$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa File: a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa (raw, json) Hash identifier: 06Cd5aJz+SzTJAGFOsPOrZT10V6piqUDkfQTVGrkRmI= Subject key identifier: 4E:EA:EE:AF:1C:F6:E9:57:54:68:41:CD:DE:B9:19:61:99:8D:30:21 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F43285847A8A14914C0075392169F1800 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa Signing time: Fri 25 Oct 2024 13:00:42 +0000 ROA not before: Fri 25 Oct 2024 13:00:42 +0000 ROA not after: Thu 23 Jan 2025 14:00:42 +0000 asID: 4 IP address blocks: 2001:500:84::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:a1:49:14:c0:07:53:92:16:9f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Oct 25 13:00:42 2024 GMT Not After : Jan 23 14:00:42 2025 GMT Subject: CN=c95a5058-fa5d-4b2f-bfd5-b4bbc4ba6ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:86:7f:4c:ed:c2:54:f0:6e:d4:0d:6d:00: 8f:10:f2:3f:d9:95:b4:e2:d4:bb:e0:a0:a1:42:2b: 1b:d9:e2:e2:78:52:54:b0:e4:9e:55:f1:47:ea:2a: 0a:34:60:27:a0:2e:1b:e1:4f:7a:f3:6b:e8:3a:cf: f7:18:33:2c:12:e2:14:0a:4b:e4:70:c5:3e:33:63: 67:58:7c:ec:08:32:86:92:fb:40:dd:e8:e9:55:35: 6f:27:53:20:5f:01:5e:15:08:58:54:a3:c7:aa:0b: 56:a6:16:05:53:73:92:25:76:0d:11:75:6c:4d:2b: b2:bf:bb:df:5f:4a:3c:87:2d:ac:54:2b:12:e0:10: 2e:ea:34:88:6c:5a:08:96:d2:db:53:b7:ef:00:e8: 4b:5d:45:99:81:ee:f3:ca:52:7e:fa:8d:f5:30:30: 47:67:b5:1a:7e:1f:1d:19:32:12:25:b3:aa:ec:5d: 91:b0:3a:08:4c:9e:a5:e0:5f:56:ae:bb:94:a4:f2: 31:09:99:a3:13:58:6e:f8:0b:6e:86:c6:f5:72:25: fb:bf:6b:cb:d7:74:95:08:3c:93:3c:83:05:50:f1: dd:55:c7:60:1d:58:e1:a1:ac:61:a1:5d:73:65:be: a8:81:92:b4:c5:09:7d:2a:cc:fb:69:dc:ff:ec:7d: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EA:EE:AF:1C:F6:E9:57:54:68:41:CD:DE:B9:19:61:99:8D:30:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/a2604a32-78c3-3b42-a86e-a36b9e2d9b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:84::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ad:90:29:3d:b1:ee:5f:63:c1:03:14:d0:89:13:ad:07:3e: 2d:08:5c:c9:cb:00:a0:8f:a4:5b:a1:62:6b:0d:f1:ff:ca:d6: 30:2f:dc:99:b7:4f:91:26:e1:ae:d6:7a:ad:0c:9e:52:8c:a2: 88:a4:bb:01:34:17:2a:13:22:a8:0a:41:9b:6d:8a:3a:59:eb: 98:13:44:12:d6:29:54:18:a5:45:68:7e:6e:ad:85:8c:d1:0b: f4:b5:ab:ad:39:98:dc:9a:79:18:b5:92:e5:53:df:4b:f1:6c: b9:e2:34:ed:52:30:f1:0d:45:19:24:27:eb:24:16:1c:bb:99: e6:88:9c:1a:a0:0d:b1:56:6e:6a:34:9e:2a:38:4c:48:f6:d6: 66:f9:d3:92:94:cc:b4:a4:18:56:43:fe:67:29:66:1d:94:25: 32:89:dd:10:92:d1:99:a1:5c:07:37:b2:34:56:16:be:ea:aa: 54:4d:b2:1b:83:f5:bd:ac:81:7d:b3:a0:08:d3:15:45:da:a0: 7c:81:10:29:d7:70:b2:1b:ba:5b:9e:79:be:6f:b8:8f:3f:9b: 15:7a:0b:65:16:a6:22:52:20:88:76:a4:c6:66:5b:09:94:86: bc:7e:7a:3d:0b:1d:75:2b:ca:61:ae:fa:b1:bf:d6:1c:54:0e: 73:cf:24:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeooUkUwAdTkhafGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk Yzk1YTUwNTgtZmE1ZC00YjJmLWJmZDUtYjRiYmM0YmE2ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc2Gf0ztwlTwbtQNbQCPEPI/2ZW04tS74KCh Qisb2eLieFJUsOSeVfFH6ioKNGAnoC4b4U9682voOs/3GDMsEuIUCkvkcMU+M2Nn WHzsCDKGkvtA3ejpVTVvJ1MgXwFeFQhYVKPHqgtWphYFU3OSJXYNEXVsTSuyv7vf X0o8hy2sVCsS4BAu6jSIbFoIltLbU7fvAOhLXUWZge7zylJ++o31MDBHZ7Uafh8d GTISJbOq7F2RsDoITJ6l4F9WrruUpPIxCZmjE1hu+Atuhsb1ciX7v2vL13SVCDyT PIMFUPHdVcdgHVjhoaxhoV1zZb6ogZK0xQl9Ksz7adz/7H3JbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE7q7q8c9ulXVGhBzd65GWGZjTAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvYTI2MDRhMzItNzhjMy0z YjQyLWE4NmUtYTM2YjllMmQ5YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGtkCk9se5fY8EDFNCJE60HPi0IXMnLAKCPpFuhYmsN8f/K1jAv 3Jm3T5Em4a7Weq0MnlKMooikuwE0FyoTIqgKQZttijpZ65gTRBLWKVQYpUVofm6t hYzRC/S1q605mNyaeRi1kuVT30vxbLniNO1SMPENRRkkJ+skFhy7meaInBqgDbFW bmo0nio4TEj21mb505KUzLSkGFZD/mcpZh2UJTKJ3RCS0ZmhXAc3sjRWFr7qqlRN shuD9b2sgX2zoAjTFUXaoHyBECnXcLIbulueeb5vuI8/mxV6C2UWpiJSIIh2pMZm WwmUhrx+ej0LHXUrymGu+rG/1hxUDnPPJCY= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org