$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa File: dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa (raw, json) Hash identifier: 7Hh6jVfB+jdZpZLjf9fAtN9ylGy+ANbsxMhGm5lfedY= Subject key identifier: C3:5E:40:04:BF:E4:EE:FD:54:F3:05:A5:03:70:49:AF:24:45:22:25 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F432858478CB67EB74157154F41A63080 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 400065 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:7e:b7:41:57:15:4f:41:a6:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=f8ddb869-f34b-44ed-96b6-5e56848f3770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:7e:a9:1d:29:a6:f0:d6:72:d5:fa:9b:42: fb:51:87:3c:8f:c5:c8:d4:6f:fb:28:3a:28:e9:6e: 01:aa:2b:13:d2:0a:82:87:6b:4f:0e:39:a1:6f:bf: 8b:7b:8e:d2:52:7f:71:94:2e:76:a0:70:38:4a:95: 8c:12:91:9a:49:63:53:f5:a6:48:00:21:bd:68:a7: c9:16:80:75:c7:da:f3:35:b3:20:e9:ed:6f:06:70: 60:c7:2e:d6:54:74:17:2a:c4:67:c4:bb:c9:d1:e9: 2d:2e:b3:14:dc:ce:7e:ee:f8:86:0b:19:2a:81:82: 8f:56:46:10:f1:cc:1e:f9:38:35:ab:4d:6d:02:20: f9:cb:5a:64:67:27:60:22:5f:58:35:af:75:0b:13: 24:04:59:fe:9b:8e:9d:84:56:73:ff:15:66:fc:ea: d6:32:b9:d8:6c:88:fe:24:c2:f1:a7:fc:88:3f:94: 91:58:8f:ad:49:ba:23:49:4d:3d:ef:05:3d:ba:9a: 6f:90:59:7e:f7:f3:35:13:88:92:4d:fc:d5:3d:6a: 37:62:3e:00:39:4d:c8:d7:76:29:be:03:69:2d:9c: 76:f3:4b:16:bf:b1:4e:f4:09:cb:24:fa:1a:62:90: fb:df:84:10:5c:2e:00:1e:d6:c2:b3:9c:2c:86:13: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:40:04:BF:E4:EE:FD:54:F3:05:A5:03:70:49:AF:24:45:22:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:72:f5:0b:c2:35:98:37:cb:42:ba:af:c2:b7:e7:5a:a8:c6: 0d:ed:1d:50:99:16:c7:23:20:ae:1d:30:34:9e:ce:ab:3f:0f: 0e:a4:d5:36:7d:b9:ca:d7:fa:59:9c:b3:6b:4b:5b:9b:8e:a7: d2:a2:a7:1b:f7:cc:d5:2d:e0:bf:27:cc:1d:df:34:15:b7:c7: 89:23:94:61:7e:3c:29:a6:cd:ab:a3:d4:9b:18:3a:c5:1b:a0: 8b:a2:7e:41:9d:5f:b1:a9:ab:8f:41:b9:1e:a9:e4:26:50:bd: 08:0d:ef:1d:19:b0:d3:3a:52:07:48:ec:21:8e:ee:b7:d9:fb: b1:ad:6c:33:49:e0:55:69:b3:c3:30:39:89:a2:8f:16:79:0b: 40:3d:6a:83:f8:f6:00:28:95:17:6c:2d:a9:2d:99:7a:ab:96: 20:dd:6e:a3:6b:48:d3:97:0a:24:5d:62:5d:82:51:5c:f2:a9: f7:bb:f2:21:37:b0:22:3f:13:fb:fd:e0:71:9a:71:cf:4d:ce: de:23:2f:d6:78:0f:5c:f6:87:5f:81:fe:f7:64:9a:cb:63:77: 39:b2:54:44:73:bb:54:e7:cc:f1:09:8d:c7:e9:bf:bb:8c:42: ea:a6:c7:78:7e:84:88:9f:fa:dd:67:20:a2:5d:94:56:78:fc: d0:34:bb:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeMtn63QVcVT0GmMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk ZjhkZGI4NjktZjM0Yi00NGVkLTk2YjYtNWU1Njg0OGYzNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF5+qR0ppvDWctX6m0L7UYc8j8XI1G/7KDoo 6W4BqisT0gqCh2tPDjmhb7+Le47SUn9xlC52oHA4SpWMEpGaSWNT9aZIACG9aKfJ FoB1x9rzNbMg6e1vBnBgxy7WVHQXKsRnxLvJ0ektLrMU3M5+7viGCxkqgYKPVkYQ 8cwe+Tg1q01tAiD5y1pkZydgIl9YNa91CxMkBFn+m46dhFZz/xVm/OrWMrnYbIj+ JMLxp/yIP5SRWI+tSbojSU097wU9uppvkFl+9/M1E4iSTfzVPWo3Yj4AOU3I13Yp vgNpLZx280sWv7FO9AnLJPoaYpD734QQXC4AHtbCs5wshhM4iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNeQAS/5O79VPMFpQNwSa8kRSIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZGQ0ZDg0ZGItN2EzZC0z NWFkLWExZGItNmU3NzBjMWM3NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJy9QvCNZg3y0K6r8K351qoxg3tHVCZFscjIK4dMDSezqs/Dw6k 1TZ9ucrX+lmcs2tLW5uOp9Kipxv3zNUt4L8nzB3fNBW3x4kjlGF+PCmmzauj1JsY OsUboIuifkGdX7Gpq49BuR6p5CZQvQgN7x0ZsNM6UgdI7CGO7rfZ+7GtbDNJ4FVp s8MwOYmijxZ5C0A9aoP49gAolRdsLaktmXqrliDdbqNrSNOXCiRdYl2CUVzyqfe7 8iE3sCI/E/v94HGacc9Nzt4jL9Z4D1z2h1+B/vdkmstjdzmyVERzu1TnzPEJjcfp v7uMQuqmx3h+hIif+t1nIKJdlFZ4/NA0u0s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:00 2024 by rpki-client on console-ams.rpki-client.org