$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa File: 30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json) Hash identifier: QDBBkH30SjF2uwgYlKjFNda3kkFEFlK4zVc+/qm+QH4= Subject key identifier: 29:F4:3F:4E:2D:B5:83:6E:58:E1:D3:C3:08:C6:3F:20:78:AD:6A:AF Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F43285847C3448C8B4E18FB48F492DA60 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 33501 IP address blocks: 2607:19c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:8c:8b:4e:18:fb:48:f4:92:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=ffaa8f96-6b1f-41d0-a20b-5c3564bbf7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:37:1e:31:8d:7f:f7:a3:cf:6b:38:c0:9f: 7d:36:be:7d:8f:7c:3a:35:ab:3d:e5:83:fd:35:0b: 86:61:42:48:0b:41:91:cd:41:27:72:10:9e:6e:3c: 70:8a:1b:c1:d1:7e:15:eb:94:97:bc:64:4e:a1:bd: 5b:06:ac:00:2d:9c:0d:5d:4c:0f:a4:b0:4e:55:9a: 8c:53:3a:b4:80:30:75:47:6e:1e:1f:db:e7:6a:cd: a0:ef:de:87:7d:0a:f5:14:70:95:a5:e4:db:d2:2b: 83:ac:cd:e9:eb:47:51:83:e7:6f:09:4e:65:3e:a4: a7:8e:14:23:16:59:49:43:a0:f7:a8:77:2f:e0:c4: ad:c0:8a:31:51:f0:95:e4:23:87:ed:7d:fa:2c:a0: 91:0d:50:fb:1c:ee:50:ec:e0:ae:94:26:be:7d:07: df:aa:a3:3d:c6:7b:30:d8:b3:d6:b0:d6:ee:2e:b7: b9:c1:9a:77:57:77:8b:fe:61:58:63:51:0f:f2:7d: 2c:53:18:22:46:c8:33:c1:84:a8:1b:ec:25:57:21: 5a:fa:23:11:99:6d:71:40:ec:e7:ee:b0:05:3e:53: 6b:c1:04:30:90:02:b6:2d:de:1f:08:52:9f:73:b8: e9:67:d5:17:fa:fb:2a:ca:bb:10:72:0b:28:8a:c8: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F4:3F:4E:2D:B5:83:6E:58:E1:D3:C3:08:C6:3F:20:78:AD:6A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:92:94:7b:40:1f:11:4b:7c:d9:75:6d:9c:da:71:d7:6b:9e: 27:20:dc:5b:c3:fd:15:a9:24:2e:2e:7f:36:77:4a:b1:90:b5: 99:ea:bb:59:24:ec:77:7c:6c:ae:08:e5:a3:13:f8:98:ed:35: 53:87:e8:1f:55:63:c0:c1:65:88:6a:3f:f7:0a:d8:1b:b1:7c: f1:f8:67:1c:a1:8c:9b:29:08:89:c3:47:3c:63:f8:c8:16:a9: b4:11:a2:a0:38:c0:6a:54:2a:63:3e:55:34:ad:7b:a1:88:52: 81:c4:0b:8f:19:56:cc:df:67:bf:10:86:c0:27:8e:f5:29:bf: 64:49:a5:19:da:96:87:b0:d4:fc:47:c0:d3:33:dc:b1:cd:d1: 9a:62:72:5d:ca:c5:be:8d:03:52:82:94:ef:7f:21:f2:64:b2: 99:59:e9:b0:34:b6:dd:0d:f0:3d:48:64:df:ec:78:8b:fa:c0: ef:f2:be:33:89:82:fc:53:7d:7b:66:29:59:8c:15:8a:8a:fc: 9f:de:a5:0f:42:a1:6c:26:5c:5f:1f:1c:22:37:94:bb:3a:ee: 3c:e9:f1:ce:20:67:8e:a6:9a:b1:b4:54:a5:35:9e:9e:c2:9c: e5:5e:ee:50:85:98:a0:e7:15:02:e4:6f:be:c0:ff:9b:5a:ed: d6:35:f4:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfDRIyLThj7SPSS2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk ZmZhYThmOTYtNmIxZi00MWQwLWEyMGItNWMzNTY0YmJmN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK03HjGNf/ejz2s4wJ99Nr59j3w6Nas95YP9 NQuGYUJIC0GRzUEnchCebjxwihvB0X4V65SXvGROob1bBqwALZwNXUwPpLBOVZqM Uzq0gDB1R24eH9vnas2g796HfQr1FHCVpeTb0iuDrM3p60dRg+dvCU5lPqSnjhQj FllJQ6D3qHcv4MStwIoxUfCV5COH7X36LKCRDVD7HO5Q7OCulCa+fQffqqM9xnsw 2LPWsNbuLre5wZp3V3eL/mFYY1EP8n0sUxgiRsgzwYSoG+wlVyFa+iMRmW1xQOzn 7rAFPlNrwQQwkAK2Ld4fCFKfc7jpZ9UX+vsqyrsQcgsoisiaCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCn0P04ttYNuWOHTwwjGPyB4rWqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMzBhNGEzYWYtMGQ3Yy0z MTk2LThjMmItMWZmNmU4ZmU4MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGkpR7QB8RS3zZdW2c2nHXa54nINxbw/0VqSQuLn82d0qxkLWZ6rtZ JOx3fGyuCOWjE/iY7TVTh+gfVWPAwWWIaj/3CtgbsXzx+GccoYybKQiJw0c8Y/jI Fqm0EaKgOMBqVCpjPlU0rXuhiFKBxAuPGVbM32e/EIbAJ471Kb9kSaUZ2paHsNT8 R8DTM9yxzdGaYnJdysW+jQNSgpTvfyHyZLKZWemwNLbdDfA9SGTf7HiL+sDv8r4z iYL8U317ZilZjBWKivyf3qUPQqFsJlxfHxwiN5S7Ou486fHOIGeOppqxtFSlNZ6e wpzlXu5QhZig5xUC5G++wP+bWu3WNfTn -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org