$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa File: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (raw, json) Hash identifier: HWWPIlAjALaow0cNMteDCvbcFom4k1/d4AOGwR3KLbE= Subject key identifier: 60:1C:5C:46:B9:A2:AC:D9:CC:68:CC:B6:0F:36:DC:89:F4:A2:C1:1D Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F43285847BAC6B0EC320B18345ACEC980 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 77 IP address blocks: 2620:0:320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:b0:ec:32:0b:18:34:5a:ce:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=db8e39a2-7522-4a8f-9323-daa6f5d1ebf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:26:d4:49:f0:ed:6e:85:ca:e7:b7:4f:55:9b: 90:10:8b:db:00:ab:bb:1b:ee:1a:66:1c:3b:1b:31: a1:0b:33:4a:aa:21:ae:db:79:bc:af:26:37:85:87: 23:8f:12:8b:bd:19:28:f7:22:68:24:83:b9:7e:32: 11:3a:25:3d:ce:5b:99:60:81:22:0d:83:1f:77:7f: 5f:be:47:44:0c:1c:95:b1:05:5f:67:96:90:b5:64: bd:38:65:49:54:8f:9c:7f:10:8e:60:96:fe:c1:5d: 28:f4:cf:da:db:e3:c2:f0:07:ad:ef:4c:00:97:e0: dc:36:56:78:ec:ce:51:b4:d3:f9:25:a6:78:ed:5d: 48:60:17:6b:3c:ce:56:ba:bc:6e:68:90:02:da:c1: ac:ae:a3:3e:8e:f5:32:d2:41:95:10:77:e9:7c:3c: 20:73:37:79:4c:d3:a5:1b:ae:f8:d7:7e:86:46:c7: 31:4e:82:0b:ca:aa:d1:d7:43:c5:20:33:c3:0c:b0: 93:bd:f8:74:32:3e:d8:27:ee:58:ce:83:72:4d:bd: c9:c6:b6:45:0c:22:7e:d0:e4:7b:65:a7:6b:67:61: cd:a7:94:fc:d9:5e:08:a8:32:fc:f6:9c:3d:30:fa: e7:1f:48:66:f7:9d:92:a5:fe:3d:01:11:e7:03:9b: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:5C:46:B9:A2:AC:D9:CC:68:CC:B6:0F:36:DC:89:F4:A2:C1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:75:97:88:a7:5c:83:90:9c:3c:a5:0c:ca:60:18:a6:d5:79: bb:8e:19:d3:5b:98:5d:92:ad:3f:ba:8f:66:40:80:2f:f9:24: 1d:18:f8:b6:15:43:13:54:8b:50:61:88:10:14:59:22:cd:8e: ef:11:23:a4:08:6d:97:a4:ca:51:1e:09:28:76:14:fa:31:3a: c0:ac:b6:42:6c:87:f0:8d:2f:05:69:58:08:ca:1a:3e:d2:1f: bd:bf:f4:3f:5e:9d:c7:56:15:82:7a:d1:b6:bd:ea:4e:d6:bf: 77:e1:3f:55:d4:5d:59:7d:77:33:18:8c:72:cd:75:fb:47:90: 2f:ee:b5:21:66:8f:5c:b8:bf:74:46:2b:ed:8f:6d:e2:f2:2f: 79:d9:1b:d4:ba:19:f3:bf:0e:34:97:44:51:66:21:77:7c:3d: b1:95:d6:9e:3b:6c:c3:56:30:45:ce:01:8c:05:bd:34:60:7e: ac:86:04:c3:fc:b4:b8:c3:3b:02:37:2a:57:90:59:00:81:85: c8:99:8b:3d:fb:b2:d4:cd:99:17:30:0e:f5:db:df:ac:cd:b5: ce:8e:da:d9:af:9d:e2:8e:3c:ec:ad:7b:90:50:37:13:6f:c2: e5:c3:73:f8:d4:ef:88:30:55:bd:01:fd:15:ed:4b:dd:78:b9: cc:71:22:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe6xrDsMgsYNFrOyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGI4ZTM5YTItNzUyMi00YThmLTkzMjMtZGFhNmY1ZDFlYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSbUSfDtboXK57dPVZuQEIvbAKu7G+4aZhw7 GzGhCzNKqiGu23m8ryY3hYcjjxKLvRko9yJoJIO5fjIROiU9zluZYIEiDYMfd39f vkdEDByVsQVfZ5aQtWS9OGVJVI+cfxCOYJb+wV0o9M/a2+PC8Aet70wAl+DcNlZ4 7M5RtNP5JaZ47V1IYBdrPM5WurxuaJAC2sGsrqM+jvUy0kGVEHfpfDwgczd5TNOl G674136GRscxToILyqrR10PFIDPDDLCTvfh0Mj7YJ+5YzoNyTb3JxrZFDCJ+0OR7 ZadrZ2HNp5T82V4IqDL89pw9MPrnH0hm952Spf49ARHnA5ul+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGAcXEa5oqzZzGjMtg823In0osEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvM2ZiN2NkNGEtZGZhMS0z MmUxLWEzMTEtYWIxOGFlYjFiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGB1l4inXIOQnDylDMpgGKbVebuOGdNbmF2SrT+6j2ZAgC/5JB0Y +LYVQxNUi1BhiBAUWSLNju8RI6QIbZekylEeCSh2FPoxOsCstkJsh/CNLwVpWAjK Gj7SH72/9D9encdWFYJ60ba96k7Wv3fhP1XUXVl9dzMYjHLNdftHkC/utSFmj1y4 v3RGK+2PbeLyL3nZG9S6GfO/DjSXRFFmIXd8PbGV1p47bMNWMEXOAYwFvTRgfqyG BMP8tLjDOwI3KleQWQCBhciZiz37stTNmRcwDvXb36zNtc6O2tmvneKOPOyte5BQ NxNvwuXDc/jU74gwVb0B/RXtS914ucxxIk4= -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org