$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa File: 3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa (raw, json) Hash identifier: thCuTKovBwCrkqDWKjmkXegAyk4hHQRW1BoKbe067yc= Subject key identifier: 7D:27:D3:A6:72:1F:7B:0B:40:63:9E:94:F2:85:BC:84:92:C5:D8:70 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285847527C15367D7117EEB6EF41A6 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa Signing time: Tue 24 Sep 2024 16:26:15 +0000 ROA not before: Tue 24 Sep 2024 16:26:15 +0000 ROA not after: Mon 23 Dec 2024 17:26:15 +0000 asID: 397217 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Oct 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:7c:15:36:7d:71:17:ee:b6:ef:41:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 24 16:26:15 2024 GMT Not After : Dec 23 17:26:15 2024 GMT Subject: CN=f9c5129e-c772-474a-b0d3-d60cb91c4db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:46:7a:df:b1:fd:36:c8:9b:56:8c:de:16:07: a3:e1:66:cb:c3:08:e2:1a:9d:2a:44:e6:a1:4f:ad: f8:81:a0:ce:02:3d:73:fb:74:ad:a1:b6:3d:d6:d8: 84:4a:05:48:27:15:d8:05:b5:dd:e2:51:10:76:3e: d7:3d:63:d5:dd:85:4d:6d:30:c0:fb:b4:04:3e:f2: 06:e1:73:f8:a2:76:c5:46:18:99:68:b2:65:2b:02: 87:44:9e:77:69:83:76:bc:f8:b8:2f:00:7f:1b:cf: 1d:ea:bf:12:c8:7f:02:1e:ab:0b:f7:c3:4b:27:f6: 16:6c:31:0f:4a:e9:0a:73:29:e4:a9:ce:58:09:8d: ef:04:74:c0:d2:10:8c:05:e8:09:26:42:55:f0:d2: 9a:66:6d:79:bf:66:44:b3:59:66:1c:5f:b6:c4:91: 75:29:de:1b:4c:04:a1:f9:60:ef:22:92:8f:66:7a: 23:36:93:7c:64:90:18:a1:7b:7d:2a:7d:50:c7:29: 08:6d:65:c9:ce:b6:9e:8f:6e:ec:3e:5f:75:c3:fd: b3:0f:02:9c:1b:7e:08:15:38:56:21:82:d2:da:a9: ba:88:60:09:ee:50:49:25:af:63:40:62:de:93:24: 91:99:e1:0a:20:4c:01:3f:bf:ec:ea:f8:0f:d9:86: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:27:D3:A6:72:1F:7B:0B:40:63:9E:94:F2:85:BC:84:92:C5:D8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3de9f0e2-58ae-33a4-818c-a93128a77f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:50:86:14:78:19:dc:14:b1:11:7e:35:dc:28:f3:a2:a9:fc: a0:f9:3b:24:af:6a:13:a6:60:42:91:d1:70:d5:85:6b:a2:41: 3a:88:61:b7:97:3f:2c:ae:9f:33:5f:87:6c:6d:f4:96:9b:02: 78:38:e9:c3:40:90:59:a2:51:76:24:b4:46:53:91:87:78:d3: a7:ab:e5:d4:e9:36:cd:99:da:6f:ef:2b:c1:c2:e3:08:47:c0: dc:20:ca:04:af:85:81:e6:10:c2:e4:7a:53:18:68:cb:36:1c: 77:b0:15:9f:8a:f0:92:db:52:df:e9:8b:83:46:1a:bb:c0:6d: 0a:82:a0:0d:8e:e9:4d:54:a7:88:06:09:f5:80:bf:d9:3c:35: d4:34:1d:aa:15:a9:9f:4c:f9:42:c7:ac:9c:44:7a:5f:de:79: 05:7a:a1:94:1d:4e:76:7e:b8:dd:23:8d:73:f2:35:35:0e:c0: 89:87:a7:04:12:56:32:6e:3e:8a:7c:f6:c4:41:91:c7:d9:a4: ab:d8:65:4e:7f:fe:1d:d6:82:a5:f3:8c:77:e8:ec:84:2f:46: 88:76:83:51:f0:af:fd:76:09:c8:10:b6:22:e9:1e:20:41:7b: e6:54:7b:9a:79:9a:7b:c3:11:07:7f:3d:f1:7f:75:91:4b:d4: d7:5e:c6:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdSfBU2fXEX7rbvQaYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI0MDkyNDE2MjYxNVoXDTI0MTIyMzE3MjYxNVowLzEtMCsGA1UEAxMk ZjljNTEyOWUtYzc3Mi00NzRhLWIwZDMtZDYwY2I5MWM0ZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkZ637H9NsibVozeFgej4WbLwwjiGp0qROah T634gaDOAj1z+3StobY91tiESgVIJxXYBbXd4lEQdj7XPWPV3YVNbTDA+7QEPvIG 4XP4onbFRhiZaLJlKwKHRJ53aYN2vPi4LwB/G88d6r8SyH8CHqsL98NLJ/YWbDEP SukKcynkqc5YCY3vBHTA0hCMBegJJkJV8NKaZm15v2ZEs1lmHF+2xJF1Kd4bTASh +WDvIpKPZnojNpN8ZJAYoXt9Kn1QxykIbWXJzraej27sPl91w/2zDwKcG34IFThW IYLS2qm6iGAJ7lBJJa9jQGLekySRmeEKIEwBP7/s6vgP2YYd3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0n06ZyH3sLQGOelPKFvISSxdhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2RlOWYwZTItNThhZS0z M2E0LTgxOGMtYTkzMTI4YTc3ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBQhhR4GdwUsRF+Ndwo86Kp/KD5OySvahOmYEKR0XDVhWuiQTqI YbeXPyyunzNfh2xt9JabAng46cNAkFmiUXYktEZTkYd406er5dTpNs2Z2m/vK8HC 4whHwNwgygSvhYHmEMLkelMYaMs2HHewFZ+K8JLbUt/pi4NGGrvAbQqCoA2O6U1U p4gGCfWAv9k8NdQ0HaoVqZ9M+ULHrJxEel/eeQV6oZQdTnZ+uN0jjXPyNTUOwImH pwQSVjJuPop89sRBkcfZpKvYZU5//h3WgqXzjHfo7IQvRoh2g1Hwr/12CcgQtiLp HiBBe+ZUe5p5mnvDEQd/PfF/dZFL1NdexpQ= -----END CERTIFICATE-----Generated at Fri Oct 25 20:01:09 2024 by rpki-client on console-ams.rpki-client.org