$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa File: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (raw, json) Hash identifier: RwfSgblTnZvzq9Yf4Jvo3ng2kwAPglHiWFfGovRHlz4= Subject key identifier: 39:25:94:5B:A0:18:BF:E6:CD:C4:C6:6C:E0:68:16:7C:00:D3:00:52 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F43285847A30BFC56427BCE1F8AB4D680 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa Signing time: Wed 23 Oct 2024 13:00:41 +0000 ROA not before: Wed 23 Oct 2024 13:00:41 +0000 ROA not after: Tue 21 Jan 2025 14:00:41 +0000 asID: 15147 IP address blocks: 2600:400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:0b:fc:56:42:7b:ce:1f:8a:b4:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Oct 23 13:00:41 2024 GMT Not After : Jan 21 14:00:41 2025 GMT Subject: CN=7fb0fa01-cff7-4b9a-9ef3-05ee7bfa9b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:96:db:08:b0:2f:c0:7a:e0:ef:82:78:c9: 07:00:3c:ac:2c:43:a2:f4:6e:b8:5e:20:e9:ea:32: 79:ff:6d:71:6a:b4:b6:96:1a:96:f5:d5:ed:28:3e: 9d:ad:ab:50:68:65:5a:83:7b:e5:b1:e6:08:81:a4: 43:8c:e8:d0:7a:1e:d1:5e:87:0a:3d:8c:0e:db:03: b5:d7:c6:59:d5:e9:fb:81:1f:9a:98:5e:36:f3:86: 55:84:74:0f:c5:26:82:ca:43:35:1a:26:ce:5f:8c: 3b:3e:07:d7:4c:cb:54:d4:0d:8f:bf:0a:a6:a3:91: d9:17:67:86:e1:e0:53:17:7f:06:1d:f7:f3:88:dc: 64:41:f9:98:22:8f:82:05:75:9a:f1:f4:23:5b:c1: 01:b5:68:d4:42:9f:dc:b4:b1:ba:08:9b:25:21:cf: ea:ac:7a:b8:2c:87:a9:db:b3:53:78:b3:00:08:ec: 07:1c:9a:4c:a6:f5:6a:fe:d2:4d:51:a4:c9:13:6c: 39:50:18:fe:33:69:de:04:88:36:98:7a:82:9a:5f: 84:95:59:46:3c:c0:2d:c0:08:82:d1:f6:d9:b8:40: 83:a3:3c:1a:e1:60:27:26:01:12:74:df:6f:2f:32: 35:0d:74:43:41:fe:df:f6:91:cd:25:3b:e9:7e:15: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:94:5B:A0:18:BF:E6:CD:C4:C6:6C:E0:68:16:7C:00:D3:00:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c2:89:22:a6:41:33:8b:1b:78:68:54:02:e1:91:cd:69:92: 56:bb:49:58:f2:20:c5:aa:33:b8:d1:39:dc:5c:68:a9:0d:b2: 47:0c:32:69:ac:3f:e4:5b:7a:f3:4e:de:0e:6f:39:b3:7e:44: e5:85:9e:c9:2c:1d:45:ce:e4:22:ed:33:03:ef:72:62:c2:45: 79:6a:df:62:db:d8:75:53:da:fb:7c:6b:34:c5:c8:4e:c8:c1: d1:38:e0:8a:b5:1a:5d:34:ee:6b:c7:91:69:2a:39:2e:f0:a2: 7b:19:2b:2e:b4:ef:bb:3d:35:9d:4a:dc:31:b1:21:97:f3:84: b6:71:26:10:6b:6e:d7:70:da:e2:e1:c5:2a:1c:f4:a8:a4:b5: a3:1b:b4:5c:0f:0f:4b:dd:31:65:ba:ad:55:67:c1:bb:c1:83: 0a:27:4e:8a:d4:37:55:30:4c:fc:98:10:a0:53:90:df:15:b5: bf:09:90:36:a8:a6:3e:a3:9e:8c:34:ee:7c:b7:22:0c:a0:77: 48:24:83:01:5b:c7:8b:fb:c7:6a:07:41:1c:ad:85:89:88:22: 8e:90:0e:17:86:68:e7:12:45:df:22:0f:45:c0:89:11:67:83: ee:50:44:65:ea:ee:a8:7d:43:e2:78:5b:eb:fb:d4:d7:51:a4: 3a:eb:53:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEejC/xWQnvOH4q01oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk N2ZiMGZhMDEtY2ZmNy00YjlhLTllZjMtMDVlZTdiZmE5YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8SW2wiwL8B64O+CeMkHADysLEOi9G64XiDp 6jJ5/21xarS2lhqW9dXtKD6dratQaGVag3vlseYIgaRDjOjQeh7RXocKPYwO2wO1 18ZZ1en7gR+amF4284ZVhHQPxSaCykM1GibOX4w7PgfXTMtU1A2Pvwqmo5HZF2eG 4eBTF38GHffziNxkQfmYIo+CBXWa8fQjW8EBtWjUQp/ctLG6CJslIc/qrHq4LIep 27NTeLMACOwHHJpMpvVq/tJNUaTJE2w5UBj+M2neBIg2mHqCml+ElVlGPMAtwAiC 0fbZuECDozwa4WAnJgESdN9vLzI1DXRDQf7f9pHNJTvpfhWy5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDkllFugGL/mzcTGbOBoFnwA0wBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNzExMDUzMjctODRkNS0z ZjZhLWJjYzgtZmZmN2YzMmFiOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAEADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBywokipkEzixt4aFQC4ZHNaZJWu0lY8iDFqjO40TncXGipDbJHDDJp rD/kW3rzTt4ObzmzfkTlhZ7JLB1FzuQi7TMD73JiwkV5at9i29h1U9r7fGs0xchO yMHROOCKtRpdNO5rx5FpKjku8KJ7GSsutO+7PTWdStwxsSGX84S2cSYQa27XcNri 4cUqHPSopLWjG7RcDw9L3TFluq1VZ8G7wYMKJ06K1DdVMEz8mBCgU5DfFbW/CZA2 qKY+o56MNO58tyIMoHdIJIMBW8eL+8dqB0EcrYWJiCKOkA4XhmjnEkXfIg9FwIkR Z4PuUERl6u6ofUPieFvr+9TXUaQ661O/ -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org