$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa File: 890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa (raw, json) Hash identifier: E5aIUkutFetTjfu+odU+oXbf5tBZgM7N+ZJ06KtcKMg= Subject key identifier: 78:CA:79:63:D5:8E:0F:0B:91:1A:1C:98:CD:8F:65:03:F6:17:3B:54 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F432858477230E1AAD1F5D328B32B0600 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa Signing time: Sun 06 Oct 2024 01:00:31 +0000 ROA not before: Sun 06 Oct 2024 01:00:31 +0000 ROA not after: Sat 04 Jan 2025 02:00:31 +0000 asID: 4226 IP address blocks: 2604:f586::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:30:e1:aa:d1:f5:d3:28:b3:2b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Oct 6 01:00:31 2024 GMT Not After : Jan 4 02:00:31 2025 GMT Subject: CN=57cc5309-568f-4527-9298-8f1300e6b329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:4c:6f:46:36:d6:af:95:57:74:e6:34:2a: a1:0b:3e:34:c8:c6:ca:76:26:6a:2b:aa:4f:73:fc: 31:1b:3d:90:1f:10:09:56:f2:59:9b:dd:f6:21:fa: 62:0a:44:96:cc:73:f9:86:80:01:99:27:b2:2e:44: de:42:3e:2e:4d:61:00:67:8f:0a:ff:47:d9:e2:55: 5d:5e:af:11:94:70:7d:93:2b:cb:b1:8f:ec:1b:cf: a2:d9:3a:f3:d0:c9:ab:4c:5c:0f:4c:ea:46:fa:bc: 52:8b:78:c5:b3:4e:09:f0:40:a8:4d:03:1e:c0:b3: bc:f1:ef:80:89:6e:ed:11:86:1f:4a:91:34:ac:0d: dd:05:5c:96:cd:70:e8:55:7c:5d:a7:23:bf:d1:09: e5:3c:46:00:38:67:0f:86:a7:76:04:1b:d3:12:77: 3d:63:82:5a:e6:8c:a2:44:e1:c6:a1:fb:bd:27:24: 1b:8e:97:09:43:a5:15:ac:64:1c:b7:14:c7:c3:68: 45:2d:a1:f9:f4:7e:39:1b:48:e3:3a:34:66:8a:7f: 6b:17:d9:3f:c1:1b:af:70:bc:2a:23:45:3e:b1:1e: 94:70:17:2f:9b:2a:7b:5e:02:5e:32:08:3d:ff:5b: 5e:96:fb:10:32:d9:c5:9c:aa:e9:27:43:1d:f1:86: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CA:79:63:D5:8E:0F:0B:91:1A:1C:98:CD:8F:65:03:F6:17:3B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f586::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9b:dd:b5:ff:96:5d:f3:20:ad:40:96:4b:e8:34:e1:02:b6: fc:3a:30:1b:a4:70:b0:7c:d8:d3:0e:02:33:ce:bd:a2:d2:9d: 96:7d:41:04:11:28:8b:e2:21:61:7c:20:da:39:42:09:cb:cc: 45:8d:89:57:01:32:44:c4:40:7d:b3:5d:7d:09:be:c4:c2:d8: 36:b3:e0:29:c2:b4:50:5c:09:01:36:5a:50:36:e1:b2:3b:a3: 08:1f:53:42:98:f1:d4:80:1a:35:3e:2b:f1:20:97:b8:03:14: 63:72:26:67:5d:a4:af:1c:76:60:29:3c:55:64:9b:b3:ff:c3: 72:9d:24:a2:2c:3b:20:ed:60:a5:ae:1a:02:6b:57:28:0d:40: 3d:2d:68:7b:92:d7:79:62:60:a3:45:fa:0a:af:36:f6:c0:c3: 3a:fb:bb:ac:ff:6b:a4:45:8b:00:ee:a7:0d:d0:ca:ed:b1:52: 65:3a:6f:7a:74:eb:2e:5b:0a:54:d8:85:d5:64:96:fa:7b:92: ff:da:e6:7f:1e:38:4f:f0:5e:c2:cc:f3:c2:ce:6d:35:cd:b1: 82:94:60:45:42:ac:1e:ea:24:dd:76:b8:bc:11:95:59:bd:57: 39:0a:91:58:cc:ff:74:b1:58:1f:99:35:8d:ef:5e:49:06:81: ef:13:77:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdyMOGq0fXTKLMrBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk NTdjYzUzMDktNTY4Zi00NTI3LTkyOTgtOGYxMzAwZTZiMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyhMb0Y21q+VV3TmNCqhCz40yMbKdiZqK6pP c/wxGz2QHxAJVvJZm932IfpiCkSWzHP5hoABmSeyLkTeQj4uTWEAZ48K/0fZ4lVd Xq8RlHB9kyvLsY/sG8+i2Trz0MmrTFwPTOpG+rxSi3jFs04J8ECoTQMewLO88e+A iW7tEYYfSpE0rA3dBVyWzXDoVXxdpyO/0QnlPEYAOGcPhqd2BBvTEnc9Y4Ja5oyi ROHGofu9JyQbjpcJQ6UVrGQctxTHw2hFLaH59H45G0jjOjRmin9rF9k/wRuvcLwq I0U+sR6UcBcvmyp7XgJeMgg9/1telvsQMtnFnKrpJ0Md8YZH3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHjKeWPVjg8LkRocmM2PZQP2FztUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODkwZjljMmUtNDI0Ni0z MTJiLWE4NjktZWJiMmNmYmRkN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1hjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBm921/5Zd8yCtQJZL6DThArb8OjAbpHCwfNjTDgIzzr2i0p2WfUEE ESiL4iFhfCDaOUIJy8xFjYlXATJExEB9s119Cb7Ewtg2s+ApwrRQXAkBNlpQNuGy O6MIH1NCmPHUgBo1PivxIJe4AxRjciZnXaSvHHZgKTxVZJuz/8NynSSiLDsg7WCl rhoCa1coDUA9LWh7ktd5YmCjRfoKrzb2wMM6+7us/2ukRYsA7qcN0MrtsVJlOm96 dOsuWwpU2IXVZJb6e5L/2uZ/HjhP8F7CzPPCzm01zbGClGBFQqwe6iTddri8EZVZ vVc5CpFYzP90sVgfmTWN715JBoHvE3fk -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org