$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa File: 825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa (raw, json) Hash identifier: UAW+nRxm4pIsmzuZlP0q11k7YvpdHVTVfPqAl0V5IPQ= Subject key identifier: 5A:D4:DC:E4:FF:E3:C3:81:6E:55:D1:65:FC:A6:02:52:15:62:4D:9E Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F43285847ED24BDF5FBDCDB1715D90D80 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 22987 IP address blocks: 2604:f6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:bd:f5:fb:dc:db:17:15:d9:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=60562ab9-3b6a-4c43-a104-0b8cc6299f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:ac:7e:4a:31:4d:87:4e:a3:24:62:53:9f: 36:d6:fc:c4:b2:6b:e2:35:f8:3e:bb:7b:0a:b4:37: 7e:59:fb:be:a9:b2:1f:99:a1:93:14:8e:bd:a7:0f: 96:81:80:fe:04:90:d3:29:df:b9:35:53:29:f4:4b: 3b:fc:e2:47:30:ca:7c:c7:02:37:04:21:8e:c8:0f: d5:5e:2a:df:9b:4c:ff:4b:4a:4d:6b:e4:fe:ea:75: aa:96:e5:8c:a4:9b:92:74:49:68:45:03:d8:77:15: 8d:f5:ca:f6:88:36:bb:cc:c3:a7:c8:ca:59:3f:bc: db:84:6c:4f:38:88:74:48:e1:c5:6f:6c:8b:b6:c9: 28:23:aa:03:61:89:66:2e:48:ab:8f:18:03:b2:b1: 87:f7:19:25:f6:2c:03:17:8e:66:9a:de:ee:4c:89: 8f:61:ef:bb:ec:41:bd:5b:7e:65:69:c1:0c:bb:be: a3:bb:6e:41:66:a3:54:67:d6:f5:df:76:14:d6:1f: 91:77:85:e4:b0:15:7a:20:1d:7a:59:da:43:79:81: ae:fd:9d:4f:77:e2:b5:63:b9:c8:88:74:07:b7:6e: 0e:ce:f2:d8:b7:15:9e:51:c9:86:78:d0:55:4a:03: 78:cb:63:78:76:ce:4a:97:d8:cb:65:e1:86:00:0f: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D4:DC:E4:FF:E3:C3:81:6E:55:D1:65:FC:A6:02:52:15:62:4D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv6: 2604:f6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:09:35:7a:73:f8:62:b5:54:df:0a:99:54:bb:86:2f:f2:3a: 3a:01:86:cc:f9:c6:c1:09:24:5c:d3:4a:e1:f2:86:10:18:84: 7e:1a:a7:99:e9:ee:f6:58:69:1e:03:8b:a0:5a:5e:dc:d6:f9: 3f:1a:51:8e:4b:42:63:31:51:b0:17:5b:bd:71:8c:3f:59:1a: 2d:df:4f:8f:da:03:26:f4:a8:63:c0:1c:fa:77:ec:7b:f9:d3: 31:b4:19:ca:44:b5:36:f5:69:09:64:1b:ef:d0:a9:23:b7:c8: b6:57:34:4a:a3:85:52:50:93:b5:25:52:b8:20:1a:eb:29:35: 3a:59:4e:06:69:a9:d0:ed:6c:44:f5:53:2a:7f:5c:89:50:6c: 7d:65:26:8c:ac:45:54:4b:ba:34:fc:a7:77:6d:94:3f:a6:5f: 38:82:1b:d9:e4:6f:29:cd:34:24:4c:d4:92:9a:2e:9b:5d:bc: 76:ee:e3:6a:1c:6e:b5:b2:ce:da:73:d4:eb:57:62:39:9d:10: 2a:52:f2:e3:cd:ab:04:6c:7f:dd:99:f3:a1:9e:68:eb:36:e8: bb:04:09:d4:d6:5c:88:c5:5c:9c:25:0f:57:53:e2:80:10:bf: f5:a9:32:0c:b2:5d:46:fd:39:af:eb:ba:3f:e6:d7:95:08:09: 16:64:e1:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEftJL31+9zbFxXZDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk NjA1NjJhYjktM2I2YS00YzQzLWExMDQtMGI4Y2M2Mjk5ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN6sfkoxTYdOoyRiU5821vzEsmviNfg+u3sK tDd+Wfu+qbIfmaGTFI69pw+WgYD+BJDTKd+5NVMp9Es7/OJHMMp8xwI3BCGOyA/V Xirfm0z/S0pNa+T+6nWqluWMpJuSdEloRQPYdxWN9cr2iDa7zMOnyMpZP7zbhGxP OIh0SOHFb2yLtskoI6oDYYlmLkirjxgDsrGH9xkl9iwDF45mmt7uTImPYe+77EG9 W35lacEMu76ju25BZqNUZ9b133YU1h+Rd4XksBV6IB16WdpDeYGu/Z1Pd+K1Y7nI iHQHt24OzvLYtxWeUcmGeNBVSgN4y2N4ds5Kl9jLZeGGAA+1aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFrU3OT/48OBblXRZfymAlIVYk2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvODI1MTQ4YWUtOGVlOS0z YjUzLTlmZGEtZmY2ZWI0OTEyYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT2wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAiCTV6c/hitVTfCplUu4Yv8jo6AYbM+cbBCSRc00rh8oYQGIR+GqeZ 6e72WGkeA4ugWl7c1vk/GlGOS0JjMVGwF1u9cYw/WRot30+P2gMm9KhjwBz6d+x7 +dMxtBnKRLU29WkJZBvv0Kkjt8i2VzRKo4VSUJO1JVK4IBrrKTU6WU4GaanQ7WxE 9VMqf1yJUGx9ZSaMrEVUS7o0/Kd3bZQ/pl84ghvZ5G8pzTQkTNSSmi6bXbx27uNq HG61ss7ac9TrV2I5nRAqUvLjzasEbH/dmfOhnmjrNui7BAnU1lyIxVycJQ9XU+KA EL/1qTIMsl1G/Tmv67o/5teVCAkWZOGR -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org