt 2ZVDZCOtkSzWpTAIZLwAKXl/Lr96MS7Hpj24ShAQTsy4hxisVh9wqu3OkRFT2YFV GphtMxkKQ1hOlu9b2Jgh+R5S2r0Wu0sNRLfWdeKSiVS96m+5nOErZklkdjzX8+hP cLaLoy+G/ANH1lUVK/sEoIJJHExLKGbAl3cBDXL79vIE9zVNvsfM8WW4LhGGBgIW 9SMxjAsAeh4dCd5beqTdZNYyZ2Ucydsw1J0= -----END CERTIFICATE-----Generated at Fri Nov 22 14:29:21 2024 by rpki-client on console-ams.rpki-client.org