$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa File: 8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa (raw, json) Hash identifier: F2TqJHb1kQZ7BEqlzIaYIGfweRhUZlRFQb3qzEdHHbg= Subject key identifier: BF:D0:E6:F6:77:DC:DC:FE:A2:E4:A7:A1:93:1F:3C:F8:E4:B7:8C:09 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F432858472C65CE3D7FA12487BF58777C Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 7782 IP address blocks: 2602:233::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:ce:3d:7f:a1:24:87:bf:58:77:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=25ae5ab9-7ed8-4111-b2cd-064c86a9902d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:1a:65:8b:79:db:73:cf:7a:de:b6:c9:d9: a3:66:b1:66:7b:42:9c:49:d7:f2:e2:4b:e7:ec:b3: c4:aa:f1:76:d8:2b:45:53:cb:00:92:8b:14:38:57: aa:cf:65:e3:8e:51:fd:b4:2e:b3:5a:d2:84:ab:b6: 85:d7:e3:ee:9e:1d:4f:8e:f3:d8:d9:87:c3:de:da: db:19:dc:61:dc:b6:1e:f1:55:fc:ad:d3:09:47:6d: 7e:d6:ba:6c:a1:e3:4d:4d:c0:3d:31:15:72:5c:9c: 25:15:e9:fb:af:0b:3a:ea:40:15:a1:38:5a:18:08: 91:e5:c1:9b:e4:1f:0b:46:61:75:ae:f6:be:c0:89: 6a:8c:0f:63:09:ba:f4:36:15:df:97:b6:84:12:4b: b2:31:68:fd:14:97:11:a0:27:a0:80:a5:15:be:80: 28:37:33:ee:92:7b:10:07:75:85:b7:b1:d0:0f:bc: 49:7c:d5:a3:81:74:69:8b:7a:c8:a2:57:4e:86:99: 34:3b:45:f3:34:b8:aa:66:09:b5:10:ac:fb:b9:0a: be:0c:e9:5f:0d:d9:6f:20:3a:89:5d:db:3d:40:54: f2:d3:04:c7:af:e4:23:48:22:6b:17:24:67:db:30: e4:08:fe:6d:e8:94:4a:be:3c:47:76:dc:35:01:5c: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D0:E6:F6:77:DC:DC:FE:A2:E4:A7:A1:93:1F:3C:F8:E4:B7:8C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:233::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:61:fd:1c:98:5e:36:89:96:b6:c6:a9:a7:5c:06:f5:6f:5a: ae:93:14:ff:23:61:da:f0:07:3e:10:74:64:39:62:7f:c8:2e: 5a:ec:33:ec:71:ee:d6:07:24:e4:7c:f9:84:cf:6d:16:c1:8f: 8b:c3:36:c3:6e:f3:09:3f:e6:cb:e6:9c:f9:88:d2:0e:59:54: 12:e4:fc:7c:b7:5c:c5:ed:6d:aa:55:a9:f2:e0:ca:77:c0:75: cc:24:3f:2b:45:7a:cd:c6:9a:76:86:71:9c:64:16:9f:ec:84: 10:4c:90:6a:bc:01:86:0c:c3:14:35:2f:58:e1:76:f4:5e:c2: f2:68:89:d2:5c:ed:89:4c:81:f4:0a:4f:bc:08:7a:5b:48:d4: 44:ca:ab:63:ad:28:fe:52:3f:ff:18:80:00:1a:d8:f0:6a:ef: fb:a6:4f:a4:36:66:8f:eb:87:01:9c:00:0f:09:d4:70:13:f3: 3a:c7:e5:86:eb:cd:dc:3a:4e:6d:b2:7f:3d:57:75:35:e8:15: 9c:79:8b:e5:13:f7:8f:26:9d:7d:9a:c7:54:a8:68:07:09:04: ab:69:6b:66:f9:66:d4:6e:2e:96:a2:7c:f1:0b:9b:1e:ac:61: b6:81:0f:2f:ed:42:0c:8b:49:cc:97:ae:b4:cd:e5:de:21:cd: b9:86:12:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcsZc49f6Ekh79Yd3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MjVhZTVhYjktN2VkOC00MTExLWIyY2QtMDY0Yzg2YTk5MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkcaZYt523PPet62ydmjZrFme0KcSdfy4kvn 7LPEqvF22CtFU8sAkosUOFeqz2XjjlH9tC6zWtKEq7aF1+Punh1PjvPY2YfD3trb Gdxh3LYe8VX8rdMJR21+1rpsoeNNTcA9MRVyXJwlFen7rws66kAVoThaGAiR5cGb 5B8LRmF1rva+wIlqjA9jCbr0NhXfl7aEEkuyMWj9FJcRoCeggKUVvoAoNzPuknsQ B3WFt7HQD7xJfNWjgXRpi3rIoldOhpk0O0XzNLiqZgm1EKz7uQq+DOlfDdlvIDqJ Xds9QFTy0wTHr+QjSCJrFyRn2zDkCP5t6JRKvjxHdtw1AVwKNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL/Q5vZ33Nz+ouSnoZMfPPjkt4wJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvOGNhM2ExYjItZDBlNi0z NjAyLTg2NjYtNThhMGY0ZTNhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICMzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJYf0cmF42iZa2xqmnXAb1b1qukxT/I2Ha8Ac+EHRkOWJ/yC5a7DPs ce7WByTkfPmEz20WwY+LwzbDbvMJP+bL5pz5iNIOWVQS5Px8t1zF7W2qVany4Mp3 wHXMJD8rRXrNxpp2hnGcZBaf7IQQTJBqvAGGDMMUNS9Y4Xb0XsLyaInSXO2JTIH0 Ck+8CHpbSNREyqtjrSj+Uj//GIAAGtjwau/7pk+kNmaP64cBnAAPCdRwE/M6x+WG 683cOk5tsn89V3U16BWceYvlE/ePJp19msdUqGgHCQSraWtm+WbUbi6WonzxC5se rGG2gQ8v7UIMi0nMl660zeXeIc25hhJR -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:31 2024 by rpki-client on console-ams.rpki-client.org