$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa File: d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa (raw, json) Hash identifier: Z/ZnyTHD4yr5QD7ucGnzZVTTl297eHYZeGR//ntz0ro= Subject key identifier: 52:93:67:E0:43:72:EE:05:1C:6A:27:A6:F6:1E:BB:98:E8:67:C6:36 Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Certificate serial: 010D0C9F43285847BAC6A88DC8FF60954FC54DC0 Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 11399 IP address blocks: 2602:811:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a8:8d:c8:ff:60:95:4f:c5:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=c9978c09-20b0-4720-9887-fb12f181a1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:d9:f1:05:73:98:7e:7f:46:45:b5:13:3e: 44:51:50:74:38:69:8d:58:36:8c:de:65:f0:1e:ff: e7:7d:88:b3:8f:fe:34:03:08:1c:2a:23:8b:fb:79: 3c:c2:4c:ee:74:81:f2:9d:b9:a2:cb:e3:c8:f8:e2: f1:81:88:48:dc:d7:0b:94:64:e0:57:fb:24:a8:65: dc:58:e7:ae:23:c0:5b:15:e9:51:4f:10:a8:90:32: bc:93:08:12:3e:36:16:c7:d5:61:d3:8d:19:14:73: f5:5c:2b:1c:cb:d7:38:8f:d6:7f:f2:f9:8a:00:e6: 5f:90:82:3d:14:40:ad:ea:b7:09:72:9d:55:04:ad: 58:6c:72:93:85:ea:e6:6f:19:6d:13:f7:d5:20:cf: 10:9c:5b:69:f4:0c:82:10:a6:d3:8d:8c:ba:83:ff: 02:c8:0c:0b:74:3a:81:d2:41:06:e9:63:4b:56:9c: 48:53:f2:06:d8:5b:b4:f2:01:94:b4:2d:1d:90:61: e4:4f:28:a4:04:29:ed:c4:6b:af:fe:c9:b9:22:03: ee:8a:ef:14:7b:b7:03:f7:76:78:35:03:59:6e:fa: e1:f2:c6:6d:61:7f:90:bb:da:d9:13:03:db:94:96: 6f:29:b3:6f:4d:f9:25:58:cf:c2:08:88:57:dd:9f: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:93:67:E0:43:72:EE:05:1C:6A:27:A6:F6:1E:BB:98:E8:67:C6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl X509v3 Authority Key Identifier: keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer sbgp-ipAddrBlock: critical IPv6: 2602:811:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:21:63:53:9a:d6:e5:56:52:1b:6b:47:a2:4d:83:1e:93:0e: 26:33:16:b1:23:ec:af:c7:fd:d5:b0:ba:25:e4:cd:79:a0:22: 01:f8:44:71:85:48:3f:f5:ce:b4:1c:f8:27:20:2b:71:f0:d8: a0:88:3f:5b:f4:5b:ef:c2:c8:86:87:08:bc:4f:0d:b7:b5:dc: 23:22:98:31:7c:96:b7:42:91:d0:1f:5c:a4:4c:98:63:1d:c2: 6a:e5:3a:11:f8:2a:62:c4:40:18:bd:3c:3d:44:30:61:55:2b: 12:c8:55:73:00:8b:b6:52:59:14:8f:1b:e8:8e:55:9c:a0:07: 0d:35:68:f8:ce:50:8d:75:79:bd:05:3e:00:4b:e2:ac:37:a9: 2a:8b:02:0d:17:5f:88:49:5d:5e:ff:e2:cb:35:8f:b8:b6:f1: 9c:63:e1:a3:bb:f4:52:02:5f:5a:36:ea:12:28:e6:76:8a:50: 09:79:c9:0c:e8:87:b4:f5:46:6f:b5:15:9b:20:e2:ac:2e:b7: 61:72:e8:ca:ef:6e:f4:48:9a:12:30:1a:a2:23:d4:3e:ac:77: 45:d5:d1:4f:74:33:92:68:2b:a2:31:40:d7:97:08:f3:b5:0c: a2:0f:5d:a7:58:65:2c:77:c1:60:63:a3:10:23:5d:4c:17:2a: 13:c0:ee:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe6xqiNyP9glU/FTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5 ZTNlMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk Yzk5NzhjMDktMjBiMC00NzIwLTk4ODctZmIxMmYxODFhMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrnZ8QVzmH5/RkW1Ez5EUVB0OGmNWDaM3mXw Hv/nfYizj/40AwgcKiOL+3k8wkzudIHynbmiy+PI+OLxgYhI3NcLlGTgV/skqGXc WOeuI8BbFelRTxCokDK8kwgSPjYWx9Vh040ZFHP1XCscy9c4j9Z/8vmKAOZfkII9 FECt6rcJcp1VBK1YbHKThermbxltE/fVIM8QnFtp9AyCEKbTjYy6g/8CyAwLdDqB 0kEG6WNLVpxIU/IG2Fu08gGUtC0dkGHkTyikBCntxGuv/sm5IgPuiu8Ue7cD93Z4 NQNZbvrh8sZtYX+Qu9rZEwPblJZvKbNvTfklWM/CCIhX3Z+ZLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFKTZ+BDcu4FHGonpvYeu5joZ8Y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvZDNhN2FlYTMtYmE1Zi0z M2E3LWIwMGEtMzA2MjY5Y2M3MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1 OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl ZGQ1MjllM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIETAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFohY1Oa1uVWUhtrR6JNgx6TDiYzFrEj7K/H/dWwuiXkzXmgIgH4 RHGFSD/1zrQc+CcgK3Hw2KCIP1v0W+/CyIaHCLxPDbe13CMimDF8lrdCkdAfXKRM mGMdwmrlOhH4KmLEQBi9PD1EMGFVKxLIVXMAi7ZSWRSPG+iOVZygBw01aPjOUI11 eb0FPgBL4qw3qSqLAg0XX4hJXV7/4ss1j7i28Zxj4aO79FICX1o26hIo5naKUAl5 yQzoh7T1Rm+1FZsg4qwut2Fy6MrvbvRImhIwGqIj1D6sd0XV0U90M5JoK6IxQNeX CPO1DKIPXadYZSx3wWBjoxAjXUwXKhPA7vg= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org