$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa File: 63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa (raw, json) Hash identifier: T8JqNw1LRugN8Ie8xg0bsbjn5XMYFsv+pTOVOzr4Fz4= Subject key identifier: C9:77:6A:48:21:7C:50:12:8A:10:1C:AB:2E:47:B8:44:A0:15:9C:B1 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F432858476E00F95D5FD17B990D293AC0 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa Signing time: Fri 04 Oct 2024 13:00:42 +0000 ROA not before: Fri 04 Oct 2024 13:00:42 +0000 ROA not after: Thu 02 Jan 2025 14:00:42 +0000 asID: 397423 IP address blocks: 2604:f440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:00:f9:5d:5f:d1:7b:99:0d:29:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Oct 4 13:00:42 2024 GMT Not After : Jan 2 14:00:42 2025 GMT Subject: CN=19d69a51-e71a-42be-81c7-7a817debdb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:26:61:d2:9c:20:7b:bc:27:83:35:35:f5: 37:bd:66:51:2c:a1:89:bc:ec:da:83:ff:7a:8d:c1: ac:ad:6f:7b:6d:14:8b:a5:f7:f7:c8:69:73:14:c1: cc:34:1c:b7:7f:07:d0:41:48:fe:5c:05:fd:0c:52: 15:87:41:3c:b2:11:11:a1:33:63:e3:fd:2d:04:09: d7:b3:f6:6f:dd:5b:53:a8:02:00:cd:b9:db:5e:b7: db:95:c1:cd:0b:08:38:dc:81:87:76:22:35:20:0a: a3:00:20:56:29:5f:20:a9:0f:ea:4b:4a:b5:5d:36: b9:a6:ca:60:12:55:61:87:9e:62:d6:31:f7:c5:f5: 3c:69:82:bd:a5:ec:40:b4:24:a3:d9:dd:29:70:86: 1f:d5:81:db:fe:31:12:e7:cc:b5:e9:11:fa:e5:ce: f1:fe:51:96:7d:a8:08:af:11:c1:41:31:dc:fc:7e: 3a:48:1a:96:c2:07:51:4f:fd:95:64:56:3d:88:a1: 32:5f:94:02:1e:7c:a6:5b:f4:c0:43:6f:99:cf:c3: 1f:88:fc:aa:26:7e:ad:c6:c3:ac:ec:42:a7:a9:e3: 8e:83:1e:6b:29:14:ca:60:4b:e4:cf:11:05:4f:37: 81:59:ff:ba:3d:c9:ab:ef:a3:dd:79:58:e2:01:1e: 35:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:77:6A:48:21:7C:50:12:8A:10:1C:AB:2E:47:B8:44:A0:15:9C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv6: 2604:f440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:36:03:4d:ae:33:5c:f5:7d:2b:1f:df:4e:2e:9b:94:54:7e: b6:41:f1:b9:88:46:4d:f5:2d:5d:a8:16:58:eb:4d:b0:b7:07: 6c:69:d2:e3:f6:40:23:ac:15:b4:21:c4:99:cd:ef:61:7b:3c: a7:e7:bb:51:1e:c5:ef:7a:22:d1:18:26:a1:f8:03:9b:a7:e0: bd:fe:c7:5c:e5:c9:b1:91:a4:cb:27:94:d9:94:51:3b:f4:ce: 91:d9:90:e2:a8:31:d7:88:12:ea:23:94:6c:35:37:43:d6:e2: 94:4c:e3:25:bc:a3:36:69:7f:da:e8:d7:79:f3:7c:a4:88:90: 21:9f:c3:b8:96:23:c5:23:39:8d:40:8a:61:86:95:4a:2b:39: d9:fa:ee:1b:e1:0f:03:c7:7d:73:77:cd:50:5d:bb:7a:4c:ff: 91:ec:31:46:85:23:4e:c9:65:ed:4f:37:f2:9c:7f:3d:f5:4e: 63:73:42:0e:ca:1d:54:5c:de:d3:93:d4:67:8f:44:a9:0c:f9: 3e:40:0b:df:54:d4:2f:66:ad:88:f1:b0:0e:de:f7:9a:53:19: d7:3d:5d:fd:4a:8a:79:93:a2:0a:c5:64:9b:c4:ef:d0:36:f0: 57:aa:d3:b3:5d:14:ca:9b:62:f1:79:c1:35:c4:6f:4e:1c:a8: 1a:5f:57:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEduAPldX9F7mQ0pOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk MTlkNjlhNTEtZTcxYS00MmJlLTgxYzctN2E4MTdkZWJkYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgkmYdKcIHu8J4M1NfU3vWZRLKGJvOzag/96 jcGsrW97bRSLpff3yGlzFMHMNBy3fwfQQUj+XAX9DFIVh0E8shERoTNj4/0tBAnX s/Zv3VtTqAIAzbnbXrfblcHNCwg43IGHdiI1IAqjACBWKV8gqQ/qS0q1XTa5pspg ElVhh55i1jH3xfU8aYK9pexAtCSj2d0pcIYf1YHb/jES58y16RH65c7x/lGWfagI rxHBQTHc/H46SBqWwgdRT/2VZFY9iKEyX5QCHnymW/TAQ2+Zz8MfiPyqJn6txsOs 7EKnqeOOgx5rKRTKYEvkzxEFTzeBWf+6Pcmr76PdeVjiAR41oQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMl3akghfFASihAcqy5HuESgFZyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjMxODhmYzktNWQ4NC0z YzIzLWIyZjItZDQ3YzZhZDBmNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT0QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAiNgNNrjNc9X0rH99OLpuUVH62QfG5iEZN9S1dqBZY602wtwdsadLj 9kAjrBW0IcSZze9hezyn57tRHsXveiLRGCah+AObp+C9/sdc5cmxkaTLJ5TZlFE7 9M6R2ZDiqDHXiBLqI5RsNTdD1uKUTOMlvKM2aX/a6Nd583ykiJAhn8O4liPFIzmN QIphhpVKKznZ+u4b4Q8Dx31zd81QXbt6TP+R7DFGhSNOyWXtTzfynH899U5jc0IO yh1UXN7Tk9Rnj0SpDPk+QAvfVNQvZq2I8bAO3veaUxnXPV39Sop5k6IKxWSbxO/Q NvBXqtOzXRTKm2LxecE1xG9OHKgaX1cB -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:52 2024 by rpki-client on console-ams.rpki-client.org