$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa File: 5a332d9b-62ef-39aa-909f-d101b26e69f6.roa (raw, json) Hash identifier: oIjrFnvsGYgmf8Dybp8koPAJJKbyrv6OXi4vLx8yj10= Subject key identifier: 4D:A7:47:84:E1:CB:10:E1:3E:63:A2:7D:AE:16:A5:3B:01:36:59:26 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F43285847792BB993C573414C328ABC00 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 46824 IP address blocks: 2602:faa9::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:b9:93:c5:73:41:4c:32:8a:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=40245400-e785-4e5f-be68-49924ed85957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:24:e6:91:dc:5d:1a:83:a3:22:6a:35:34: 91:89:60:4d:1f:5e:73:45:42:c2:b6:26:13:9f:4c: f3:e5:fc:aa:5c:18:8e:6b:ba:9d:4d:c3:44:04:ee: 42:f1:08:9c:28:29:fa:3c:58:7b:64:c6:a4:9a:35: 2b:57:df:3d:38:9c:15:a4:96:6a:c2:b8:d7:0d:fc: 90:7b:5a:9d:6c:00:8e:db:46:2d:2d:67:b7:99:96: a4:53:df:03:41:b3:6a:d3:54:e0:76:0b:c6:8d:ed: 3a:ae:59:b7:67:b8:65:f7:02:db:cf:9f:a0:52:c3: de:22:b6:f9:cd:64:5c:b8:e3:7b:ec:e7:58:ea:aa: ed:46:d1:d7:0e:fb:51:6f:86:35:15:08:4e:82:95: 96:f9:50:e1:0b:5e:4c:34:b2:16:7f:09:45:89:0a: 37:67:1d:f6:4f:f8:4d:de:40:b9:ca:4a:8f:40:79: b9:d0:46:2e:f1:62:07:9d:8c:0e:39:55:43:14:8d: 68:66:b8:29:b2:cc:34:42:eb:58:bb:49:3b:b5:13: 53:69:fe:48:bc:3f:72:b4:02:62:c0:9b:e6:a7:1e: 3a:bc:05:06:aa:a2:a7:b7:ba:d5:4d:35:30:ed:6e: b9:df:84:94:52:70:2f:78:65:cf:2b:b4:5d:18:0d: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:47:84:E1:CB:10:E1:3E:63:A2:7D:AE:16:A5:3B:01:36:59:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv6: 2602:faa9::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:22:3d:36:50:b1:33:2e:1b:e0:1c:75:8c:da:8e:56:ba:65: 8e:ca:6e:ce:d9:ca:3a:d4:5c:b0:b1:2e:35:e3:ba:54:11:f3: ab:5b:a5:cb:03:59:ee:f8:1c:90:93:32:04:76:d4:76:1a:24: e4:db:75:54:ff:c8:36:15:da:f3:58:0f:47:c0:7d:22:63:0c: 67:36:91:96:8c:4e:ee:3e:75:f2:e9:52:15:47:a3:aa:05:1b: e8:93:8b:02:80:f6:39:69:da:81:83:df:90:16:c1:cd:9c:30: 3d:8e:4c:f7:18:40:1b:36:34:58:26:f5:7d:63:fb:e5:90:57: 48:df:f7:d2:22:7e:34:cf:c5:ef:18:c4:4d:81:5a:f1:f0:7c: 10:7a:e4:2f:7f:c5:f9:ae:b0:dd:ee:0d:ca:bc:b9:0e:5f:21: e8:eb:cc:c0:ce:05:cd:1d:74:be:b9:7d:41:30:b6:37:da:c3: 4e:0e:c4:36:e9:6e:e5:20:c9:16:55:51:64:fa:03:f7:11:69: 88:bf:2c:5a:dc:b1:06:db:71:a4:30:2b:41:b9:83:cb:12:3d: 13:8f:c3:42:36:65:c4:8b:d0:3c:28:55:ab:c1:b8:a2:38:b5: 74:99:82:32:b1:79:0a:a5:25:40:cc:b8:2f:09:01:4c:0a:d8: a6:62:34:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd5K7mTxXNBTDKKvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NDAyNDU0MDAtZTc4NS00ZTVmLWJlNjgtNDk5MjRlZDg1OTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcok5pHcXRqDoyJqNTSRiWBNH15zRULCtiYT n0zz5fyqXBiOa7qdTcNEBO5C8QicKCn6PFh7ZMakmjUrV989OJwVpJZqwrjXDfyQ e1qdbACO20YtLWe3mZakU98DQbNq01TgdgvGje06rlm3Z7hl9wLbz5+gUsPeIrb5 zWRcuON77OdY6qrtRtHXDvtRb4Y1FQhOgpWW+VDhC15MNLIWfwlFiQo3Zx32T/hN 3kC5ykqPQHm50EYu8WIHnYwOOVVDFI1oZrgpssw0QutYu0k7tRNTaf5IvD9ytAJi wJvmpx46vAUGqqKnt7rVTTUw7W6534SUUnAveGXPK7RdGA20FQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE2nR4ThyxDhPmOifa4WpTsBNlkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNWEzMzJkOWItNjJlZi0z OWFhLTkwOWYtZDEwMWIyNmU2OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL6qTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaIj02ULEzLhvgHHWM2o5WumWOym7O2co61FywsS4147pUEfOrW6XL A1nu+ByQkzIEdtR2GiTk23VU/8g2FdrzWA9HwH0iYwxnNpGWjE7uPnXy6VIVR6Oq BRvok4sCgPY5adqBg9+QFsHNnDA9jkz3GEAbNjRYJvV9Y/vlkFdI3/fSIn40z8Xv GMRNgVrx8HwQeuQvf8X5rrDd7g3KvLkOXyHo68zAzgXNHXS+uX1BMLY32sNODsQ2 6W7lIMkWVVFk+gP3EWmIvyxa3LEG23GkMCtBuYPLEj0Tj8NCNmXEi9A8KFWrwbii OLV0mYIysXkKpSVAzLgvCQFMCtimYjRL -----END CERTIFICATE-----Generated at Fri Nov 22 22:23:05 2024 by rpki-client on console-ams.rpki-client.org