$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa File: a2d5db0b-200d-364d-a412-c50d76bffc06.roa (raw, json) Hash identifier: mdfpn0TbgeLYS8mxELCsW4YCxlxg94KgslHGDOghd78= Subject key identifier: B6:A2:69:49:E1:80:34:55:1F:79:C5:CC:6A:2E:65:41:F3:D3:90:1A Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F432858480395AD16DAE362FE02AA320C Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa Signing time: Wed 27 Nov 2024 02:55:53 +0000 ROA not before: Wed 27 Nov 2024 02:55:53 +0000 ROA not after: Tue 25 Feb 2025 02:55:53 +0000 asID: 393844 IP address blocks: 2600:a400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:03:95:ad:16:da:e3:62:fe:02:aa:32:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Nov 27 02:55:53 2024 GMT Not After : Feb 25 02:55:53 2025 GMT Subject: CN=879ed101-d6c0-4625-b454-a02a5bfe2ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:87:da:6c:7b:6d:a0:c7:01:46:42:ea:f5: 8e:56:b0:5d:6c:9f:81:76:80:01:3c:1d:96:df:6e: a7:d9:1e:ce:6b:cc:9f:b2:f0:08:2d:e4:ee:f8:52: de:9c:07:64:32:18:ef:d8:e2:c3:b5:24:43:92:9d: 93:5f:eb:b7:9e:b2:69:b9:e5:5d:4f:35:fd:77:9b: d2:ae:2d:ec:bd:58:12:fd:ef:94:69:38:ca:78:bc: e4:17:45:2d:20:d2:d6:27:dd:eb:5f:8b:5d:81:ef: 08:e6:d6:26:a3:b1:3e:fd:02:22:06:a5:60:9d:93: 8f:be:ce:24:60:95:1b:59:3b:17:16:44:e6:92:d2: e5:49:10:90:e8:28:a7:d1:2e:f6:7a:b7:ce:e7:e5: 8a:42:7f:90:59:99:05:10:cd:d6:59:ad:5d:d6:70: 18:72:b7:54:a8:26:81:b6:a3:0e:de:50:bd:94:d7: a1:f5:80:df:28:f9:49:aa:30:88:2a:d3:ae:51:a2: d8:ae:72:f7:f8:91:2c:eb:c3:e3:b6:a7:42:3f:cc: 1e:3b:77:97:39:84:c8:92:c2:4f:1f:36:8d:65:08: d1:8c:2c:8e:0c:43:9d:0e:3a:50:e3:20:7c:69:fc: d3:ba:08:c5:9e:2b:12:56:77:82:eb:06:6c:66:7a: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:69:49:E1:80:34:55:1F:79:C5:CC:6A:2E:65:41:F3:D3:90:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a2d5db0b-200d-364d-a412-c50d76bffc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv6: 2600:a400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fc:d4:a9:d4:5d:60:a8:77:5a:ab:48:77:dd:82:a3:ad:0d: f3:9f:bc:e4:f9:a8:8a:6f:7b:df:15:83:73:06:db:90:7d:8f: b8:ee:88:6d:21:d2:0e:ec:b8:6e:9d:10:92:bb:06:9b:14:6c: c1:98:93:71:95:4f:b8:c3:7d:ad:b7:c0:59:2f:24:56:bc:c6: 8e:c1:5a:84:c5:9d:40:08:a2:a1:d3:13:57:c0:ec:2f:82:40: 3d:97:27:d6:17:76:4a:d4:1b:38:e6:65:9d:91:82:c3:44:cf: 8c:98:cb:4b:b7:19:90:6f:c7:d6:44:1b:af:2b:30:11:29:6a: 1e:78:98:29:5a:c7:87:ff:df:ab:17:ba:69:21:f8:60:1a:fb: 8d:42:dd:79:9c:8a:c4:8f:2d:64:a1:56:b1:6c:52:21:b1:97: 2f:fa:a5:f8:89:72:fa:b5:9d:e2:90:2c:50:07:12:41:ad:5d: 87:75:bd:ba:7f:6a:0f:b6:d8:df:d6:ea:1e:9e:cf:f9:f3:93: b1:85:29:8b:31:e9:3b:b4:b5:af:87:fb:18:69:03:b3:d1:5a: 43:ff:68:0c:06:1c:b6:5a:ce:fb:b2:31:b1:51:f6:fd:dd:4d: f5:52:d6:04:f3:14:4b:2b:6d:be:77:38:ff:bf:2d:cc:41:68: 78:05:e9:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgDla0W2uNi/gKqMgwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI0MTEyNzAyNTU1M1oXDTI1MDIyNTAyNTU1M1owLzEtMCsGA1UEAxMk ODc5ZWQxMDEtZDZjMC00NjI1LWI0NTQtYTAyYTViZmUyYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMiH2mx7baDHAUZC6vWOVrBdbJ+BdoABPB2W 326n2R7Oa8yfsvAILeTu+FLenAdkMhjv2OLDtSRDkp2TX+u3nrJpueVdTzX9d5vS ri3svVgS/e+UaTjKeLzkF0UtINLWJ93rX4tdge8I5tYmo7E+/QIiBqVgnZOPvs4k YJUbWTsXFkTmktLlSRCQ6Cin0S72erfO5+WKQn+QWZkFEM3WWa1d1nAYcrdUqCaB tqMO3lC9lNeh9YDfKPlJqjCIKtOuUaLYrnL3+JEs68PjtqdCP8weO3eXOYTIksJP HzaNZQjRjCyODEOdDjpQ4yB8afzTugjFnisSVneC6wZsZnqLCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLaiaUnhgDRVH3nFzGouZUHz05AaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvYTJkNWRiMGItMjAwZC0z NjRkLWE0MTItYzUwZDc2YmZmYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgCkADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBC/NSp1F1gqHdaq0h33YKjrQ3zn7zk+aiKb3vfFYNzBtuQfY+47oht IdIO7LhunRCSuwabFGzBmJNxlU+4w32tt8BZLyRWvMaOwVqExZ1ACKKh0xNXwOwv gkA9lyfWF3ZK1Bs45mWdkYLDRM+MmMtLtxmQb8fWRBuvKzARKWoeeJgpWseH/9+r F7ppIfhgGvuNQt15nIrEjy1koVaxbFIhsZcv+qX4iXL6tZ3ikCxQBxJBrV2Hdb26 f2oPttjf1uoens/585OxhSmLMek7tLWvh/sYaQOz0VpD/2gMBhy2Ws77sjGxUfb9 3U31UtYE8xRLK22+dzj/vy3MQWh4Benm -----END CERTIFICATE-----Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org