$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json) Hash identifier: mu85ZXey1Z+g2OV0rSpdwoOThbYm3FHwaAPa8zPcx2s= Subject key identifier: 17:D5:04:C3:CE:56:BD:8B:05:BD:2B:59:12:6C:5E:17:3E:88:2B:17 Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F432858472F308046EF42F36BF297A000 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 13325 IP address blocks: 2620:167::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:80:46:ef:42:f3:6b:f2:97:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=0f27d406-a3f3-44ab-8eaf-e75e0fd0b471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:30:2e:eb:f1:ad:ad:87:b9:d2:07:1e:3b: 18:3f:ac:1f:c7:c1:ca:78:a0:3e:fc:4d:94:20:67: e3:45:1a:0c:c7:75:28:d6:bf:42:40:ae:ac:e5:86: 83:e4:1e:e2:ef:39:81:0a:ad:0c:25:96:ea:eb:37: 4a:f7:1b:11:14:1e:e7:80:4a:a0:c8:7d:15:8b:86: eb:87:00:07:9a:27:a2:49:8b:26:11:12:08:d9:12: d9:10:47:52:8c:d5:c1:14:d0:36:18:2c:a7:db:94: fd:11:ca:12:fd:1b:d5:30:36:b8:d1:89:3f:92:f7: 21:3e:e4:21:97:81:6d:39:ef:93:c6:0f:b7:e8:d1: f9:c5:f3:f2:af:b7:c6:a4:b4:d9:d0:0a:bb:d2:52: 0d:d4:8c:e4:7f:fe:2c:f5:04:a4:8e:3d:05:bc:c5: a4:57:b7:49:c6:8b:c6:ad:4b:48:78:bc:78:e5:5a: 87:97:d6:31:81:d0:46:3e:09:a2:19:a9:b9:6d:bf: 47:c5:68:4e:61:15:f8:e7:9b:b0:ab:85:59:3a:0e: ea:3f:33:d4:04:40:1f:90:7e:89:90:7b:b2:16:97: 01:e4:41:e3:ed:75:54:61:90:eb:fe:6f:2a:f0:da: 46:1a:a7:59:73:e4:55:ff:37:40:bb:c3:b6:95:f3: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D5:04:C3:CE:56:BD:8B:05:BD:2B:59:12:6C:5E:17:3E:88:2B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv6: 2620:167::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:06:cc:86:02:92:12:89:f8:54:12:08:ad:38:38:4f:0b:ba: 66:de:f8:64:8d:36:aa:10:55:6c:71:8d:43:a9:69:35:4c:d8: 72:d3:1b:c5:a7:a3:61:52:75:eb:e3:09:3a:fa:b0:ed:40:2c: 43:fa:5c:76:c1:52:b4:02:5b:9a:a6:2b:b4:3b:ff:99:82:eb: 86:73:b5:80:0e:42:f4:52:1e:29:00:99:7b:fc:2d:97:74:71: c7:66:ed:75:3d:7e:1b:45:33:48:9a:b9:79:75:f0:96:a5:90: 83:5f:d2:2d:39:ae:69:9e:47:e8:aa:53:60:02:14:1c:af:21: 20:d7:fc:94:36:b8:9c:c2:05:e7:fb:38:dc:99:90:f6:8c:93: 59:8b:6d:89:cc:7a:3f:e6:28:de:14:00:40:5c:96:02:32:ea: 3b:db:80:f5:17:d1:0a:64:a2:f1:b3:e0:a9:31:4a:2a:0c:37: 14:50:bf:94:db:c2:d9:0e:ed:c6:6d:36:80:1a:c5:1b:72:55: 86:6e:6a:bc:e2:5c:ed:d4:0e:51:93:de:3e:71:85:fa:3b:ea: a2:f3:5a:02:d2:ca:18:80:4b:67:46:85:ec:15:bb:b0:f7:78: c4:84:2f:13:2c:89:fc:50:9d:60:6f:29:58:a7:f3:ae:21:bb: 99:2c:d3:c4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEcvMIBG70Lza/KXoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk MGYyN2Q0MDYtYTNmMy00NGFiLThlYWYtZTc1ZTBmZDBiNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBwwLuvxra2HudIHHjsYP6wfx8HKeKA+/E2U IGfjRRoMx3Uo1r9CQK6s5YaD5B7i7zmBCq0MJZbq6zdK9xsRFB7ngEqgyH0Vi4br hwAHmieiSYsmERII2RLZEEdSjNXBFNA2GCyn25T9EcoS/RvVMDa40Yk/kvchPuQh l4FtOe+Txg+36NH5xfPyr7fGpLTZ0Aq70lIN1Izkf/4s9QSkjj0FvMWkV7dJxovG rUtIeLx45VqHl9YxgdBGPgmiGam5bb9HxWhOYRX455uwq4VZOg7qPzPUBEAfkH6J kHuyFpcB5EHj7XVUYZDr/m8q8NpGGqdZc+RV/zdAu8O2lfPfWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBfVBMPOVr2LBb0rWRJsXhc+iCsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAzgbMhgKSEon4VBIIrTg4Twu6Zt74ZI02qhBVbHGNQ6lpNUzYctMb xaejYVJ16+MJOvqw7UAsQ/pcdsFStAJbmqYrtDv/mYLrhnO1gA5C9FIeKQCZe/wt l3Rxx2btdT1+G0UzSJq5eXXwlqWQg1/SLTmuaZ5H6KpTYAIUHK8hINf8lDa4nMIF 5/s43JmQ9oyTWYtticx6P+Yo3hQAQFyWAjLqO9uA9RfRCmSi8bPgqTFKKgw3FFC/ lNvC2Q7txm02gBrFG3JVhm5qvOJc7dQOUZPePnGF+jvqovNaAtLKGIBLZ0aF7BW7 sPd4xIQvEyyJ/FCdYG8pWKfzriG7mSzTxA== -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org