$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa File: ae413136-97ad-3224-a22c-ce71845ef7ec.roa (raw, json) Hash identifier: xqEdJpy3DnoqJoUITJpUVplCIPIXiEYLULwl5cb2H7E= Subject key identifier: A3:87:46:01:6A:24:ED:0A:7C:DF:61:04:17:50:EA:AB:DC:E7:F8:40 Certificate issuer: /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Certificate serial: 010D0C9F432858473A5B8025FBDDD42CAD21BB80 Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 5723 IP address blocks: 2606:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:80:25:fb:dd:d4:2c:ad:21:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=051f3112-911b-49fe-aaf7-c27bdfdc4d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f6:40:d2:f5:81:b0:a1:16:94:4b:06:40:8f: 69:97:a3:38:b1:fa:59:50:57:91:c2:aa:91:2a:d2: f5:5f:ca:78:f3:1a:c6:06:b5:1f:a3:17:64:ea:3e: 1f:60:01:1a:35:a8:31:3b:1b:92:fa:53:42:e1:34: 03:61:a9:e8:55:82:ac:f6:f2:e6:98:28:18:ab:5b: cd:a9:a7:bc:a6:3f:60:8f:a5:16:36:bb:c0:ab:3e: 4e:c7:47:b6:d0:11:92:e7:a4:5b:ce:43:5a:3e:16: ea:64:41:ae:d1:55:26:3a:6b:f7:32:9e:d7:91:47: c0:1c:aa:2a:c2:e3:bf:1e:20:83:4d:2d:fa:81:f0: 1b:5e:95:21:0d:7a:74:c3:b7:98:b5:ec:6a:c2:41: 4e:ac:12:b2:ea:8e:b4:29:d3:74:ca:3d:45:4e:3c: 02:a0:e5:89:9b:68:1e:e3:32:09:e4:ad:ce:cc:e4: a2:62:9e:3f:b4:54:c5:cb:6f:b4:12:1a:64:0a:8f: c1:aa:42:a9:6d:ca:39:6e:66:0a:3f:19:b9:4d:62: b6:00:40:c8:bd:32:64:12:72:a4:e7:70:b1:ed:ee: 84:c9:dd:d8:6a:10:83:31:22:49:c7:41:59:b2:7a: 63:81:2a:0e:37:ee:ec:8c:8c:bd:ce:c1:2e:87:2c: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:87:46:01:6A:24:ED:0A:7C:DF:61:04:17:50:EA:AB:DC:E7:F8:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl X509v3 Authority Key Identifier: keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:8c:5a:e7:d2:82:73:7f:77:1c:af:54:c8:d9:43:fe:08:f5: e0:55:a8:ac:e0:6e:7a:2b:56:40:29:46:21:bb:53:65:17:72: c8:97:48:6a:c9:18:5e:71:73:08:71:4e:f0:b0:60:d9:8c:55: 8c:fa:02:b1:74:5a:39:15:2a:10:53:46:fe:9c:cd:51:4b:8d: e1:d8:75:43:47:b3:a2:a7:b2:8f:65:ad:b4:90:ba:43:e5:9a: 29:b0:db:23:4f:d9:6e:16:d3:b2:2a:4b:cb:c8:be:4c:e6:bc: 4e:dd:0c:b2:07:f6:fd:ac:7c:4d:3b:72:65:96:0e:16:85:cb: 7f:c4:9f:cb:e6:88:c4:2d:67:21:ab:02:e5:56:ab:5f:5f:a4: b0:a2:45:a5:3c:52:11:a2:25:ff:55:de:bd:cf:10:d5:0f:af: 62:0d:83:4c:64:25:33:5f:f3:e7:20:64:f6:67:63:b0:6b:8b: 7c:ff:b0:5c:c5:75:26:c6:9b:08:b2:d7:cd:6c:a2:6a:6d:62: 3b:7e:d9:82:98:9f:f0:f9:c3:a1:ef:8c:6a:3f:9b:e0:a9:c2: bc:f5:e0:47:3c:bd:f0:95:9e:13:4a:1e:10:77:31:35:f7:99: e0:4b:40:e6:48:b8:51:26:2e:f4:76:44:cd:fd:62:32:00:b4: 53:e7:49:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEc6W4Al+93ULK0hu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBk NTlhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk MDUxZjMxMTItOTExYi00OWZlLWFhZjctYzI3YmRmZGM0ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPZA0vWBsKEWlEsGQI9pl6M4sfpZUFeRwqqR KtL1X8p48xrGBrUfoxdk6j4fYAEaNagxOxuS+lNC4TQDYanoVYKs9vLmmCgYq1vN qae8pj9gj6UWNrvAqz5Ox0e20BGS56RbzkNaPhbqZEGu0VUmOmv3Mp7XkUfAHKoq wuO/HiCDTS36gfAbXpUhDXp0w7eYtexqwkFOrBKy6o60KdN0yj1FTjwCoOWJm2ge 4zIJ5K3OzOSiYp4/tFTFy2+0EhpkCo/BqkKpbco5bmYKPxm5TWK2AEDIvTJkEnKk 53Cx7e6Eyd3YahCDMSJJx0FZsnpjgSoON+7sjIy9zsEuhyyvhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKOHRgFqJO0KfN9hBBdQ6qvc5/hAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQy OGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvYWU0MTMxMzYtOTdhZC0z MjI0LWEyMmMtY2U3MTg0NWVmN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzE0MjhkOTktYWQyMy00ZDU4LWI1 ZjQtMTdkYTRhNTBkNTlhL2MxNDI4ZDk5LWFkMjMtNGQ1OC1iNWY0LTE3ZGE0YTUw ZDU5YS5jcmwwHwYDVR0jBBgwFoAUPSeukFqBAFFVHkS35T2ti7Vtfo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2Rh NGE1MGQ1OWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYrADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgjFrn0oJzf3ccr1TI2UP+CPXgVais4G56K1ZAKUYhu1NlF3LIl0hq yRhecXMIcU7wsGDZjFWM+gKxdFo5FSoQU0b+nM1RS43h2HVDR7Oip7KPZa20kLpD 5ZopsNsjT9luFtOyKkvLyL5M5rxO3QyyB/b9rHxNO3Jllg4Whct/xJ/L5ojELWch qwLlVqtfX6SwokWlPFIRoiX/Vd69zxDVD69iDYNMZCUzX/PnIGT2Z2Owa4t8/7Bc xXUmxpsIstfNbKJqbWI7ftmCmJ/w+cOh74xqP5vgqcK89eBHPL3wlZ4TSh4QdzE1 95ngS0DmSLhRJi70dkTN/WIyALRT50nw -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:25 2024 by rpki-client on console-ams.rpki-client.org