$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa File: 870b3555-4770-357a-83a4-150807097e93.roa (raw, json) Hash identifier: nnottXcy4Jj4tjihLLwkKdhHGuYd67ir9Z3rbF9Q2ps= Subject key identifier: DF:F1:76:37:9E:1F:4F:BD:A3:B6:45:E3:4F:28:2B:7A:9F:57:41:D6 Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Certificate serial: 010D0C9F432858473095F33145BB806C0AF95980 Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 6491 IP address blocks: 2620:67:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:f3:31:45:bb:80:6c:0a:f9:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=05d92b14-9897-43e7-a0ac-7decb30c540c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:4e:c9:d9:50:24:b9:17:0e:2b:e8:20:86: 03:42:97:df:30:c9:34:80:c7:3e:2f:ff:cd:72:88: 41:50:95:3c:c7:ed:09:8b:0a:9e:57:80:c1:76:1c: bc:6c:d7:e8:37:cb:b5:90:2e:ec:7f:ab:e8:ac:a5: 3e:f6:bb:76:bd:68:79:be:e3:38:00:7a:5e:47:0f: b3:4f:6d:6e:ec:67:e9:5e:8b:45:da:4e:a1:94:66: d4:1d:49:78:04:04:c3:39:89:08:ab:45:33:66:c2: 9f:ff:75:3c:55:a1:56:61:3d:f8:7e:ab:96:84:69: a2:8e:ec:03:06:24:41:49:0c:f2:ff:ae:9a:b1:60: 3c:ce:92:5c:16:ea:87:3f:dc:49:84:af:b1:b2:e8: 0b:a4:5b:f5:83:72:e6:24:56:dc:a3:24:89:bf:9a: c3:83:47:39:4e:bf:7e:a6:6c:ed:44:04:7b:e8:d0: 25:f2:47:93:a4:7e:0e:54:8e:5f:97:9d:6d:0d:c0: c5:4b:b4:f8:21:2c:d1:66:df:10:21:32:2c:89:b2: 9c:27:0b:b4:a9:cd:f4:2c:b4:77:f7:d1:3e:aa:ab: 34:d7:b5:66:47:42:74:6a:9d:64:5c:7f:d6:bb:1f: 37:fd:a7:0e:18:67:73:b2:db:82:3f:58:85:bc:7b: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F1:76:37:9E:1F:4F:BD:A3:B6:45:E3:4F:28:2B:7A:9F:57:41:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl X509v3 Authority Key Identifier: keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:67:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ae:53:cc:7a:c5:c1:58:58:ad:dd:dd:e9:dc:91:3c:d8:3c: 40:15:64:c7:63:84:16:e3:d6:10:59:29:ac:4d:fa:53:c9:ef: f6:e9:f5:da:e9:ae:61:c1:83:5e:9a:dc:b0:9b:86:83:d3:3b: d2:6e:e5:d3:72:4b:f6:fe:44:f7:02:ed:4c:f3:42:6c:c8:83: c1:01:73:fa:79:09:10:26:a3:a6:f9:c0:88:80:91:e2:ce:4c: c1:54:d4:59:f0:d6:5b:61:c8:a0:81:e0:9c:67:f1:d6:a8:ba: ff:23:c8:67:3a:b3:6a:52:bd:51:c4:3e:f0:1b:eb:7d:1e:65: b6:53:21:6e:4b:92:b9:84:72:f2:65:a6:4a:41:f3:fb:2a:71: fa:6a:e3:bf:e7:55:e0:6f:33:8c:bd:03:63:57:6a:f7:85:60: 31:e3:36:3e:ee:53:eb:ad:42:41:a4:27:7c:97:03:fd:26:ef: ac:02:ba:44:e4:87:1f:2e:b9:bd:9e:f6:12:4e:dc:c9:17:d6: ff:6a:6c:1b:ba:18:a5:34:36:bd:d0:a8:52:32:88:10:df:74: 3b:e2:85:ae:1d:29:b2:4b:f2:39:dd:f9:3b:89:71:1d:5e:2d: 72:b8:95:69:7d:5d:85:74:f1:4f:c4:a6:98:74:80:1d:c4:42: cc:f3:2f:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcwlfMxRbuAbAr5WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk OGRkMB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk MDVkOTJiMTQtOTg5Ny00M2U3LWEwYWMtN2RlY2IzMGM1NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCNOydlQJLkXDivoIIYDQpffMMk0gMc+L//N cohBUJU8x+0JiwqeV4DBdhy8bNfoN8u1kC7sf6vorKU+9rt2vWh5vuM4AHpeRw+z T21u7GfpXotF2k6hlGbUHUl4BATDOYkIq0UzZsKf/3U8VaFWYT34fquWhGmijuwD BiRBSQzy/66asWA8zpJcFuqHP9xJhK+xsugLpFv1g3LmJFbcoySJv5rDg0c5Tr9+ pmztRAR76NAl8keTpH4OVI5fl51tDcDFS7T4ISzRZt8QITIsibKcJwu0qc30LLR3 99E+qqs017VmR0J0ap1kXH/Wux83/acOGGdzstuCP1iFvHtcFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/xdjeeH0+9o7ZF408oK3qfV0HWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvODcwYjM1NTUtNDc3MC0z NTdhLTgzYTQtMTUwODA3MDk3ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0 ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0 MzEzNGQ4ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAZ6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHWuU8x6xcFYWK3d3enckTzYPEAVZMdjhBbj1hBZKaxN+lPJ7/bp 9drprmHBg16a3LCbhoPTO9Ju5dNyS/b+RPcC7UzzQmzIg8EBc/p5CRAmo6b5wIiA keLOTMFU1Fnw1lthyKCB4Jxn8daouv8jyGc6s2pSvVHEPvAb630eZbZTIW5LkrmE cvJlpkpB8/sqcfpq47/nVeBvM4y9A2NXaveFYDHjNj7uU+utQkGkJ3yXA/0m76wC ukTkhx8uub2e9hJO3MkX1v9qbBu6GKU0Nr3QqFIyiBDfdDviha4dKbJL8jnd+TuJ cR1eLXK4lWl9XYV08U/Epph0gB3EQszzL+w= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org