$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa File: 550364f5-a080-3961-a4d4-44ad3f54dcef.roa (raw, json) Hash identifier: keVl0ZyqZbmdCcwCJbOkhcR4pvdsmWW6XwXhvJ5SK/E= Subject key identifier: 21:A2:B7:AC:20:D5:65:C0:62:A9:F1:56:C1:19:92:9C:1D:06:54:1F Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584726D08F36BF520501BE1B4CA0 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 397162 IP address blocks: 2604:f581::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:8f:36:bf:52:05:01:be:1b:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=182b390e-9e94-4cde-91cb-fb80ddbdd85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:3e:d7:12:9c:48:87:4c:26:bb:bc:0f:78: 3a:34:de:47:b3:11:9e:9e:25:e8:6f:30:e8:72:d1: 06:76:19:11:df:3d:47:bf:47:2d:0e:be:4d:7a:ae: e2:7c:35:8e:80:f4:08:88:89:62:a1:1e:1a:49:a9: 83:f6:1f:0d:df:37:da:89:b7:04:e6:62:95:cf:6c: 88:19:b6:51:f0:4d:e7:f1:90:7a:4c:e4:39:50:53: 62:9a:ac:52:40:82:38:de:2b:0d:03:ac:e8:20:ed: f5:31:a0:3e:7c:16:19:f0:f1:00:53:5d:8a:ed:e5: f3:24:62:5b:b2:50:f0:d3:ca:fc:d9:db:96:da:32: 31:9f:8e:14:96:36:21:32:65:e6:3e:6e:bf:f6:48: 5f:9e:31:47:07:f3:71:b5:68:d5:c2:70:4d:ba:c2: 4c:2f:4f:37:ed:a9:e5:1c:e1:06:58:ef:21:16:fe: 87:00:f0:e8:0d:f7:3d:63:65:67:02:66:53:be:e2: f0:61:f1:34:b7:e5:7e:05:30:e6:50:cd:2b:1e:5f: 28:ae:78:43:d9:17:4d:06:87:fe:a2:2e:0d:5e:46: 67:6a:e7:71:68:7f:70:c9:98:24:b1:ac:dc:a0:af: fe:cc:77:63:09:8f:41:cb:ee:5e:0e:f8:ba:9b:8f: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A2:B7:AC:20:D5:65:C0:62:A9:F1:56:C1:19:92:9C:1D:06:54:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f581::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c2:07:05:a8:a3:e2:00:ad:03:3b:69:b5:81:8a:29:75:9d: ae:2b:27:dc:50:b1:20:3e:15:10:81:26:f0:50:ca:a7:57:e4: 1d:59:bc:6a:16:91:49:fb:eb:bf:fe:32:ff:b7:75:3b:bd:09: 93:be:44:46:f9:80:b0:f6:bb:7f:37:81:ca:98:59:24:47:f6: 3a:47:fa:3e:0c:2a:b2:85:60:62:2b:95:85:c9:46:54:23:99: 0f:e2:5d:09:e1:ec:72:99:7b:02:ce:44:16:99:74:98:79:62: c2:01:ad:86:d8:b3:3c:5c:41:49:2a:43:62:40:9d:92:f2:2d: c0:9f:74:75:fe:1f:81:33:c4:af:eb:36:17:3d:65:0c:3f:72: 44:0a:34:cf:3d:f4:91:f5:c7:4b:a7:1b:6c:36:be:44:3e:1c: f2:ed:d3:47:9a:49:85:be:78:9d:06:23:61:0b:bb:63:d1:d5: b8:d7:55:33:29:80:73:22:7c:6a:27:9c:5e:0e:16:dd:8e:ce: d7:60:5b:94:70:f8:32:26:0a:7c:36:8b:3f:cb:b8:4d:a1:5e: 60:99:f1:28:6a:0f:d5:c2:9b:d1:8d:4d:ef:a4:5e:0b:83:15: 47:ab:20:37:27:9b:6d:ef:b7:d2:f6:33:2c:78:c5:32:19:c0: c4:96:bb:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcm0I82v1IFAb4bTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk MTgyYjM5MGUtOWU5NC00Y2RlLTkxY2ItZmI4MGRkYmRkODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoU+1xKcSIdMJru8D3g6NN5HsxGeniXobzDo ctEGdhkR3z1Hv0ctDr5Neq7ifDWOgPQIiIlioR4aSamD9h8N3zfaibcE5mKVz2yI GbZR8E3n8ZB6TOQ5UFNimqxSQII43isNA6zoIO31MaA+fBYZ8PEAU12K7eXzJGJb slDw08r82duW2jIxn44UljYhMmXmPm6/9khfnjFHB/NxtWjVwnBNusJML0837anl HOEGWO8hFv6HAPDoDfc9Y2VnAmZTvuLwYfE0t+V+BTDmUM0rHl8ornhD2RdNBof+ oi4NXkZnaudxaH9wyZgksazcoK/+zHdjCY9By+5eDvi6m4+6FwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCGit6wg1WXAYqnxVsEZkpwdBlQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNTUwMzY0ZjUtYTA4MC0z OTYxLWE0ZDQtNDRhZDNmNTRkY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1gTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqwgcFqKPiAK0DO2m1gYopdZ2uKyfcULEgPhUQgSbwUMqnV+QdWbxq FpFJ++u//jL/t3U7vQmTvkRG+YCw9rt/N4HKmFkkR/Y6R/o+DCqyhWBiK5WFyUZU I5kP4l0J4exymXsCzkQWmXSYeWLCAa2G2LM8XEFJKkNiQJ2S8i3An3R1/h+BM8Sv 6zYXPWUMP3JECjTPPfSR9cdLpxtsNr5EPhzy7dNHmkmFvnidBiNhC7tj0dW411Uz KYBzInxqJ5xeDhbdjs7XYFuUcPgyJgp8Nos/y7hNoV5gmfEoag/VwpvRjU3vpF4L gxVHqyA3J5tt77fS9jMseMUyGcDElrvK -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org