$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json) Hash identifier: zu1J6AslU/28sk1QEcShAVEUA8hQRf7L6h0uZNE68nY= Subject key identifier: A6:4C:6C:F2:36:45:5E:E5:1B:CE:A7:53:75:F7:B4:F3:C3:42:59:01 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584734C88C18346C4EA84B48CB00 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 207990 IP address blocks: 2600:2900::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c8:8c:18:34:6c:4e:a8:4b:48:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=0f344ca2-9e7b-43b8-8cd8-614089214dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:c9:d7:a0:a7:10:0c:67:d2:30:79:5f:a2: bd:32:1c:8c:0b:00:bc:90:08:11:34:61:24:1d:53: f6:7b:00:6c:86:5f:44:55:0b:ea:83:2d:4f:b8:e0: 0f:d2:f8:7e:d0:12:7b:a0:a1:82:3f:14:4a:66:57: 49:22:d5:38:93:87:fc:6f:0d:a9:c1:d3:5d:6e:73: 49:1e:79:c0:cc:1f:a6:be:5c:06:cc:96:5e:98:50: 4c:1d:b3:e4:59:00:30:60:4a:92:db:4f:97:1c:f4: 6f:6c:3c:25:16:b1:bc:6c:c8:3a:c0:a1:60:8d:36: 8b:1c:4d:b9:a1:5b:61:70:ad:a0:f0:2f:cf:5a:15: 17:58:b3:dd:69:1b:4a:23:bb:3e:2c:58:25:77:5c: d0:ce:00:9f:48:03:cf:f8:2f:63:33:e1:b2:2a:56: 80:3e:77:b0:2d:5f:5c:99:4b:09:86:28:31:d9:5c: f5:44:44:d9:0b:0d:52:44:f7:3b:f6:4a:5b:b3:d6: d0:85:12:b7:48:af:cc:25:fc:82:5a:58:59:db:db: a8:93:8c:c1:00:74:92:33:e6:41:28:18:85:f4:82: 2a:98:88:2a:6f:6b:ad:12:21:64:11:4a:b2:d7:bb: 63:f5:ca:c3:b2:92:30:89:40:1d:1f:0d:27:23:55: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4C:6C:F2:36:45:5E:E5:1B:CE:A7:53:75:F7:B4:F3:C3:42:59:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2900::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:37:5d:af:f0:41:34:b3:d6:20:9a:4c:a4:a1:a4:76:04:25: 7e:54:2a:2b:4a:12:99:91:8b:fc:d0:6a:78:b4:70:5a:f6:d8: e8:87:25:82:0f:08:b9:7e:89:b3:24:38:79:8c:25:e4:6c:a1: d2:0f:d0:81:0a:23:4c:e4:b6:fb:51:3b:2b:a4:3c:5a:90:84: 82:96:3d:95:ce:e9:17:a7:e1:8d:a9:91:58:eb:50:e5:4e:21: 9a:b8:a6:94:29:72:fa:9b:80:f2:47:1f:06:f3:b8:0b:8b:54: e8:99:62:56:9c:25:4b:df:4a:7e:43:46:ac:b3:32:67:88:83: 0e:2e:66:24:3a:62:6d:02:a9:b3:93:ba:e8:3b:83:b1:eb:b8: 59:63:cb:80:ef:b6:e7:65:d1:06:9c:49:d8:8a:d4:9a:e9:b2: 8b:7a:75:0c:8a:4a:57:55:1e:43:90:45:35:a0:8f:38:d9:52: 95:17:32:3b:b2:85:15:f5:8c:49:d5:8c:11:a8:42:61:f3:21: 3f:53:8c:d4:6f:39:79:eb:5b:24:d8:8e:13:3e:41:af:b1:4a: fa:e2:ca:70:a7:0f:c9:b3:ec:79:ee:d0:73:64:30:14:f1:f3: 03:d2:04:28:72:ba:8d:84:a2:e5:b7:38:49:1a:40:41:86:58: f1:d9:14:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEc0yIwYNGxOqEtIywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MGYzNDRjYTItOWU3Yi00M2I4LThjZDgtNjE0MDg5MjE0ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkHJ16CnEAxn0jB5X6K9MhyMCwC8kAgRNGEk HVP2ewBshl9EVQvqgy1PuOAP0vh+0BJ7oKGCPxRKZldJItU4k4f8bw2pwdNdbnNJ HnnAzB+mvlwGzJZemFBMHbPkWQAwYEqS20+XHPRvbDwlFrG8bMg6wKFgjTaLHE25 oVthcK2g8C/PWhUXWLPdaRtKI7s+LFgld1zQzgCfSAPP+C9jM+GyKlaAPnewLV9c mUsJhigx2Vz1RETZCw1SRPc79kpbs9bQhRK3SK/MJfyCWlhZ29uok4zBAHSSM+ZB KBiF9IIqmIgqb2utEiFkEUqy17tj9crDspIwiUAdHw0nI1UthwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKZMbPI2RV7lG86nU3X3tPPDQlkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYWFhMjQxYjItMGUyMC0z OTY1LWFmNzUtNmQ5ZjEyNjI5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxN12v8EE0s9YgmkykoaR2BCV+VCorShKZkYv80Gp4tHBa9tjohyWC Dwi5fomzJDh5jCXkbKHSD9CBCiNM5Lb7UTsrpDxakISClj2VzukXp+GNqZFY61Dl TiGauKaUKXL6m4DyRx8G87gLi1TomWJWnCVL30p+Q0asszJniIMOLmYkOmJtAqmz k7roO4Ox67hZY8uA77bnZdEGnEnYitSa6bKLenUMikpXVR5DkEU1oI842VKVFzI7 soUV9YxJ1YwRqEJh8yE/U4zUbzl561sk2I4TPkGvsUr64spwpw/Js+x57tBzZDAU 8fMD0gQocrqNhKLltzhJGkBBhljx2RRm -----END CERTIFICATE-----Generated at Fri Nov 22 04:28:55 2024 by rpki-client on console-fra.rpki-client.org