$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa File: efc9d516-031f-362d-af74-4f185e826d9d.roa (raw, json) Hash identifier: UPl8eA4V6LxrZO3pQeunHN5RFT/N9itawUnzBPYqcH8= Subject key identifier: 02:EC:62:70:46:FB:09:08:91:4F:33:38:9B:DD:51:E7:23:22:E6:1A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847D4048B6DF266945251754F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 852 IP address blocks: 2001:568:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:8b:6d:f2:66:94:52:51:75:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=ac56808e-ca7c-4a5b-bec6-58ae9bb9a7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cd:5a:d5:79:7f:cc:15:f7:22:cc:68:ca:0c: a0:a6:29:1f:bc:53:60:23:e7:a3:32:68:2f:ef:f6: 95:e9:e1:b0:40:4d:b6:76:e3:47:b7:9c:c0:c3:af: 2b:d0:0f:72:6b:33:85:15:bb:0d:2e:47:b8:1c:d8: e3:6b:c2:7f:47:10:32:9e:60:8f:79:e9:3b:c5:0a: 58:aa:9f:a2:f3:2f:b6:1f:41:d5:b3:81:78:04:94: d7:6e:68:93:86:92:76:6e:64:6a:da:77:48:e6:da: 7e:ee:8b:7c:09:f7:8b:53:fb:0d:bf:10:9d:10:fc: 7e:41:0b:cf:d6:1d:ef:56:5d:dd:93:18:3d:9d:85: 9d:96:05:df:5e:70:7e:90:68:4c:48:52:f5:ba:4d: 3b:2b:69:0b:1f:c4:ae:ff:72:d6:dc:5e:ea:6a:44: 96:76:af:fb:76:e6:39:c2:c0:81:9b:43:79:92:21: a8:73:df:24:d9:6a:88:2c:ca:cc:34:52:94:b0:45: c5:3d:b1:a0:f5:cc:fc:5a:ed:c3:d1:08:87:a3:50: 58:43:b0:1d:a7:c4:b8:89:af:59:70:8f:ed:d5:fe: cb:d1:1e:bd:85:83:43:1f:17:8d:5c:9f:1c:5a:9a: f0:0f:a5:3a:96:b4:70:b2:2e:dc:47:d2:39:d7:4f: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:62:70:46:FB:09:08:91:4F:33:38:9B:DD:51:E7:23:22:E6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:85:c0:72:68:fd:6d:a0:38:03:84:9f:cf:e5:3f:b4:fd:3c: ed:95:c5:c0:ad:a9:b5:bd:b3:cc:cc:34:4d:b6:37:07:5a:8f: 3b:ae:f3:c3:9f:3e:dd:11:93:25:90:a2:1e:05:20:ee:42:a0: c8:6c:ca:bb:8b:92:29:0e:81:d2:ab:62:52:3d:5b:fd:d1:f3: 14:57:c8:a6:cc:17:4b:99:cc:cd:c1:58:e8:12:48:05:0e:5c: 25:77:b9:8e:36:40:f8:5e:c5:04:b2:39:31:28:38:ff:af:f9: 8d:b8:46:de:18:8f:fa:1e:f8:eb:f7:a6:f5:ee:3f:35:c6:ae: ab:d6:c9:a9:5f:7c:60:af:87:ec:1a:bd:cc:9c:3b:74:de:5b: 35:87:c0:87:b3:1c:ad:f0:43:c5:89:3d:fc:6c:c0:ab:64:28: 5a:7c:91:35:7b:47:c1:9b:f6:ec:14:c5:3c:ec:08:f2:cb:8c: f1:03:e1:8c:20:58:6b:08:2f:bb:a9:77:f5:67:02:94:e9:6a: 12:dc:11:f3:99:63:2c:65:a2:83:cd:d9:7e:01:5e:58:5a:b6: a6:27:e2:a5:9a:10:2d:d0:44:39:d5:09:ec:50:6b:42:05:4f: 61:a2:08:22:48:90:77:b7:e6:75:a6:5c:54:f5:48:e0:08:a2: d6:b4:10:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfUBItt8maUUlF1TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk YWM1NjgwOGUtY2E3Yy00YTViLWJlYzYtNThhZTliYjlhN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c1a1Xl/zBX3IsxoygygpikfvFNgI+ejMmgv 7/aV6eGwQE22duNHt5zAw68r0A9yazOFFbsNLke4HNjja8J/RxAynmCPeek7xQpY qp+i8y+2H0HVs4F4BJTXbmiThpJ2bmRq2ndI5tp+7ot8CfeLU/sNvxCdEPx+QQvP 1h3vVl3dkxg9nYWdlgXfXnB+kGhMSFL1uk07K2kLH8Su/3LW3F7qakSWdq/7duY5 wsCBm0N5kiGoc98k2WqILMrMNFKUsEXFPbGg9cz8Wu3D0QiHo1BYQ7Adp8S4ia9Z cI/t1f7L0R69hYNDHxeNXJ8cWprwD6U6lrRwsi7cR9I5108rrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFALsYnBG+wkIkU8zOJvdUecjIuYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWZjOWQ1MTYtMDMxZi0z NjJkLWFmNzQtNGYxODVlODI2ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmFwHJo/W2gOAOEn8/lP7T9PO2VxcCtqbW9s8zMNE22Nwdajzuu 88OfPt0RkyWQoh4FIO5CoMhsyruLkikOgdKrYlI9W/3R8xRXyKbMF0uZzM3BWOgS SAUOXCV3uY42QPhexQSyOTEoOP+v+Y24Rt4Yj/oe+Ov3pvXuPzXGrqvWyalffGCv h+wavcycO3TeWzWHwIezHK3wQ8WJPfxswKtkKFp8kTV7R8Gb9uwUxTzsCPLLjPED 4YwgWGsIL7upd/VnApTpahLcEfOZYyxlooPN2X4BXlhatqYn4qWaEC3QRDnVCexQ a0IFT2GiCCJIkHe35nWmXFT1SOAIota0EN4= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:40 2024 by rpki-client on console-ams.rpki-client.org