$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa File: a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa (raw, json) Hash identifier: 5hQdeGJVyE5K+JJx8/WtqHJiYWTbXJnkgpBrT2xfifs= Subject key identifier: D8:09:3F:C5:4E:10:10:8E:50:99:CC:45:3A:48:E1:05:9D:FA:6D:14 Certificate issuer: /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Certificate serial: 010D0C9F43285847E62A1E03236C3FFD307B7500 Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 393732 IP address blocks: 2620:11d:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:1e:03:23:6c:3f:fd:30:7b:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=4bce8eba-5004-40ca-a256-5d1d10b9ae3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:70:b9:03:74:07:06:db:02:28:11:8a:9f:75: 19:80:aa:a1:68:d1:3d:cf:4b:1c:e1:8c:fa:3c:57: 1e:8d:6d:d7:ce:69:3a:e0:5c:b1:68:6f:b5:c3:49: 43:b7:f5:31:b0:c1:c3:bf:e7:e6:34:d5:ab:bd:8e: 1d:b1:b8:97:62:ba:f2:93:ba:a5:72:c4:fa:fb:3a: 66:73:be:74:a6:32:92:5c:77:68:5e:60:2c:2e:8e: 6e:ee:42:dc:40:cf:58:34:23:68:a1:95:df:0d:78: 79:f7:bb:22:af:41:b5:86:fe:5f:70:e6:ec:cd:e5: aa:23:98:26:35:7a:aa:91:28:09:ec:ce:93:2f:de: d0:e9:56:b2:13:f9:7f:dd:14:2f:4c:8c:18:aa:3b: b5:4e:a2:50:b1:fe:97:6a:00:53:0e:8f:8a:90:55: d2:e1:62:c9:79:b9:fe:9d:28:99:47:a3:af:18:45: 89:0e:ba:6a:3d:7d:ae:3d:bb:95:27:0d:16:5f:5a: ee:88:0f:69:fa:f2:cf:24:6e:57:02:20:7b:d2:ee: b4:61:c4:38:cb:92:d5:1c:b5:29:fc:1d:b9:07:87: 64:27:f2:4f:5f:9f:4c:03:35:a3:bc:08:60:e2:d5: f2:2e:e2:d4:c7:59:26:56:b0:ec:c3:0d:b8:ef:34: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:09:3F:C5:4E:10:10:8E:50:99:CC:45:3A:48:E1:05:9D:FA:6D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/a069ba98-ec0f-3135-a0ad-1e8e81e9c0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl X509v3 Authority Key Identifier: keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer sbgp-ipAddrBlock: critical IPv6: 2620:11d:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2c:19:d9:f0:77:55:0a:aa:fd:55:97:26:0b:8e:bc:b8:b6: 2b:45:55:fd:66:bd:5e:6a:e3:01:45:fe:ec:01:52:fe:df:6a: 70:94:f4:3f:12:73:4e:07:f8:c3:2c:0d:96:a7:2e:08:12:d3: a1:a4:ea:79:b6:a0:37:29:6e:d2:a1:4f:7e:48:5c:d0:53:df: 86:e7:ed:be:01:0b:40:c7:46:17:10:3b:ea:c5:de:27:33:e1: 4d:cd:e4:76:5e:ca:84:76:db:e5:b8:30:f3:6b:17:44:34:80: f7:74:d8:dd:12:72:cc:36:a2:32:ab:bd:b5:98:ce:1b:95:24: ea:eb:cb:d9:1e:84:a8:67:94:8d:57:6d:c8:9d:21:e1:9f:b5: 47:3e:ad:d0:0d:39:19:74:02:2e:2e:18:42:85:11:37:6f:8c: 99:52:03:2b:5e:55:53:d3:c6:0c:ab:e8:77:fc:80:b2:1d:5d: 95:92:f8:66:86:7e:1e:0b:f4:da:c3:9b:75:b2:9c:30:9b:78: 31:71:83:23:63:b0:f4:41:88:d9:99:c6:83:c0:cf:5b:38:eb: 93:c7:f2:3b:38:19:8b:65:53:6f:1c:57:99:b6:da:ae:e7:6a: f4:3f:99:f6:ad:1f:91:1a:be:91:a8:38:31:0b:0c:bb:95:cc: 86:2e:a3:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfmKh4DI2w//TB7dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmZmMGUtYTdmMi00ZDkyLWIyZmYtMjRiZmEyMWE3 MzA2MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NGJjZThlYmEtNTAwNC00MGNhLWEyNTYtNWQxZDEwYjlhZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXC5A3QHBtsCKBGKn3UZgKqhaNE9z0sc4Yz6 PFcejW3Xzmk64FyxaG+1w0lDt/UxsMHDv+fmNNWrvY4dsbiXYrryk7qlcsT6+zpm c750pjKSXHdoXmAsLo5u7kLcQM9YNCNooZXfDXh597sir0G1hv5fcObszeWqI5gm NXqqkSgJ7M6TL97Q6VayE/l/3RQvTIwYqju1TqJQsf6XagBTDo+KkFXS4WLJebn+ nSiZR6OvGEWJDrpqPX2uPbuVJw0WX1ruiA9p+vLPJG5XAiB70u60YcQ4y5LVHLUp /B25B4dkJ/JPX59MAzWjvAhg4tXyLuLUx1kmVrDsww247zQXTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgJP8VOEBCOUJnMRTpI4QWd+m0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJi ZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJmYTIxYTczMDYvYTA2OWJhOTgtZWMwZi0z MTM1LWEwYWQtMWU4ZTgxZTljMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjUyYmZmMGUtYTdmMi00ZDkyLWIy ZmYtMjRiZmEyMWE3MzA2LzI1MmJmZjBlLWE3ZjItNGQ5Mi1iMmZmLTI0YmZhMjFh NzMwNi5jcmwwHwYDVR0jBBgwFoAUEzQfORIlo2L0wsx8dJoVC7mUQngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNTJiZmYwZS1hN2YyLTRkOTItYjJmZi0yNGJm YTIxYTczMDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABHVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgsGdnwd1UKqv1VlyYLjry4titFVf1mvV5q4wFF/uwBUv7fanCU 9D8Sc04H+MMsDZanLggS06Gk6nm2oDcpbtKhT35IXNBT34bn7b4BC0DHRhcQO+rF 3icz4U3N5HZeyoR22+W4MPNrF0Q0gPd02N0Scsw2ojKrvbWYzhuVJOrry9kehKhn lI1XbcidIeGftUc+rdANORl0Ai4uGEKFETdvjJlSAyteVVPTxgyr6Hf8gLIdXZWS +GaGfh4L9NrDm3WynDCbeDFxgyNjsPRBiNmZxoPAz1s465PH8js4GYtlU28cV5m2 2q7navQ/mfatH5EavpGoODELDLuVzIYuo2o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:44:30 2024 by rpki-client on console-ams.rpki-client.org