$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: 7qGQld0cSx28An7ZTRWrpQ1hChJ3rwTHTOHSmWUoijs= Subject key identifier: 75:72:E9:B3:E1:B6:BF:DF:45:3A:5D:34:AF:80:86:B4:A9:68:91:43 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F43285847DF2F5386952A955E968E0800 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Thu 14 Nov 2024 02:00:27 +0000 ROA not before: Thu 14 Nov 2024 02:00:27 +0000 ROA not after: Wed 12 Feb 2025 02:00:27 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:df:2f:53:86:95:2a:95:5e:96:8e:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Nov 14 02:00:27 2024 GMT Not After : Feb 12 02:00:27 2025 GMT Subject: CN=7649ca6f-a007-4c8d-b9c5-039ceabd7009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:e0:6e:43:5a:6c:9b:c8:6d:d0:02:35:22: 8d:0b:84:35:4b:fc:6c:5b:eb:2f:64:70:e2:cd:32: 17:48:c9:2c:b1:82:41:af:b0:1a:91:30:45:ed:6a: 44:5f:f1:23:59:d0:45:af:9e:cf:52:70:7d:67:4f: 27:85:ff:87:e5:a2:41:f0:46:84:c1:83:0d:27:8f: cd:51:1b:4d:7a:4b:5d:4a:be:47:b6:1b:21:40:34: a6:a9:ac:64:5f:2f:f8:02:d8:b3:ab:52:d0:b7:f0: ce:9b:ac:85:91:ba:f5:39:d8:d2:36:8c:f1:32:b1: 6c:ed:fd:29:cf:e7:e6:69:fa:b6:a6:89:0e:51:e6: 67:2a:fd:48:4b:8d:50:a2:a6:12:a6:85:26:67:71: 2e:e8:4d:08:20:eb:3b:66:71:a3:33:b3:15:dd:60: ff:44:62:85:cb:dc:50:dc:66:95:96:35:c1:7c:9e: 37:a0:11:96:1f:5f:94:0b:60:e7:e8:89:1a:17:b0: a3:a0:28:33:46:0f:ea:30:76:45:28:87:8c:51:b2: d9:07:59:45:3a:d0:2d:62:77:9f:9e:73:de:82:61: 96:58:f3:07:b5:36:cc:da:3b:31:77:1e:ef:ae:63: 5f:0b:84:bd:b7:5f:24:ed:19:33:f1:9e:3d:d6:74: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:72:E9:B3:E1:B6:BF:DF:45:3A:5D:34:AF:80:86:B4:A9:68:91:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ad:ed:77:5d:d5:35:d8:ff:55:b0:35:c2:9f:d3:1a:bd:09: ee:7e:1d:8c:d2:60:72:0d:61:df:b4:64:e3:2d:5c:f7:84:86: 85:48:53:79:18:21:04:f7:ab:a7:66:e6:02:ac:e6:37:f8:9c: 9a:3e:12:b2:8d:54:b5:6b:12:f1:17:d4:eb:5e:e9:8f:4c:d0: 3a:72:16:11:76:b8:6e:90:a5:6d:c1:b1:1f:32:68:4b:88:9e: 2a:eb:0e:47:4a:de:d0:94:8e:80:8e:41:d2:8f:e5:67:cc:dd: 35:5a:44:f1:53:c1:93:2d:82:61:14:4c:e4:9b:93:ad:6c:0e: da:91:31:60:b6:35:c9:46:64:f5:07:47:86:20:9b:a0:89:64: 2e:19:18:82:94:d6:fe:d8:d5:a9:49:db:2d:b3:ef:71:55:8e: 61:4a:cd:1d:c9:f1:4b:02:56:21:3b:5c:9f:2d:6f:33:9d:d1: 53:73:67:03:70:f4:6c:6e:d8:42:dc:16:c5:13:9d:ea:e5:dc: c8:32:63:ec:bc:3a:00:dd:22:b9:1a:9e:ce:d3:55:15:78:90: d5:45:24:37:45:1e:b2:1e:95:7a:64:d1:e2:08:12:dc:f6:23: 51:54:56:a0:c9:52:a2:6e:b6:f7:1c:09:30:22:04:9f:17:df: a5:4d:e7:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEffL1OGlSqVXpaOCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk NzY0OWNhNmYtYTAwNy00YzhkLWI5YzUtMDM5Y2VhYmQ3MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSjgbkNabJvIbdACNSKNC4Q1S/xsW+svZHDi zTIXSMkssYJBr7AakTBF7WpEX/EjWdBFr57PUnB9Z08nhf+H5aJB8EaEwYMNJ4/N URtNektdSr5HthshQDSmqaxkXy/4Atizq1LQt/DOm6yFkbr1OdjSNozxMrFs7f0p z+fmafq2pokOUeZnKv1IS41QoqYSpoUmZ3Eu6E0IIOs7ZnGjM7MV3WD/RGKFy9xQ 3GaVljXBfJ43oBGWH1+UC2Dn6IkaF7CjoCgzRg/qMHZFKIeMUbLZB1lFOtAtYnef nnPegmGWWPMHtTbM2jsxdx7vrmNfC4S9t18k7Rkz8Z491nTAxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHVy6bPhtr/fRTpdNK+AhrSpaJFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMre13XdU12P9VsDXCn9MavQnufh2M0mByDWHftGTjLVz3hIaFSFN5 GCEE96unZuYCrOY3+JyaPhKyjVS1axLxF9TrXumPTNA6chYRdrhukKVtwbEfMmhL iJ4q6w5HSt7QlI6AjkHSj+VnzN01WkTxU8GTLYJhFEzkm5OtbA7akTFgtjXJRmT1 B0eGIJugiWQuGRiClNb+2NWpSdsts+9xVY5hSs0dyfFLAlYhO1yfLW8zndFTc2cD cPRsbthC3BbFE53q5dzIMmPsvDoA3SK5Gp7O01UVeJDVRSQ3RR6yHpV6ZNHiCBLc 9iNRVFagyVKibrb3HAkwIgSfF9+lTecN -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:09 2024 by rpki-client on console-ams.rpki-client.org