$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa File: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (raw, json) Hash identifier: Vtn8uzR3/1dSs+3tj8luAQKU7YUT7pG2fLQFvx9fwnA= Subject key identifier: F3:A6:36:C2:4F:CD:C7:A3:69:6E:F1:D6:85:9E:96:16:91:B2:12:58 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F432858475EA627B37D1FE992D736F880 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 395927 IP address blocks: 2604:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:27:b3:7d:1f:e9:92:d7:36:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=c12e607d-e02f-4dab-91b6-6db730f5c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:be:ea:be:9d:f2:18:8e:b0:2c:58:94:ac: 2e:fa:c1:af:e3:d8:5b:08:de:0c:cc:de:56:b9:d0: 07:69:36:6d:07:76:e1:ee:6f:92:9d:48:eb:d3:e7: 4d:7a:a1:28:69:f4:e1:88:f8:38:bb:16:f6:2c:6d: d7:9c:2c:8a:1d:a5:f2:1b:8b:0f:15:db:b5:cc:6f: bb:db:b2:a3:4a:8e:45:84:cc:12:a7:d3:60:cc:6b: 60:1c:6d:aa:b3:cd:ac:ff:56:7c:3b:ce:ea:65:12: 2a:53:72:74:53:1e:88:e6:c0:e9:50:e2:3a:13:47: 5d:97:44:62:41:84:eb:19:b1:59:1a:65:65:5f:33: c3:39:16:23:58:cc:1a:14:bc:6c:6d:13:58:98:07: f7:e5:17:69:17:06:fb:36:12:19:18:83:ee:fa:4b: 36:e0:b3:f1:e2:57:e4:a6:bd:ce:f4:33:f6:66:41: 23:7e:2b:12:f7:0c:a0:9b:b9:e0:cc:4f:a9:4e:85: d5:ef:f6:d7:90:69:ad:2e:fe:ab:2e:75:e8:b7:cb: 22:80:41:9d:c9:8d:15:72:db:05:07:c3:11:9b:94: 19:ab:ac:78:a4:21:05:fb:50:0e:38:32:8a:38:fe: 64:ad:2c:e7:15:94:69:e5:b0:a6:c2:f7:eb:a7:a0: 96:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A6:36:C2:4F:CD:C7:A3:69:6E:F1:D6:85:9E:96:16:91:B2:12:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv6: 2604:f040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:86:48:e5:2e:f4:42:30:bd:61:77:89:5a:7a:ae:57:03:76: 10:c1:d4:ad:b7:3c:d2:72:fe:43:03:69:c2:18:5d:67:b6:1b: c4:90:ab:c4:ee:48:f3:d7:69:a2:c2:47:dc:48:03:c5:39:ed: fa:4c:8b:1a:f8:bb:b9:7a:08:56:e0:4c:f5:be:44:bc:31:a5: c3:02:53:97:40:fb:26:b5:e6:11:76:e1:2c:99:44:34:20:63: 4b:d4:84:17:96:5a:0b:22:0e:5f:b8:5a:ff:88:5d:ad:54:d8: e4:43:27:0d:ca:da:d3:9e:b3:12:84:23:ff:e7:9e:b7:20:72: 35:2d:0f:8a:3a:fc:bb:21:7f:99:9e:d0:3a:99:49:3b:2e:85: 30:1f:42:79:31:a4:f7:35:6e:89:de:c6:6b:93:ee:d8:7b:dd: 7b:96:a2:55:99:55:16:d1:ec:aa:1d:ab:5c:b9:d1:a2:81:ea: c9:b6:a1:ff:f2:d7:8f:dc:88:b8:23:bf:8b:4e:b8:e8:48:43: e5:68:c8:9e:7e:f3:9c:ca:6b:96:fd:c1:51:53:8b:0d:77:0b: 54:26:0c:de:43:0e:fa:e5:45:0a:ea:4d:fb:f8:ff:9e:3e:04: df:f4:8e:7e:3a:cc:16:24:16:d0:48:1f:9d:a6:ad:ff:eb:c9: 1d:e8:e8:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdepiezfR/pktc2+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk YzEyZTYwN2QtZTAyZi00ZGFiLTkxYjYtNmRiNzMwZjVjNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/K+6r6d8hiOsCxYlKwu+sGv49hbCN4MzN5W udAHaTZtB3bh7m+SnUjr0+dNeqEoafThiPg4uxb2LG3XnCyKHaXyG4sPFdu1zG+7 27KjSo5FhMwSp9NgzGtgHG2qs82s/1Z8O87qZRIqU3J0Ux6I5sDpUOI6E0ddl0Ri QYTrGbFZGmVlXzPDORYjWMwaFLxsbRNYmAf35RdpFwb7NhIZGIPu+ks24LPx4lfk pr3O9DP2ZkEjfisS9wygm7ngzE+pToXV7/bXkGmtLv6rLnXot8sigEGdyY0VctsF B8MRm5QZq6x4pCEF+1AOODKKOP5krSznFZRp5bCmwvfrp6CWwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPOmNsJPzcejaW7x1oWelhaRshJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvZjZmZDc4NTMtNzAwMy0z Mjg2LWI4N2UtOGZmNjI1ZjJiYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbhkjlLvRCML1hd4laeq5XA3YQwdSttzzScv5DA2nCGF1nthvEkKvE 7kjz12miwkfcSAPFOe36TIsa+Lu5eghW4Ez1vkS8MaXDAlOXQPsmteYRduEsmUQ0 IGNL1IQXlloLIg5fuFr/iF2tVNjkQycNytrTnrMShCP/5563IHI1LQ+KOvy7IX+Z ntA6mUk7LoUwH0J5MaT3NW6J3sZrk+7Ye917lqJVmVUW0eyqHatcudGigerJtqH/ 8teP3Ii4I7+LTrjoSEPlaMiefvOcymuW/cFRU4sNdwtUJgzeQw765UUK6k37+P+e PgTf9I5+OswWJBbQSB+dpq3/68kd6Oji -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:05 2024 by rpki-client on console-ams.rpki-client.org