$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa File: 448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa (raw, json) Hash identifier: Tgvcem8v/SmzSoMVJdABad14fXzTb66kVkk2b4ns9VU= Subject key identifier: A9:DA:96:02:70:EB:D2:CB:89:76:C4:C7:88:BA:48:60:1E:35:59:71 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F43285847A041453487C0E926E3761A60 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 394353 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:45:34:87:c0:e9:26:e3:76:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=77251ddc-c912-4dac-bb85-cfd5740ee6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:b0:29:e4:40:f5:78:c3:d0:93:85:3c:ba: f9:19:ab:d8:7f:67:ab:4d:41:b1:72:8c:35:2f:7c: 6d:ee:c9:4b:d4:01:14:64:f4:1b:e2:60:da:5b:d9: 24:ec:a3:c5:ae:c5:98:b1:dc:d5:47:83:18:5e:5b: d3:04:92:ba:65:e5:e5:d3:d9:8c:08:58:f3:f8:ae: 3c:93:61:e9:9e:3b:02:f9:ae:22:24:1f:2b:b4:e6: 4e:03:1e:db:1a:ea:fa:17:e5:e2:5e:db:fa:d2:b2: 0c:b2:f9:d2:c9:7f:b7:be:65:06:1a:c9:16:12:60: ed:64:f4:f3:80:20:ad:62:3e:29:f6:f5:92:bd:aa: b8:2f:09:9f:47:9e:07:35:81:6f:1f:7d:99:f4:27: 07:e3:c4:2b:a4:7b:cf:df:a0:f2:38:4c:0c:68:c6: f6:4b:9c:87:e0:4e:e6:d7:7e:f3:7c:2a:9a:4b:16: 31:c9:9a:bf:c7:06:74:4e:b2:c7:21:53:8d:15:14: 0f:92:7f:89:05:87:85:e0:70:5e:d7:45:79:d2:6f: 32:64:fa:3d:8c:e2:55:16:2d:b2:f2:f0:82:76:e3: 98:7e:c0:2e:37:c8:e4:f4:ee:fc:9f:0c:ee:51:02: c9:eb:03:57:25:3b:51:57:85:2e:6f:cf:37:1a:dd: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:96:02:70:EB:D2:CB:89:76:C4:C7:88:BA:48:60:1E:35:59:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cc:ab:cc:eb:17:e4:eb:52:20:5f:c2:b8:50:3c:14:a2:89: d5:b9:87:12:04:89:a3:9a:24:c9:e2:f1:72:f1:01:d1:77:19: da:d4:d0:59:75:02:d5:13:1b:bd:93:99:f2:f4:3b:e6:58:27: d7:18:22:bd:45:88:f9:f7:2e:61:b5:03:cd:a4:8e:54:c9:bd: aa:f6:58:41:51:fa:cc:ff:8e:40:00:eb:64:e8:44:68:2c:fd: ba:60:5b:5d:36:12:8d:92:7b:e9:20:c3:f6:6c:d9:91:77:a1: 64:e5:49:da:7c:38:b0:e5:d8:10:28:e0:f8:6f:9c:71:25:05: 11:e0:6d:f7:80:90:d9:7d:8b:73:c6:c1:c9:60:76:b6:2e:b9: 16:53:46:cd:04:09:97:6a:63:4f:05:78:33:85:24:fd:db:a4: cc:88:74:a3:20:a4:3f:9a:61:dc:cc:c5:2e:45:e4:95:c4:e5: 03:73:9e:e6:5c:34:ae:bc:e2:4d:e8:cb:7f:a7:fe:82:4d:e2: 86:40:b2:f5:70:49:7e:70:d0:de:40:52:2a:92:58:0a:bf:d5: 13:96:ad:cd:ad:63:14:72:49:b1:5b:77:54:a7:56:30:4a:ca: 6a:ad:3b:91:e5:7e:f9:e2:5c:0d:b2:d3:f2:bb:de:eb:de:ab: 0e:ec:80:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEegQUU0h8DpJuN2GmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk NzcyNTFkZGMtYzkxMi00ZGFjLWJiODUtY2ZkNTc0MGVlNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22SwKeRA9XjD0JOFPLr5GavYf2erTUGxcow1 L3xt7slL1AEUZPQb4mDaW9kk7KPFrsWYsdzVR4MYXlvTBJK6ZeXl09mMCFjz+K48 k2HpnjsC+a4iJB8rtOZOAx7bGur6F+XiXtv60rIMsvnSyX+3vmUGGskWEmDtZPTz gCCtYj4p9vWSvaq4LwmfR54HNYFvH32Z9CcH48QrpHvP36DyOEwMaMb2S5yH4E7m 137zfCqaSxYxyZq/xwZ0TrLHIVONFRQPkn+JBYeF4HBe10V50m8yZPo9jOJVFi2y 8vCCduOYfsAuN8jk9O78nwzuUQLJ6wNXJTtRV4Uub883Gt1abQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKnalgJw69LLiXbEx4i6SGAeNVlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNDQ4ZjNlYmMtYWFlZS0z YjFmLWI5YjctNzE0MDJjYjAyNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH/Mq8zrF+TrUiBfwrhQPBSiidW5hxIEiaOaJMni8XLxAdF3GdrU 0Fl1AtUTG72TmfL0O+ZYJ9cYIr1FiPn3LmG1A82kjlTJvar2WEFR+sz/jkAA62To RGgs/bpgW102Eo2Se+kgw/Zs2ZF3oWTlSdp8OLDl2BAo4PhvnHElBRHgbfeAkNl9 i3PGwclgdrYuuRZTRs0ECZdqY08FeDOFJP3bpMyIdKMgpD+aYdzMxS5F5JXE5QNz nuZcNK684k3oy3+n/oJN4oZAsvVwSX5w0N5AUiqSWAq/1ROWrc2tYxRySbFbd1Sn VjBKymqtO5HlfvniXA2y0/K73uveqw7sgM0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:32 2024 by rpki-client on console-ams.rpki-client.org