$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa File: 9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa (raw, json) Hash identifier: mBe0MgK4jLfRabU5FxQiaXgDxkkeNCRmlXLVmEsK0fs= Subject key identifier: 67:77:1D:38:D6:63:BE:EB:EC:49:25:30:C6:25:BB:9D:83:7E:39:46 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F43285847DC64A1B0A87A1056BA83BC00 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 14464 IP address blocks: 2604:a700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:a1:b0:a8:7a:10:56:ba:83:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=b8d7f30c-759d-4304-9cf1-955083af9193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:fd:14:ed:a5:86:4e:71:2e:28:a4:2f:f8: b5:76:01:c5:a8:59:bd:7c:26:bf:40:18:b3:12:0a: 73:c0:c7:42:df:e4:19:80:63:9b:24:e0:f6:b5:0f: dd:c7:27:31:7e:08:9f:5e:be:11:15:aa:16:15:cb: 81:f9:23:68:6f:e4:62:ac:df:be:f4:3b:f0:8c:dc: 63:36:db:fc:c2:fb:ab:c7:c4:24:26:9d:0d:e1:e7: 36:77:d6:09:8f:4d:e8:e8:41:1c:db:bf:8a:51:5d: 4b:56:7d:35:4f:d4:98:54:78:92:79:46:bb:fb:bc: 20:42:42:4d:5b:25:20:f4:ec:50:17:ed:dd:29:0d: 3a:7c:3b:09:50:89:3e:9a:47:0f:fc:3b:dd:31:6c: 47:f1:f6:76:e2:f3:d1:77:9e:2c:56:01:7b:3f:20: 70:e9:af:ad:04:fa:fb:42:3f:6c:df:08:4c:97:29: bf:13:b8:a3:7e:3b:73:45:22:1c:85:a7:79:f7:94: 20:b4:a4:c7:14:16:9c:14:92:97:c6:ad:98:cb:b0: 0a:73:d4:9d:6e:39:e0:7b:69:95:54:8b:4c:b1:f5: bd:07:ac:f8:62:58:3e:9a:d1:b4:e0:15:e0:5d:bd: 7e:9d:64:ae:95:46:11:cd:42:f3:8d:02:43:46:ec: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:1D:38:D6:63:BE:EB:EC:49:25:30:C6:25:BB:9D:83:7E:39:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/9ba8a82c-11fe-34cb-aeff-099c28bd5098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv6: 2604:a700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:79:0f:a1:a4:1d:82:7c:20:ca:68:ba:4b:25:b2:b7:a5:06: 05:7b:ec:d8:23:d3:d4:a9:9f:fa:b7:5b:db:35:54:32:2f:56: 88:3d:2d:87:03:18:73:87:23:59:00:83:7f:44:20:6c:05:f7: b1:14:43:eb:1f:0f:98:af:00:3e:b3:d9:a0:df:aa:af:1f:ee: c3:dc:21:49:9c:69:ec:57:97:16:32:ae:36:69:2b:53:fd:e5: 60:e5:f2:c4:cd:a5:3f:9e:dc:ce:f6:14:65:0c:5c:4a:9d:a5: 02:02:db:a9:2e:aa:60:e1:a0:77:a7:13:91:9c:21:5c:e0:67: e1:9b:d9:ae:4d:5a:7d:b5:0c:b0:8d:6f:8f:5b:2a:21:e9:06: bb:80:10:bc:80:1b:08:75:85:a3:4f:30:10:f6:1e:8e:56:d1: e8:00:63:65:c8:53:22:34:93:26:ce:23:4b:bb:1a:14:8c:7b: 3f:76:94:d3:9d:67:10:d5:0b:57:7f:42:9c:5d:70:56:4d:2a: f7:b6:de:ab:e2:fa:a0:f4:24:cd:f9:bb:ac:08:ec:76:29:fb: 5c:c9:5b:d9:06:12:fd:c6:00:4f:a2:51:e9:a1:0b:aa:56:63: b8:d0:19:3e:d0:82:0c:e7:d7:f7:42:38:bd:a4:c9:10:50:43: 57:b2:28:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfcZKGwqHoQVrqDvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk YjhkN2YzMGMtNzU5ZC00MzA0LTljZjEtOTU1MDgzYWY5MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaL9FO2lhk5xLiikL/i1dgHFqFm9fCa/QBiz EgpzwMdC3+QZgGObJOD2tQ/dxycxfgifXr4RFaoWFcuB+SNob+RirN++9DvwjNxj Ntv8wvurx8QkJp0N4ec2d9YJj03o6EEc27+KUV1LVn01T9SYVHiSeUa7+7wgQkJN WyUg9OxQF+3dKQ06fDsJUIk+mkcP/DvdMWxH8fZ24vPRd54sVgF7PyBw6a+tBPr7 Qj9s3whMlym/E7ijfjtzRSIchad595QgtKTHFBacFJKXxq2Yy7AKc9Sdbjnge2mV VItMsfW9B6z4Ylg+mtG04BXgXb1+nWSulUYRzULzjQJDRuxOowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGd3HTjWY77r7EklMMYlu52DfjlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvOWJhOGE4MmMtMTFmZS0z NGNiLWFlZmYtMDk5YzI4YmQ1MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6eQ+hpB2CfCDKaLpLJbK3pQYFe+zYI9PUqZ/6t1vbNVQyL1aIPS2H AxhzhyNZAIN/RCBsBfexFEPrHw+YrwA+s9mg36qvH+7D3CFJnGnsV5cWMq42aStT /eVg5fLEzaU/ntzO9hRlDFxKnaUCAtupLqpg4aB3pxORnCFc4Gfhm9muTVp9tQyw jW+PWyoh6Qa7gBC8gBsIdYWjTzAQ9h6OVtHoAGNlyFMiNJMmziNLuxoUjHs/dpTT nWcQ1QtXf0KcXXBWTSr3tt6r4vqg9CTN+busCOx2KftcyVvZBhL9xgBPolHpoQuq VmO40Bk+0IIM59f3Qji9pMkQUENXsiiE -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:48 2024 by rpki-client on console-ams.rpki-client.org