$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa File: 063be228-15cd-3792-9587-8ed8a9cb0646.roa (raw, json) Hash identifier: yqQcvIU8J2B/ueszfHy+xCekw97M2w79sDKk+4q12lE= Subject key identifier: 4B:9D:2B:D3:7D:33:B9:B2:78:AD:B0:1A:BD:72:F2:B9:1B:7F:9C:28 Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Certificate serial: 010D0C9F43285847D999EFEA7241C85A186CA220 Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 21922 IP address blocks: 2604:c040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:ef:ea:72:41:c8:5a:18:6c:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=169c4d56-fff7-40ea-8a51-1e3d0246e993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:1c:a0:10:69:0b:4e:62:af:c3:bc:dd:48: f1:50:6c:54:97:3b:fe:8f:75:5f:e7:24:3c:c2:2d: df:c9:99:a7:cb:65:7d:d0:d5:74:6a:7e:24:f0:e8: ce:4c:c7:04:a9:1b:5d:bf:fb:1a:0f:88:93:11:51: eb:86:6e:71:49:f4:51:ca:e2:56:6f:3e:67:3c:82: e0:be:f7:ff:cd:1f:19:1f:28:dc:24:66:93:ae:ed: 21:c1:3f:b8:75:54:32:c0:bd:87:91:e2:2c:df:4e: 50:ab:85:da:2d:21:0f:a1:2a:b9:73:a8:2c:77:0a: 71:68:33:52:6a:3f:41:20:c9:1b:30:13:75:97:69: 25:7a:08:88:3d:b3:ec:75:2b:cb:7b:cf:70:1f:34: 38:47:90:f8:38:e9:86:1d:50:34:47:23:1d:32:2b: bf:a6:65:4d:25:e2:1e:b8:89:c0:9d:b3:e7:5f:c5: ba:a2:00:14:d7:a7:53:fd:48:61:41:aa:ce:02:d0: 82:fb:94:fe:96:af:cb:ac:05:70:eb:b6:d0:3f:1d: b9:d3:db:77:bd:ff:9b:45:0d:85:93:4b:fe:61:c5: 10:5d:b7:88:eb:6c:a6:73:03:3f:2a:12:1c:5b:26: bf:a4:de:49:63:b8:23:48:c8:27:b6:31:8a:76:da: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9D:2B:D3:7D:33:B9:B2:78:AD:B0:1A:BD:72:F2:B9:1B:7F:9C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl X509v3 Authority Key Identifier: keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer sbgp-ipAddrBlock: critical IPv6: 2604:c040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:69:94:d8:b3:4c:31:57:46:2d:c0:f9:06:21:e8:3f:53:a3: 19:9b:9a:18:25:58:6b:d7:3c:f7:9c:a5:23:46:b4:d4:f8:53: 54:c5:39:fd:6c:54:2e:82:36:d2:cf:3d:6e:22:e9:69:a0:6f: 44:fc:a1:af:9b:ca:08:db:e0:a5:f5:a1:3e:20:fd:77:9a:fa: 8e:79:48:b8:5d:55:f2:0c:50:a3:31:8c:d3:99:73:b6:33:4e: a7:7b:79:8d:b9:69:3d:90:e6:c2:93:92:90:40:ec:a9:ad:17: 4f:ba:7e:4f:17:04:8b:26:62:91:20:c3:01:d8:d5:dd:91:70: e2:0a:f0:80:24:56:78:1a:99:77:c5:95:41:e9:89:ae:71:bc: c8:4c:0a:c6:47:9c:1c:c3:cc:c9:e9:30:67:04:64:c5:9a:ac: 4f:45:cd:6a:a3:22:a7:04:14:eb:d9:33:5f:39:7b:99:b5:6c: d7:c2:91:9b:45:9a:8b:9c:db:f1:00:65:27:dd:a9:e5:71:d6: 1c:3d:6a:45:b3:71:71:55:f1:19:09:43:c2:a3:3b:29:dc:27: 77:c0:c4:23:67:67:27:12:7c:ef:7d:b1:08:b4:a8:c0:c6:21: be:22:6c:dc:69:1e:a0:5e:f9:a9:7e:9d:73:96:a6:be:93:eb: fc:a7:8a:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfZme/qckHIWhhsoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi MTc3MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk MTY5YzRkNTYtZmZmNy00MGVhLThhNTEtMWUzZDAyNDZlOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9IcoBBpC05ir8O83UjxUGxUlzv+j3Vf5yQ8 wi3fyZmny2V90NV0an4k8OjOTMcEqRtdv/saD4iTEVHrhm5xSfRRyuJWbz5nPILg vvf/zR8ZHyjcJGaTru0hwT+4dVQywL2HkeIs305Qq4XaLSEPoSq5c6gsdwpxaDNS aj9BIMkbMBN1l2klegiIPbPsdSvLe89wHzQ4R5D4OOmGHVA0RyMdMiu/pmVNJeIe uInAnbPnX8W6ogAU16dT/UhhQarOAtCC+5T+lq/LrAVw67bQPx2509t3vf+bRQ2F k0v+YcUQXbeI62ymcwM/KhIcWya/pN5JY7gjSMgntjGKdtqznwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEudK9N9M7myeK2wGr1y8rkbf5woMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvMDYzYmUyMjgtMTVjZC0z NzkyLTk1ODctOGVkOGE5Y2IwNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0 MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3 YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy ZDIzN2IxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTAQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0aZTYs0wxV0YtwPkGIeg/U6MZm5oYJVhr1zz3nKUjRrTU+FNUxTn9 bFQugjbSzz1uIulpoG9E/KGvm8oI2+Cl9aE+IP13mvqOeUi4XVXyDFCjMYzTmXO2 M06ne3mNuWk9kObCk5KQQOyprRdPun5PFwSLJmKRIMMB2NXdkXDiCvCAJFZ4Gpl3 xZVB6YmucbzITArGR5wcw8zJ6TBnBGTFmqxPRc1qoyKnBBTr2TNfOXuZtWzXwpGb RZqLnNvxAGUn3anlcdYcPWpFs3FxVfEZCUPCozsp3Cd3wMQjZ2cnEnzvfbEItKjA xiG+ImzcaR6gXvmpfp1zlqa+k+v8p4qc -----END CERTIFICATE-----Generated at Sat Nov 23 20:22:48 2024 by rpki-client on console-ams.rpki-client.org