$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/008f97a1-f7fc-3956-a083-8fdc51872fcd.roa File: 008f97a1-f7fc-3956-a083-8fdc51872fcd.roa (raw, json) Hash identifier: EKVL/B8MTo0DmTjAbx6C7BdbF+mKgrrYMo2ZoGWX8AI= Subject key identifier: AE:ED:58:FE:FF:7B:D0:88:7B:EB:4B:7C:E6:B6:2F:DB:41:70:9E:29 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858478CB697F2E81E84623FB35AC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/008f97a1-f7fc-3956-a083-8fdc51872fcd.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 11404 IP address blocks: 2600:2100::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:97:f2:e8:1e:84:62:3f:b3:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=8f3ef660-9992-4409-9430-27e79a68cb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:d0:f0:94:ef:01:56:a5:b0:fc:b1:ec:03: 03:f5:5c:73:44:58:9f:91:af:d3:20:1f:de:50:24: 0f:2e:f7:3d:d4:5f:6e:34:47:b6:d6:c4:76:53:d3: 6d:ec:c6:58:4f:2c:b0:72:c6:65:80:5c:24:da:14: 7a:01:a1:4e:ae:74:e7:e8:8f:13:81:ad:62:7a:fa: bd:0a:31:09:fd:9c:84:e3:8b:40:ef:05:14:37:44: 42:3d:61:53:61:b4:cc:71:da:db:89:02:ed:4e:b1: 0a:6a:8a:42:62:48:5b:fb:e0:ab:24:b8:80:a7:e5: 95:ae:84:09:56:f7:c1:bd:c4:98:7b:0b:ca:0b:ac: e8:1c:d4:58:c9:74:e9:e2:e8:d6:c9:90:8f:c2:df: f1:83:24:dd:8f:e0:16:70:4a:bd:82:0e:4e:d6:33: 52:d6:3f:ea:ec:6f:1f:f8:26:65:9e:2f:5c:c7:7e: 84:c7:2c:4b:f3:9a:a7:d3:67:6c:51:15:72:87:19: 49:29:c4:cd:b1:9f:c1:db:f5:c0:ad:e4:55:56:b3: 42:b6:32:4a:c8:43:37:47:98:d6:8d:c2:4a:ec:a3: 50:d1:4a:f7:e1:ec:b0:53:8e:5f:a8:e7:f5:08:bd: 98:fa:50:d0:34:c6:07:a4:c1:4f:a8:10:a8:7d:76: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:ED:58:FE:FF:7B:D0:88:7B:EB:4B:7C:E6:B6:2F:DB:41:70:9E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/008f97a1-f7fc-3956-a083-8fdc51872fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2600:2100::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:58:28:46:89:f6:5e:5d:8f:d0:be:98:c2:30:38:61:17:00: e8:c0:5d:6b:4a:d2:76:e5:35:8e:38:68:93:77:ee:cc:b9:3a: f4:c1:a8:18:9c:83:ac:eb:26:eb:ba:7d:5a:3d:0f:a2:4f:fb: ed:ac:e2:3b:0d:d2:2d:ac:5d:75:db:3c:9c:0e:8b:1b:ce:b0: ae:60:0b:41:76:1d:59:bd:7e:1c:0d:0b:a9:14:f4:77:e1:f7: 64:d3:8c:a7:6b:62:b6:13:94:be:ee:ca:e1:85:3f:e6:02:1c: 22:94:97:82:52:93:a8:96:8d:eb:44:4a:10:ee:f1:de:79:1d: 6e:8f:15:10:f8:ad:8e:23:69:bb:69:cd:ac:9c:4a:56:ac:ba: fe:b9:d5:cb:b3:c0:e8:f4:77:0d:36:13:67:3f:36:6a:8b:f6: 86:66:bb:36:e1:94:35:96:15:e3:85:16:6f:96:f2:35:06:0e: 40:a5:9f:f1:d7:43:cd:96:e9:9a:df:fe:0c:a5:35:fd:df:50: 81:a9:15:13:09:f9:f3:62:58:64:60:4f:ba:16:42:9b:ad:1b: 2c:d6:03:16:36:6a:e0:bb:b1:2e:ca:a9:f7:39:b6:e6:19:7b: 70:47:9b:5e:8e:2b:92:9c:01:b7:3b:4c:cd:9a:7c:f2:a5:c0: bc:03:9b:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeMtpfy6B6EYj+zWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk OGYzZWY2NjAtOTk5Mi00NDA5LTk0MzAtMjdlNzlhNjhjYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBbQ8JTvAValsPyx7AMD9VxzRFifka/TIB/e UCQPLvc91F9uNEe21sR2U9Nt7MZYTyywcsZlgFwk2hR6AaFOrnTn6I8Tga1ievq9 CjEJ/ZyE44tA7wUUN0RCPWFTYbTMcdrbiQLtTrEKaopCYkhb++CrJLiAp+WVroQJ VvfBvcSYewvKC6zoHNRYyXTp4ujWyZCPwt/xgyTdj+AWcEq9gg5O1jNS1j/q7G8f +CZlni9cx36ExyxL85qn02dsURVyhxlJKcTNsZ/B2/XAreRVVrNCtjJKyEM3R5jW jcJK7KNQ0Ur34eywU45fqOf1CL2Y+lDQNMYHpMFPqBCofXb3jQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK7tWP7/e9CIe+tLfOa2L9tBcJ4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDA4Zjk3YTEtZjdmYy0z OTU2LWEwODMtOGZkYzUxODcyZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAhADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDWChGifZeXY/QvpjCMDhhFwDowF1rStJ25TWOOGiTd+7MuTr0wagY nIOs6ybrun1aPQ+iT/vtrOI7DdItrF112zycDosbzrCuYAtBdh1ZvX4cDQupFPR3 4fdk04yna2K2E5S+7srhhT/mAhwilJeCUpOolo3rREoQ7vHeeR1ujxUQ+K2OI2m7 ac2snEpWrLr+udXLs8Do9HcNNhNnPzZqi/aGZrs24ZQ1lhXjhRZvlvI1Bg5ApZ/x 10PNluma3/4MpTX931CBqRUTCfnzYlhkYE+6FkKbrRss1gMWNmrgu7Euyqn3Obbm GXtwR5tejiuSnAG3O0zNmnzypcC8A5tF -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:48 2024 by rpki-client on console-ams.rpki-client.org