$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa File: 405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa (raw, json) Hash identifier: xpACEbU8Xpq8XD/9RZymvoonnoUZye5zI/LwPrl8oV4= Subject key identifier: B0:2C:8A:DB:DA:A3:9E:5D:DE:9E:B3:C3:7D:A4:DA:C8:2E:97:6D:A2 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F43285847924BDDDB7B6B8DE403ED0360 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa Signing time: Thu 17 Oct 2024 13:00:42 +0000 ROA not before: Thu 17 Oct 2024 13:00:42 +0000 ROA not after: Wed 15 Jan 2025 14:00:42 +0000 asID: 21559 IP address blocks: 2604:1cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:92:4b:dd:db:7b:6b:8d:e4:03:ed:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Oct 17 13:00:42 2024 GMT Not After : Jan 15 14:00:42 2025 GMT Subject: CN=956346ff-32aa-46c7-a04a-4a364077ba8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c8:12:1b:f6:47:06:42:0d:5e:fd:00:2e:26: 09:b1:71:a4:82:85:82:8b:c2:a3:5b:2a:6f:fe:dc: 9a:9e:db:5c:1b:81:3a:49:19:73:a9:00:68:92:01: ce:21:b8:33:71:d0:a8:ee:94:dd:26:fc:3b:12:f1: 3a:ff:d3:e8:c7:14:ae:7a:eb:64:9b:ef:70:8c:8a: a7:ae:4c:04:03:0c:0b:5a:11:b8:7d:7c:ee:d4:ad: 28:99:04:e8:cd:0e:59:d1:48:71:ed:dc:ab:ef:66: 6a:bb:fe:b5:3e:96:70:24:98:00:df:c2:69:ed:85: 51:ac:99:00:8c:da:58:07:c5:86:6c:11:04:9a:7e: fa:39:a5:5f:31:79:df:41:db:33:7f:a0:80:d7:e6: 16:97:76:07:5a:a9:04:b6:2b:81:4a:c4:18:92:60: 4a:5f:e8:c4:bf:2d:0f:f6:c3:80:cf:05:65:e8:1c: d7:4d:b7:9e:cd:0c:80:6b:13:10:0f:3a:59:bc:c5: 4e:9e:e8:75:7f:ae:9e:93:39:ec:0f:e0:c9:d9:02: 42:23:b8:1d:bf:c7:4d:44:5a:cf:b8:02:1d:8d:a2: 0f:d1:8a:32:c1:bc:36:96:dc:d9:15:d4:56:7d:8a: d2:53:bf:34:8d:a5:9d:0a:7c:14:90:da:c8:fc:91: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2C:8A:DB:DA:A3:9E:5D:DE:9E:B3:C3:7D:A4:DA:C8:2E:97:6D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/405c2316-0dd1-3f20-910a-5ecd9a1d0049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv6: 2604:1cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2b:e0:6d:85:2a:70:a0:92:c6:7e:a5:c2:49:57:d9:ba:d1: 54:53:58:d2:50:02:fa:95:43:bc:d0:ca:35:d5:53:f6:ba:44: 13:30:be:91:1a:18:11:a3:b1:89:34:0b:44:ae:5c:1c:b0:a1: e5:3f:3f:bf:08:9c:b0:45:6d:55:68:cb:8d:63:1e:9e:c3:4f: 45:d5:85:28:d6:28:26:ec:03:b2:0b:4a:8b:88:58:d9:a1:13: 05:38:87:fa:b0:0d:5a:25:21:ed:0d:0a:8e:25:54:d6:14:f6: 77:db:bf:ef:f3:d1:50:41:bf:16:8b:96:82:53:fd:55:18:ad: ca:9e:6c:4b:b2:25:84:a5:5e:1e:80:40:5d:02:36:3a:b6:28: fe:78:7a:d4:ed:b0:4e:57:dc:ea:63:b1:1b:ce:62:c4:d4:27: e3:48:53:e9:50:97:f0:38:b0:1c:50:c6:d4:d5:8c:e7:2f:98: 53:90:f3:bd:39:7f:d0:3b:b6:d2:62:ef:dc:bc:5f:27:ef:9c: b6:ac:13:60:b3:3a:cf:ad:91:2b:7e:5d:e2:11:0f:b7:fa:24: 62:cf:13:49:ea:1c:57:ae:02:e6:d9:83:79:7e:92:77:1c:7e: 0d:18:81:61:67:5a:3d:a1:39:16:a3:ed:b1:76:23:82:ad:a7: 17:60:10:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeSS93be2uN5APtA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk OTU2MzQ2ZmYtMzJhYS00NmM3LWEwNGEtNGEzNjQwNzdiYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsgSG/ZHBkINXv0ALiYJsXGkgoWCi8KjWypv /tyanttcG4E6SRlzqQBokgHOIbgzcdCo7pTdJvw7EvE6/9PoxxSueutkm+9wjIqn rkwEAwwLWhG4fXzu1K0omQTozQ5Z0Uhx7dyr72Zqu/61PpZwJJgA38Jp7YVRrJkA jNpYB8WGbBEEmn76OaVfMXnfQdszf6CA1+YWl3YHWqkEtiuBSsQYkmBKX+jEvy0P 9sOAzwVl6BzXTbeezQyAaxMQDzpZvMVOnuh1f66ekznsD+DJ2QJCI7gdv8dNRFrP uAIdjaIP0Yoywbw2ltzZFdRWfYrSU780jaWdCnwUkNrI/JFi+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLAsitvao55d3p6zw32k2sgul22iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDA1YzIzMTYtMGRkMS0z ZjIwLTkxMGEtNWVjZDlhMWQwMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlK+BthSpwoJLGfqXCSVfZutFUU1jSUAL6lUO80Mo11VP2ukQTML6R GhgRo7GJNAtErlwcsKHlPz+/CJywRW1VaMuNYx6ew09F1YUo1igm7AOyC0qLiFjZ oRMFOIf6sA1aJSHtDQqOJVTWFPZ327/v89FQQb8Wi5aCU/1VGK3KnmxLsiWEpV4e gEBdAjY6tij+eHrU7bBOV9zqY7EbzmLE1CfjSFPpUJfwOLAcUMbU1YznL5hTkPO9 OX/QO7bSYu/cvF8n75y2rBNgszrPrZErfl3iEQ+3+iRizxNJ6hxXrgLm2YN5fpJ3 HH4NGIFhZ1o9oTkWo+2xdiOCracXYBCE -----END CERTIFICATE-----Generated at Sat Nov 23 18:43:55 2024 by rpki-client on console-ams.rpki-client.org