$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa File: 2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa (raw, json) Hash identifier: 8FncvTriZSyqoOAxkL7kJWt6TrJOaZVX6yeCjWwqpvw= Subject key identifier: 89:B1:2B:BE:A2:87:4C:20:D9:20:AA:5A:D9:88:37:E7:6E:21:C7:96 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F43285847F584EFB2FFCF350CF47959F0 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa Signing time: Fri 22 Nov 2024 02:00:40 +0000 ROA not before: Fri 22 Nov 2024 02:00:40 +0000 ROA not after: Thu 20 Feb 2025 02:00:40 +0000 asID: 54054 IP address blocks: 2606:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:84:ef:b2:ff:cf:35:0c:f4:79:59:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Nov 22 02:00:40 2024 GMT Not After : Feb 20 02:00:40 2025 GMT Subject: CN=f345258c-05cc-4f92-a3a2-b68ae2a34d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:7f:57:12:10:f5:24:02:81:ae:26:b9:39: ca:19:90:30:ca:b6:af:5f:27:b1:09:5c:e6:60:e0: 3d:79:d8:43:5a:96:56:68:0b:2c:6d:2a:e8:3e:0c: 50:64:6f:69:b6:7b:32:f4:0b:31:e2:e6:ac:dd:93: d0:65:36:8e:54:0d:6c:20:71:c5:29:bd:1c:79:71: 79:92:35:7e:de:12:5d:11:11:02:06:b5:82:52:75: d1:bd:be:60:0e:3c:64:7a:c7:cb:b3:6b:cc:60:1b: 19:a2:0c:21:5d:12:1c:2b:11:20:fc:5b:24:27:60: cc:c4:30:83:4f:b3:c7:39:d7:79:75:54:dc:df:d8: 61:77:fc:6d:a7:7b:fe:4b:e0:35:46:76:2d:9b:b4: 9f:18:2c:f8:0e:6f:5a:1c:86:02:65:76:d0:d9:37: 17:4b:44:39:5a:7e:f6:6f:44:b1:07:cd:f8:18:fc: 7c:21:32:86:8b:4b:9c:74:18:70:0b:f3:cb:bf:24: ee:c5:88:9f:98:c3:7f:9c:88:a0:4d:8a:9c:ed:96: d7:b2:5e:74:b2:8c:df:62:e9:50:8d:05:0f:43:6f: f6:b8:27:cb:db:6d:39:52:5d:0e:5f:51:3d:bb:ce: fa:f6:9c:c7:1f:be:17:31:66:35:93:15:7e:2d:62: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B1:2B:BE:A2:87:4C:20:D9:20:AA:5A:D9:88:37:E7:6E:21:C7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/2e98b634-aaab-3aba-a91b-f70a3a88dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv6: 2606:700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1c:1b:8d:cf:5d:e0:ba:f4:7a:2d:22:6c:28:e8:a4:0b:d1: fd:c1:55:63:d5:82:48:cf:da:0f:73:f9:f6:c7:eb:b1:1c:c2: 26:1f:c5:d5:5c:80:59:c0:8e:cf:70:87:91:55:bd:cf:f7:9a: 29:8d:a1:7e:0d:d7:59:d0:c2:04:81:40:51:1b:76:4a:33:fb: 78:10:c2:40:ad:c1:c6:e6:9f:bc:84:ed:b8:64:15:20:95:c3: bd:51:c5:74:23:8f:0d:75:fd:8f:88:60:5b:77:ca:82:28:15: 00:84:9b:72:86:66:a4:24:a4:75:05:27:91:6a:fc:e0:df:18: 37:d6:df:cc:d2:03:ca:42:1e:b4:17:72:66:a5:c1:42:69:f0: 71:c0:24:9e:f0:42:72:b5:07:0c:76:2a:09:ce:ca:4b:a6:7d: 2c:42:a0:f6:7f:26:0d:92:85:3f:51:ca:9a:7b:ee:56:61:da: 2d:f9:f4:03:b0:d0:81:fa:9f:f1:f7:a7:48:32:2f:b4:41:5c: fa:16:f5:35:06:3a:cd:e6:f3:67:e8:bb:b0:c0:c6:f1:c0:f2: 59:29:85:cd:48:e3:5c:36:98:e0:1a:b3:fd:11:ef:f9:e6:85: b5:04:70:82:3b:8e:dd:8c:0b:1b:db:95:6e:a9:a7:2b:89:63: 0f:82:bf:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEf1hO+y/881DPR5WfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk ZjM0NTI1OGMtMDVjYy00ZjkyLWEzYTItYjY4YWUyYTM0ZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskN/VxIQ9SQCga4muTnKGZAwyravXyexCVzm YOA9edhDWpZWaAssbSroPgxQZG9ptnsy9Asx4uas3ZPQZTaOVA1sIHHFKb0ceXF5 kjV+3hJdERECBrWCUnXRvb5gDjxkesfLs2vMYBsZogwhXRIcKxEg/FskJ2DMxDCD T7PHOdd5dVTc39hhd/xtp3v+S+A1RnYtm7SfGCz4Dm9aHIYCZXbQ2TcXS0Q5Wn72 b0SxB834GPx8ITKGi0ucdBhwC/PLvyTuxYifmMN/nIigTYqc7ZbXsl50sozfYulQ jQUPQ2/2uCfL2205Ul0OX1E9u8769pzHH74XMWY1kxV+LWIzsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFImxK76ih0wg2SCqWtmIN+duIceWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvMmU5OGI2MzQtYWFhYi0z YWJhLWE5MWItZjcwYTNhODhkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTHBuNz13guvR6LSJsKOikC9H9wVVj1YJIz9oPc/n2x+uxHMImH8XV XIBZwI7PcIeRVb3P95opjaF+DddZ0MIEgUBRG3ZKM/t4EMJArcHG5p+8hO24ZBUg lcO9UcV0I48Ndf2PiGBbd8qCKBUAhJtyhmakJKR1BSeRavzg3xg31t/M0gPKQh60 F3JmpcFCafBxwCSe8EJytQcMdioJzspLpn0sQqD2fyYNkoU/Ucqae+5WYdot+fQD sNCB+p/x96dIMi+0QVz6FvU1BjrN5vNn6LuwwMbxwPJZKYXNSONcNpjgGrP9Ee/5 5oW1BHCCO47djAsb25VuqacriWMPgr9P -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:09 2024 by rpki-client on console-ams.rpki-client.org