$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa File: b801981e-8b4e-342a-a6f6-9042400af3fd.roa (raw, json) Hash identifier: ctbO82LKJzHso71ZtWMNO+01Wc+qZc5bVzCXQW7mkCc= Subject key identifier: FE:FA:AA:85:48:39:F3:6A:B6:0F:79:00:22:46:48:E7:4E:99:33:29 Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Certificate serial: 010D0C9F432858479AABE749A56B685114CB7700 Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 27580 IP address blocks: 2604:f1c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e7:49:a5:6b:68:51:14:cb:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=d41786e9-05ff-477f-a42d-2cc8c4cc5454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:c7:b9:2b:1b:f4:c6:ec:3b:1a:eb:93:4a: 49:95:f0:c7:38:31:04:8b:e9:34:7e:55:39:7e:e6: 2f:b3:d1:e3:a8:61:1d:78:65:75:b8:16:6f:f8:99: 65:f7:00:86:7e:16:5a:76:14:69:ac:c6:ea:15:e8: dc:e1:6c:f9:a1:cb:f4:9d:d6:d8:8f:f5:b2:29:68: f4:4a:dc:b4:a0:e6:53:18:79:88:d7:af:a1:64:83: 69:3c:23:a4:16:5d:7d:a3:60:d0:c2:7e:f2:fa:62: a3:f6:8d:5b:e4:fd:34:b4:e5:f9:d5:3f:ed:c6:75: e6:69:37:20:df:35:75:57:a2:e9:7c:87:35:06:bd: 79:e4:28:de:98:84:82:e6:48:04:09:3b:22:17:43: ea:78:6e:e8:3a:89:03:3b:ed:1b:65:81:33:08:03: c5:ef:58:b2:2c:99:dd:3d:d0:c6:cf:fe:01:86:4c: 1b:af:61:d9:17:89:88:36:aa:a5:4a:04:5e:11:23: 48:87:c0:00:04:6d:c2:10:67:cc:4a:8b:e0:10:c1: 64:b0:59:9c:1a:d6:43:eb:2a:b5:91:b8:c2:a7:15: 2d:02:49:5e:29:e0:67:9c:b8:48:47:b4:b1:be:65: ca:bc:15:a5:5a:40:60:05:e9:87:5f:fd:99:c3:17: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FA:AA:85:48:39:F3:6A:B6:0F:79:00:22:46:48:E7:4E:99:33:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/b801981e-8b4e-342a-a6f6-9042400af3fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl X509v3 Authority Key Identifier: keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer sbgp-ipAddrBlock: critical IPv6: 2604:f1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ca:ec:92:e2:fe:1b:e7:22:2b:da:8b:ce:58:ca:0f:57:53: cc:0b:cf:a1:fd:1c:30:81:a8:38:12:51:06:88:c5:55:df:79: 6e:af:65:cd:2e:d4:56:46:a1:55:a7:53:9c:ad:b9:f8:af:d8: 49:67:2b:aa:ea:0f:4c:b9:35:57:67:79:a7:ca:4e:6a:0c:57: 9b:84:55:75:43:2e:7a:ff:48:43:0e:39:6f:cc:bd:47:98:d5: 83:ec:a1:3b:17:86:43:c4:ba:ff:1e:e9:81:55:0b:97:ff:ad: 64:8f:32:4a:a9:26:ed:ad:26:6e:b7:23:35:06:ff:da:f9:04: 0e:fd:4a:28:41:0d:b5:86:9b:06:09:74:e9:59:38:00:92:70: b5:0e:83:45:0c:e5:b8:e6:cc:46:f7:97:ff:72:73:b8:65:48: c7:73:96:c0:20:7a:41:5c:7c:a2:7b:94:18:a5:58:8c:19:34: 2b:cb:c4:db:e8:90:02:61:59:21:e3:fe:7d:ae:23:bf:25:38: 30:8d:bf:0c:7f:0e:55:58:5e:a3:ff:9a:d0:59:49:6b:84:8d: f7:32:66:97:ce:00:b8:80:18:60:b0:84:85:ff:52:85:32:e5: ac:92:4d:b8:68:d7:60:0d:47:b5:e7:03:03:c4:71:ec:0b:1a: d8:bd:b0:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeaq+dJpWtoURTLdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YzgzZmEtZmZjYi00YzE0LTllM2ItYzNmYTQwNTYx YWQ5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk ZDQxNzg2ZTktMDVmZi00NzdmLWE0MmQtMmNjOGM0Y2M1NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRzHuSsb9MbsOxrrk0pJlfDHODEEi+k0flU5 fuYvs9HjqGEdeGV1uBZv+Jll9wCGfhZadhRprMbqFejc4Wz5ocv0ndbYj/WyKWj0 Sty0oOZTGHmI16+hZINpPCOkFl19o2DQwn7y+mKj9o1b5P00tOX51T/txnXmaTcg 3zV1V6LpfIc1Br155CjemISC5kgECTsiF0PqeG7oOokDO+0bZYEzCAPF71iyLJnd PdDGz/4Bhkwbr2HZF4mINqqlSgReESNIh8AABG3CEGfMSovgEMFksFmcGtZD6yq1 kbjCpxUtAkleKeBnnLhIR7SxvmXKvBWlWkBgBemHX/2Zwxf4iwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP76qoVIOfNqtg95ACJGSOdOmTMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YThj ODNmYS1mZmNiLTRjMTQtOWUzYi1jM2ZhNDA1NjFhZDkvYjgwMTk4MWUtOGI0ZS0z NDJhLWE2ZjYtOTA0MjQwMGFmM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGE4YzgzZmEtZmZjYi00YzE0LTll M2ItYzNmYTQwNTYxYWQ5LzhhOGM4M2ZhLWZmY2ItNGMxNC05ZTNiLWMzZmE0MDU2 MWFkOS5jcmwwHwYDVR0jBBgwFoAUjccdmxK7+UZwIdMaRkD1JyDt1ZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YThjODNmYS1mZmNiLTRjMTQtOWUzYi1jM2Zh NDA1NjFhZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAayuyS4v4b5yIr2ovOWMoPV1PMC8+h/Rwwgag4ElEGiMVV33lur2XN LtRWRqFVp1Ocrbn4r9hJZyuq6g9MuTVXZ3mnyk5qDFebhFV1Qy56/0hDDjlvzL1H mNWD7KE7F4ZDxLr/HumBVQuX/61kjzJKqSbtrSZutyM1Bv/a+QQO/UooQQ21hpsG CXTpWTgAknC1DoNFDOW45sxG95f/cnO4ZUjHc5bAIHpBXHyie5QYpViMGTQry8Tb 6JACYVkh4/59riO/JTgwjb8Mfw5VWF6j/5rQWUlrhI33MmaXzgC4gBhgsISF/1KF MuWskk24aNdgDUe15wMDxHHsCxrYvbCk -----END CERTIFICATE-----Generated at Fri Nov 22 08:05:45 2024 by rpki-client on console-ams.rpki-client.org