$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/c368c218-5916-3a3a-8573-c64a126ea912.roa File: c368c218-5916-3a3a-8573-c64a126ea912.roa (raw, json) Hash identifier: KUJ9NXnaVEy3EuzzNzu4C9FLOHtQlMNq4OhTclAXkGk= Subject key identifier: 75:B9:6E:65:FB:76:28:A1:29:6A:5D:7F:86:24:11:AC:86:D4:DD:1A Certificate issuer: /CN=4182f5c3-1977-4f18-997f-c945eaea051e Certificate serial: 010D0C9F43285847362B5F934AFA9AE2F1A64380 Authority key identifier: DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/c368c218-5916-3a3a-8573-c64a126ea912.roa Signing time: Sat 14 Sep 2024 13:00:41 +0000 ROA not before: Sat 14 Sep 2024 13:00:41 +0000 ROA not after: Fri 13 Dec 2024 14:00:41 +0000 asID: 18470 IP address blocks: 2602:814:4000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:36:2b:5f:93:4a:fa:9a:e2:f1:a6:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4182f5c3-1977-4f18-997f-c945eaea051e Validity Not Before: Sep 14 13:00:41 2024 GMT Not After : Dec 13 14:00:41 2024 GMT Subject: CN=adcf31d3-53c8-41b2-806a-7331769b24cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:c0:41:1a:fb:ee:53:71:d5:27:07:88:0f: 00:c6:e0:d4:14:39:39:7c:78:7c:6b:84:35:c8:97: 1c:e9:08:5a:94:75:0a:10:46:55:73:53:4c:3a:51: f9:8f:a7:05:67:2b:d4:be:f9:79:ca:fd:54:43:7e: de:e2:fe:d9:62:92:44:40:98:b5:dc:f2:5e:24:a4: a9:7f:e9:18:3c:4e:ce:fa:f7:db:54:69:c3:57:c9: 01:51:c7:b5:b8:1b:b7:b7:a1:f5:b5:6d:56:5d:04: 33:8f:3a:b8:45:25:f0:3a:4a:ed:a7:29:c4:c9:d6: 0a:dc:2f:a3:73:0a:e6:9e:a6:c3:af:70:08:d9:cc: de:38:0b:08:86:ee:51:55:51:af:16:68:6b:36:6b: 92:7d:b1:f9:67:6e:c1:36:22:ab:ca:22:86:b0:a1: 3f:28:a1:58:d9:7b:d1:88:27:a0:a0:07:95:04:11: f6:6e:ce:69:f9:26:dd:ce:cb:62:02:09:2c:cb:61: 22:bb:c4:93:5b:3a:3c:b1:6e:c0:2d:cd:36:46:1a: d6:b1:4e:57:0d:6c:31:10:16:08:a9:ae:05:e0:bd: 9c:55:4e:ec:f0:09:21:72:c1:52:ee:e8:86:8b:9f: 24:40:a5:47:6b:44:5f:b0:93:3a:e8:4b:41:f2:4c: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B9:6E:65:FB:76:28:A1:29:6A:5D:7F:86:24:11:AC:86:D4:DD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/c368c218-5916-3a3a-8573-c64a126ea912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl X509v3 Authority Key Identifier: keyid:DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:33:f8:f9:8e:73:4e:e5:cd:d3:f2:01:27:6f:1f:3d:52:fc: da:1e:db:5d:3b:e6:3e:b4:3b:ef:f9:9e:fe:6a:b3:e8:b5:74: d7:05:f8:bf:b3:16:00:58:0b:c7:f9:df:0a:76:20:6a:0a:31: 0f:26:e4:94:af:a8:02:d7:d4:e5:e8:9b:be:43:fb:75:4d:a8: 7a:b1:4d:b8:97:da:72:8f:db:8c:6e:8a:b9:ed:f8:b8:87:7e: e1:09:3b:77:5c:11:f8:bd:76:be:91:90:dc:8b:4e:41:f7:c9: 34:7c:ba:94:46:0c:91:fe:47:a3:40:53:95:89:c3:4e:39:95: 6b:1b:21:b6:86:2c:8d:74:6b:eb:58:48:ba:cc:3e:1f:1a:51: 5d:51:1f:e3:01:5d:78:48:74:1e:ea:f4:7f:15:74:87:b3:60: 4e:02:25:7f:07:52:d2:16:d3:3d:6f:2d:9e:28:78:68:2b:98: 21:e9:b8:e1:cd:74:d6:29:e8:ef:f1:0b:3f:47:a8:ab:70:1a: e9:26:53:d3:6f:6b:80:08:bf:c0:36:8f:35:f6:9f:42:00:d6: ac:39:0d:da:4d:c5:10:77:a4:cc:99:d8:72:d0:83:ed:8c:44: c1:83:f0:d9:65:8b:59:1c:4a:a4:f7:f1:0f:2a:92:48:b2:ec: 59:94:47:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc2K1+TSvqa4vGmQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4MmY1YzMtMTk3Ny00ZjE4LTk5N2YtYzk0NWVhZWEw NTFlMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk YWRjZjMxZDMtNTNjOC00MWIyLTgwNmEtNzMzMTc2OWIyNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3zAQRr77lNx1ScHiA8AxuDUFDk5fHh8a4Q1 yJcc6QhalHUKEEZVc1NMOlH5j6cFZyvUvvl5yv1UQ37e4v7ZYpJEQJi13PJeJKSp f+kYPE7O+vfbVGnDV8kBUce1uBu3t6H1tW1WXQQzjzq4RSXwOkrtpynEydYK3C+j cwrmnqbDr3AI2czeOAsIhu5RVVGvFmhrNmuSfbH5Z27BNiKryiKGsKE/KKFY2XvR iCegoAeVBBH2bs5p+SbdzstiAgksy2Eiu8STWzo8sW7ALc02RhrWsU5XDWwxEBYI qa4F4L2cVU7s8AkhcsFS7uiGi58kQKVHa0RfsJM66EtB8kwuCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHW5bmX7diihKWpdf4YkEayG1N0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MTgy ZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1ZWFlYTA1MWUvYzM2OGMyMTgtNTkxNi0z YTNhLTg1NzMtYzY0YTEyNmVhOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDE4MmY1YzMtMTk3Ny00ZjE4LTk5 N2YtYzk0NWVhZWEwNTFlLzQxODJmNWMzLTE5NzctNGYxOC05OTdmLWM5NDVlYWVh MDUxZS5jcmwwHwYDVR0jBBgwFoAU3EjDkhwVbj1cGAnpc8/wKdZbfRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MTgyZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1 ZWFlYTA1MWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0z+PmOc07lzdPyASdvHz1S/Noe21075j60O+/5nv5qs+i1dNcF +L+zFgBYC8f53wp2IGoKMQ8m5JSvqALX1OXom75D+3VNqHqxTbiX2nKP24xuirnt +LiHfuEJO3dcEfi9dr6RkNyLTkH3yTR8upRGDJH+R6NAU5WJw045lWsbIbaGLI10 a+tYSLrMPh8aUV1RH+MBXXhIdB7q9H8VdIezYE4CJX8HUtIW0z1vLZ4oeGgrmCHp uOHNdNYp6O/xCz9HqKtwGukmU9Nva4AIv8A2jzX2n0IA1qw5DdpNxRB3pMyZ2HLQ g+2MRMGD8Nlli1kcSqT38Q8qkkiy7FmUR9Y= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org