$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa File: 85bba22a-31d7-3277-9d23-3f253e7d429a.roa (raw, json) Hash identifier: Za5ZPKAtGgdyH0kp7QUBxG0ekpv2zzaCYBFvoG8i/GY= Subject key identifier: C7:99:17:E9:21:AD:C0:37:AA:C1:9D:A8:D1:F7:56:53:DC:5A:35:48 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F43285847213B0DDAB2515578FB687000 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 6653 IP address blocks: 2604:280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:0d:da:b2:51:55:78:fb:68:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=a20085c0-54c9-4ddd-80ec-3e2be75c0d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:e8:61:a2:dd:ec:c0:6d:e3:be:30:99:13: 03:c0:d0:ec:b7:3e:c7:3c:3d:d5:ef:74:d9:46:6e: c5:b6:20:df:b4:94:de:59:0e:41:90:19:6b:39:11: ea:0f:5f:2d:a3:69:ec:cb:3a:45:8a:5f:06:be:27: 6e:0c:15:8e:d0:8d:e7:ea:ef:69:1d:86:1f:8c:6d: 47:7d:6e:f4:28:4f:c4:6b:9c:95:24:84:87:41:8e: c7:0b:6a:d0:2d:97:60:7b:3a:6e:a0:e3:1f:a8:fc: 02:3c:e8:3b:ba:62:ac:32:f5:3a:ce:94:ef:58:9a: fc:c3:c0:db:cb:29:17:4c:ac:c1:f9:a8:70:39:e4: d1:7e:ea:43:96:30:4b:81:9f:13:68:8c:23:85:20: 54:7c:86:0f:fe:97:b7:43:3b:fd:fa:59:19:17:25: 8e:28:e9:2f:cd:cb:09:a3:c4:14:ff:e0:42:bc:c5: c7:01:f4:8c:b5:c5:9a:5c:13:24:a9:0f:6d:a4:cd: fc:3d:73:7e:b5:dc:86:96:39:79:7f:f1:dc:dd:10: 33:d7:55:b0:ee:88:b8:dd:43:ed:58:0f:24:49:26: cc:dd:bb:87:02:b4:3f:4b:fc:90:cb:f5:63:1f:c8: ac:83:05:38:51:be:af:60:4b:27:fe:2b:ae:3d:46: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:99:17:E9:21:AD:C0:37:AA:C1:9D:A8:D1:F7:56:53:DC:5A:35:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv6: 2604:280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d3:1e:be:2d:bc:b8:16:20:04:03:1a:a3:09:b8:a5:82:d5: 94:00:c1:68:44:82:c4:f1:05:42:4b:e8:9b:5a:a7:e9:57:49: 79:4f:ef:19:41:34:21:91:a1:51:12:26:64:24:ae:73:a4:4f: 4a:b4:f4:46:e8:9e:51:4c:a4:c6:90:7e:97:6a:c8:40:bd:6c: 5a:7c:09:1e:92:ca:30:1e:d4:a7:76:7a:49:82:33:76:d1:2f: 8c:1f:d7:27:2a:71:3e:c9:38:f5:6e:04:95:75:8c:c5:c7:fd: 48:04:a8:3e:0b:28:97:14:77:da:2a:c7:e1:c4:70:5f:a5:55: 7c:0e:37:fb:38:0c:80:13:9b:3f:4d:c0:79:8c:bf:78:5f:ab: 13:4d:f6:d1:c3:3f:71:83:c6:68:31:40:13:49:48:80:8b:3f: 8f:94:b0:34:25:18:af:a3:05:3b:f4:cf:e6:2a:9f:f0:0b:8c: 75:3c:27:68:bb:65:a1:dc:e7:1d:78:4a:75:87:31:4f:5e:bb: f8:0b:23:bf:91:27:1e:b7:d5:0f:44:93:a3:53:7c:cd:23:2f: 82:56:86:52:17:1c:36:9f:ee:c0:b5:01:20:6b:83:03:74:fa: e1:c8:54:f7:20:06:41:36:20:8d:8b:af:80:bc:4d:3d:1b:d7: a9:74:1f:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEchOw3aslFVePtocAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk YTIwMDg1YzAtNTRjOS00ZGRkLTgwZWMtM2UyYmU3NWMwZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaXoYaLd7MBt474wmRMDwNDstz7HPD3V73TZ Rm7FtiDftJTeWQ5BkBlrORHqD18to2nsyzpFil8GviduDBWO0I3n6u9pHYYfjG1H fW70KE/Ea5yVJISHQY7HC2rQLZdgezpuoOMfqPwCPOg7umKsMvU6zpTvWJr8w8Db yykXTKzB+ahwOeTRfupDljBLgZ8TaIwjhSBUfIYP/pe3Qzv9+lkZFyWOKOkvzcsJ o8QU/+BCvMXHAfSMtcWaXBMkqQ9tpM38PXN+tdyGljl5f/Hc3RAz11Ww7oi43UPt WA8kSSbM3buHArQ/S/yQy/VjH8isgwU4Ub6vYEsn/iuuPUZshQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMeZF+khrcA3qsGdqNH3VlPcWjVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvODViYmEyMmEtMzFkNy0z Mjc3LTlkMjMtM2YyNTNlN2Q0MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBr0x6+Lby4FiAEAxqjCbilgtWUAMFoRILE8QVCS+ibWqfpV0l5T+8Z QTQhkaFREiZkJK5zpE9KtPRG6J5RTKTGkH6XashAvWxafAkeksowHtSndnpJgjN2 0S+MH9cnKnE+yTj1bgSVdYzFx/1IBKg+CyiXFHfaKsfhxHBfpVV8Djf7OAyAE5s/ TcB5jL94X6sTTfbRwz9xg8ZoMUATSUiAiz+PlLA0JRivowU79M/mKp/wC4x1PCdo u2Wh3OcdeEp1hzFPXrv4CyO/kScet9UPRJOjU3zNIy+CVoZSFxw2n+7AtQEga4MD dPrhyFT3IAZBNiCNi6+AvE09G9epdB9a -----END CERTIFICATE-----Generated at Mon Nov 25 16:30:48 2024 by rpki-client on console-ams.rpki-client.org