$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa File: fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa (raw, json) Hash identifier: 6wRlthDJSFhq6OVOFTdhioH3WSsvyOE2ZjgDINmNBsQ= Subject key identifier: 3A:3A:41:A2:B5:F7:6E:09:5A:E4:67:D9:21:1E:C3:28:02:2C:52:FA Certificate issuer: /CN=6f206706-c108-40c1-8f2d-14fbbf92d951 Certificate serial: 010D0C9F43285847DC64A10190D2CBB69014FB80 Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 32484 IP address blocks: 2607:2ac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:a1:01:90:d2:cb:b6:90:14:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=42cb2dff-56b6-426c-a656-6e502011ddf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:6b:3c:46:f2:51:0d:23:c9:ca:2a:40:11: 3e:d5:fd:1c:ca:b3:e7:b7:18:a1:61:e0:18:48:5b: 2e:de:94:ee:d1:e9:06:73:ab:93:40:ae:2e:85:fb: 6d:10:53:09:e6:2c:db:d0:e5:87:70:82:c7:b6:94: 1f:35:a7:0c:0a:f3:f7:83:31:50:ff:c2:a3:50:2d: ae:c3:26:b9:95:04:ca:82:eb:8f:57:f4:6f:e8:bc: 69:80:47:75:72:b0:0f:41:6e:50:71:13:8c:9e:9f: 6e:bb:78:5b:78:30:1e:58:2f:b5:f2:72:7c:90:2a: b6:e5:37:a7:6a:a8:0c:4a:b7:a6:1b:7b:54:a9:7d: 8c:f5:6d:89:96:18:ed:0a:3a:c1:51:33:95:8f:31: f5:3a:1c:53:53:ab:a1:4c:74:f9:0e:00:8c:32:4b: 5b:d8:e5:85:c9:d6:ee:4c:c8:17:6a:46:90:9c:41: 32:62:5b:57:d1:3a:11:c5:99:59:48:70:08:33:f7: cd:a4:c3:be:e3:59:1c:3d:17:59:5c:f3:26:5f:84: 88:22:80:76:9a:38:cb:29:b1:71:36:ec:9a:b5:ef: 36:b4:d6:c2:9d:b1:90:05:fe:f6:51:02:94:03:4f: a7:3e:cc:cc:86:da:85:2f:1e:b4:f5:02:60:bb:05: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3A:41:A2:B5:F7:6E:09:5A:E4:67:D9:21:1E:C3:28:02:2C:52:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl X509v3 Authority Key Identifier: keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer sbgp-ipAddrBlock: critical IPv6: 2607:2ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:51:25:b0:83:ee:36:0d:9b:26:65:bc:b9:e5:ac:7e:7d:d5: 5b:8e:9e:b5:f6:1d:f3:cf:5a:8c:09:b0:e0:89:58:08:46:c8: 2f:4a:65:55:ac:88:14:a1:f6:cc:ab:4a:e5:30:c9:5e:05:b5: 5e:88:bf:76:1d:af:fc:0c:66:ae:1e:9e:20:37:b7:ca:86:76: 78:15:e3:6b:42:22:f5:14:a5:08:38:df:8d:66:b5:90:31:66: 7f:5c:10:67:ed:08:93:9b:9a:d1:fd:64:3f:65:c0:ee:a8:cf: 5b:00:b6:c5:38:5e:fe:83:23:bc:d4:a9:82:60:2f:bf:8d:91: 7b:55:fc:c3:87:ce:b0:b5:bf:32:a2:b0:40:81:f2:62:50:65: b8:6b:db:5b:92:0f:58:08:c0:37:74:97:88:c4:6b:70:f3:dd: 22:0e:c9:fb:6b:b6:ef:98:6e:15:e1:e0:b4:d6:62:88:87:5b: 39:b5:b1:55:e8:59:60:c2:bd:6c:f2:3a:c6:52:cd:aa:ec:e5: 65:ca:c5:91:61:90:1c:65:3d:95:3c:c4:a1:f1:60:55:5a:62: 98:da:1f:af:d3:d0:54:80:d8:cc:ab:ba:95:ee:92:8a:e2:1e: 31:b9:6d:8b:ea:f4:61:4c:bb:82:78:fe:53:0c:eb:24:79:90: 90:e6:0f:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfcZKEBkNLLtpAU+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYyMDY3MDYtYzEwOC00MGMxLThmMmQtMTRmYmJmOTJk OTUxMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk NDJjYjJkZmYtNTZiNi00MjZjLWE2NTYtNmU1MDIwMTFkZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUVrPEbyUQ0jycoqQBE+1f0cyrPntxihYeAY SFsu3pTu0ekGc6uTQK4uhfttEFMJ5izb0OWHcILHtpQfNacMCvP3gzFQ/8KjUC2u wya5lQTKguuPV/Rv6LxpgEd1crAPQW5QcROMnp9uu3hbeDAeWC+18nJ8kCq25Ten aqgMSremG3tUqX2M9W2JlhjtCjrBUTOVjzH1OhxTU6uhTHT5DgCMMktb2OWFydbu TMgXakaQnEEyYltX0ToRxZlZSHAIM/fNpMO+41kcPRdZXPMmX4SIIoB2mjjLKbFx Nuyate82tNbCnbGQBf72UQKUA0+nPszMhtqFLx609QJguwXXUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDo6QaK1924JWuRn2SEewygCLFL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZjIw NjcwNi1jMTA4LTQwYzEtOGYyZC0xNGZiYmY5MmQ5NTEvZmQ0YjRjYzQtODY3OC0z ZmYzLWI1YTYtMTEwMDUxZTM1ODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmYyMDY3MDYtYzEwOC00MGMxLThm MmQtMTRmYmJmOTJkOTUxLzZmMjA2NzA2LWMxMDgtNDBjMS04ZjJkLTE0ZmJiZjky ZDk1MS5jcmwwHwYDVR0jBBgwFoAUG6vHwS3/L3lunEvd9i1HuF/D72swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZjIwNjcwNi1jMTA4LTQwYzEtOGYyZC0xNGZi YmY5MmQ5NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcqwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeUSWwg+42DZsmZby55ax+fdVbjp619h3zz1qMCbDgiVgIRsgvSmVV rIgUofbMq0rlMMleBbVeiL92Ha/8DGauHp4gN7fKhnZ4FeNrQiL1FKUION+NZrWQ MWZ/XBBn7QiTm5rR/WQ/ZcDuqM9bALbFOF7+gyO81KmCYC+/jZF7VfzDh86wtb8y orBAgfJiUGW4a9tbkg9YCMA3dJeIxGtw890iDsn7a7bvmG4V4eC01mKIh1s5tbFV 6Flgwr1s8jrGUs2q7OVlysWRYZAcZT2VPMSh8WBVWmKY2h+v09BUgNjMq7qV7pKK 4h4xuW2L6vRhTLuCeP5TDOskeZCQ5g9b -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org