$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa File: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (raw, json) Hash identifier: CTNzU8NXtW91MFFslUUUPOH+1UioGtEV5xmNew1kkVg= Subject key identifier: D1:57:88:7E:70:FC:8D:F1:71:3C:E8:81:24:4C:C8:F2:4B:0C:F7:B8 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F43285847B53154D51A1D3C570A349D00 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 7850 IP address blocks: 2001:1818::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:54:d5:1a:1d:3c:57:0a:34:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=7321a8fb-36f3-4c72-86f7-64ea078223cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:03:50:97:0f:ba:61:17:aa:7b:37:f6:ae: 09:87:1f:3e:f0:d1:ed:f6:7a:a9:24:18:0e:16:36: f3:c9:89:62:3f:7a:5c:8f:6a:4f:35:ec:66:ce:b7: 83:43:e8:c6:d4:ab:6b:00:94:58:c6:48:08:e2:68: d0:34:91:9e:b2:ee:5e:30:0c:eb:66:55:2b:c8:e8: ae:48:c6:64:8a:9f:74:79:9a:8b:bf:77:d7:02:fc: 3d:50:12:ae:77:d0:bc:e5:71:d1:c4:31:9d:26:84: be:bb:97:e3:18:db:40:97:9a:d0:02:35:2c:50:a7: b9:90:e0:f9:82:f0:79:16:25:05:d3:af:6b:cb:12: 77:9e:c7:76:9f:ac:a2:72:7a:62:86:d7:82:ba:68: 19:8c:bd:5d:ea:72:fc:e0:dc:ef:82:42:1f:e0:6b: 30:ad:52:3d:06:7c:8c:2c:d3:25:63:fa:de:12:ee: e0:45:08:77:4d:ee:da:e0:b1:77:a9:f0:51:85:11: c3:3c:b6:4a:14:9f:3f:4f:65:3e:ff:79:c3:68:86: b1:08:5a:46:e2:02:c5:1e:22:e0:91:a1:ff:47:99: 40:c2:ac:30:f8:fa:bb:30:c5:8c:d2:a5:b3:0b:77: 65:11:0e:6e:ec:68:f1:57:b0:a3:0c:2e:a1:7e:f4: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:88:7E:70:FC:8D:F1:71:3C:E8:81:24:4C:C8:F2:4B:0C:F7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv6: 2001:1818::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:15:3a:99:2d:1d:bc:2a:d4:19:58:5a:95:64:38:b0:5d:58: 7f:7e:e3:e2:48:39:eb:41:4e:c1:09:78:29:a4:66:88:67:53: 86:ce:e1:2b:3a:dd:cb:48:92:ce:7f:d6:df:63:6d:ef:8d:30: 5a:e3:b8:1f:a9:15:bf:b5:07:4f:84:74:c5:06:09:30:c5:6c: 80:23:eb:14:0f:dd:f8:ea:77:1f:3c:b8:f5:8d:57:d3:1e:53: d6:03:da:8d:15:18:af:0e:a4:f3:5a:18:5c:25:db:68:87:af: 2f:c5:7a:d2:0b:3e:9f:82:96:12:62:8e:98:b8:ea:1f:78:69: d0:de:9f:ed:2f:1e:8d:e2:fe:e1:04:e5:2a:9a:13:8e:4e:3a: 4e:48:2c:48:b3:84:a3:56:4a:f4:31:0f:12:1a:ba:e0:32:69: 51:97:0e:de:4c:5b:29:1f:02:0a:7d:64:1f:f6:75:51:df:8f: 08:26:d9:28:f3:82:ed:65:6b:b7:f7:bc:de:e2:05:6c:22:92: 90:1b:41:75:d0:22:1e:72:87:4c:96:23:fc:11:89:48:9f:50: 87:81:f1:59:eb:81:9d:77:a9:bb:11:6f:c1:82:5d:23:df:0c: d5:51:9d:88:3c:d2:55:f6:8a:f2:3e:69:84:7a:98:f5:67:4a: e6:ce:19:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEe1MVTVGh08Vwo0nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk NzMyMWE4ZmItMzZmMy00YzcyLTg2ZjctNjRlYTA3ODIyM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyggDUJcPumEXqns39q4Jhx8+8NHt9nqpJBgO FjbzyYliP3pcj2pPNexmzreDQ+jG1KtrAJRYxkgI4mjQNJGesu5eMAzrZlUryOiu SMZkip90eZqLv3fXAvw9UBKud9C85XHRxDGdJoS+u5fjGNtAl5rQAjUsUKe5kOD5 gvB5FiUF069ryxJ3nsd2n6yicnpihteCumgZjL1d6nL84NzvgkIf4GswrVI9BnyM LNMlY/reEu7gRQh3Te7a4LF3qfBRhRHDPLZKFJ8/T2U+/3nDaIaxCFpG4gLFHiLg kaH/R5lAwqww+Pq7MMWM0qWzC3dlEQ5u7GjxV7CjDC6hfvQtSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNFXiH5w/I3xcTzogSRMyPJLDPe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvOTFhNmI4ZTAtNjUwMS0z MzUxLTlhMTYtMzlhNTY4MDE2M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYGDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeFTqZLR28KtQZWFqVZDiwXVh/fuPiSDnrQU7BCXgppGaIZ1OGzuEr Ot3LSJLOf9bfY23vjTBa47gfqRW/tQdPhHTFBgkwxWyAI+sUD9346ncfPLj1jVfT HlPWA9qNFRivDqTzWhhcJdtoh68vxXrSCz6fgpYSYo6YuOofeGnQ3p/tLx6N4v7h BOUqmhOOTjpOSCxIs4SjVkr0MQ8SGrrgMmlRlw7eTFspHwIKfWQf9nVR348IJtko 84LtZWu397ze4gVsIpKQG0F10CIecodMliP8EYlIn1CHgfFZ64Gdd6m7EW/Bgl0j 3wzVUZ2IPNJV9oryPmmEepj1Z0rmzhmX -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:23 2024 by rpki-client on console-ams.rpki-client.org