$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa File: 341debe4-149d-318d-932a-74d9e8faae16.roa (raw, json) Hash identifier: uaqkb1dpgNyfQR+28LzfTEjeUR+NK8a0O5nAcfyrk5g= Subject key identifier: 57:D4:E7:C4:65:F4:AA:D8:F0:78:45:6D:5A:A9:F2:B5:FF:73:59:FC Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F432858476C9DABD6D6E5887B9FFF9CC0 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 14340 IP address blocks: 2600:e807:1111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:ab:d6:d6:e5:88:7b:9f:ff:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=b7e678e9-59af-4e4b-acfe-0d7ca687ff02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:20:0a:64:36:e9:79:13:de:75:14:98:8c:b2: 28:e8:28:f2:d5:20:dd:b7:75:25:a1:35:68:2c:6f: 2e:7a:46:a2:45:a1:8d:c0:ca:62:09:d5:a4:21:6a: 81:7c:98:b5:e3:1a:a2:64:ef:ad:c8:2a:04:48:49: 73:96:cd:04:07:78:82:04:61:36:31:17:b6:92:56: c6:de:20:91:b9:95:da:0a:4e:37:d8:09:37:a1:3f: 09:40:07:05:b5:ca:1c:27:a8:f4:46:0e:f7:4b:2b: a5:65:19:f2:ef:98:d0:f8:a7:5e:fb:d8:51:90:c1: de:8d:d9:12:7c:49:ed:e2:c1:14:84:f2:aa:e5:df: db:15:9b:18:4c:8b:6a:29:52:51:93:92:c8:c1:3d: ef:c0:ca:a7:80:25:bd:c0:4b:e6:cc:40:f7:68:22: e5:76:b9:50:a5:ea:dc:de:b3:1c:49:46:42:d8:67: 4a:9a:f2:94:6a:45:ff:15:66:f4:7b:68:42:ab:f2: eb:59:53:6a:5e:68:ea:ba:db:a1:87:6a:73:82:cd: 2b:8a:8c:0b:d1:dc:42:b0:c2:1a:ad:1d:31:54:3e: 43:33:6a:fe:2a:ac:cc:1d:da:11:c5:e9:8d:5a:00: 4c:35:89:3f:a9:6e:2d:99:f5:00:35:50:99:92:b9: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D4:E7:C4:65:F4:AA:D8:F0:78:45:6D:5A:A9:F2:B5:FF:73:59:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/341debe4-149d-318d-932a-74d9e8faae16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv6: 2600:e807:1111::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:29:2c:2a:0d:c0:65:c8:57:06:95:9f:9f:4b:0e:b0:65:b8: 05:1f:91:b8:ff:87:aa:0a:e9:ff:dd:d4:30:5f:a5:9e:b6:e4: 88:73:28:c0:5f:84:34:07:61:d3:c2:43:3e:e0:65:ec:86:b0: dd:17:b3:2b:0c:83:72:31:21:9c:86:49:b9:f6:0b:f8:5e:6b: f2:c3:c9:6b:de:a2:1e:c7:3a:de:4b:4c:13:c5:ea:19:3e:f9: d5:a4:ef:f9:71:97:61:77:6d:ed:8c:72:e3:f3:df:08:02:26: d0:66:78:cf:6f:f1:c3:90:00:fa:84:c2:a3:7a:52:eb:39:6f: d2:75:20:eb:0f:1a:ec:5a:57:3f:3a:99:a1:26:82:69:da:e5: a5:c0:f6:0a:eb:ed:1a:70:91:35:81:ca:6d:d0:32:78:19:f3: 77:ea:5c:cd:44:b6:98:8f:e7:77:37:e6:14:cd:39:26:22:28: af:74:93:5d:2e:9b:7c:87:a4:c6:59:04:35:01:36:9b:de:60: 8f:b3:a2:80:c8:67:fe:cc:42:25:6e:bb:7d:1f:43:ec:cf:7d: 15:64:40:8c:3a:4f:a6:f0:56:87:54:9f:23:ce:6c:b2:cf:aa: ac:fe:53:11:76:e1:7e:7e:d6:11:ac:b4:11:a4:c1:87:65:a5: 3c:a4:c4:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdsnavW1uWIe5//nMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk YjdlNjc4ZTktNTlhZi00ZTRiLWFjZmUtMGQ3Y2E2ODdmZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSAKZDbpeRPedRSYjLIo6Cjy1SDdt3UloTVo LG8uekaiRaGNwMpiCdWkIWqBfJi14xqiZO+tyCoESElzls0EB3iCBGE2MRe2klbG 3iCRuZXaCk432Ak3oT8JQAcFtcocJ6j0Rg73SyulZRny75jQ+Kde+9hRkMHejdkS fEnt4sEUhPKq5d/bFZsYTItqKVJRk5LIwT3vwMqngCW9wEvmzED3aCLldrlQperc 3rMcSUZC2GdKmvKUakX/FWb0e2hCq/LrWVNqXmjqutuhh2pzgs0riowL0dxCsMIa rR0xVD5DM2r+KqzMHdoRxemNWgBMNYk/qW4tmfUANVCZkrkfDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFfU58Rl9KrY8HhFbVqp8rX/c1n8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvMzQxZGViZTQtMTQ5ZC0z MThkLTkzMmEtNzRkOWU4ZmFhZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgDoBxER MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0pLCoNwGXIVwaVn59LDrBluAUfkbj/h6oK6f/d1DBfpZ625Ihz KMBfhDQHYdPCQz7gZeyGsN0XsysMg3IxIZyGSbn2C/hea/LDyWveoh7HOt5LTBPF 6hk++dWk7/lxl2F3be2McuPz3wgCJtBmeM9v8cOQAPqEwqN6Uus5b9J1IOsPGuxa Vz86maEmgmna5aXA9grr7RpwkTWBym3QMngZ83fqXM1EtpiP53c35hTNOSYiKK90 k10um3yHpMZZBDUBNpveYI+zooDIZ/7MQiVuu30fQ+zPfRVkQIw6T6bwVodUnyPO bLLPqqz+UxF24X5+1hGstBGkwYdlpTykxCY= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:28 2024 by rpki-client on console-ams.rpki-client.org