$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa File: 1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa (raw, json) Hash identifier: qlQj3/sVtPDvljR2D8VvlpmSHypdde5ez0d4UC5huqo= Subject key identifier: 2D:D1:80:08:E1:AB:54:F5:A9:C5:0B:99:EB:74:69:6E:70:6C:50:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CE6F47F3B0B2E72D6D2D7800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 9498 IP address blocks: 2600:1417:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:47:f3:b0:b2:e7:2d:6d:2d:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=684e9ceb-a735-455d-8b41-10970b18a3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:f8:de:47:76:00:79:65:8a:0b:65:0a:da: 4c:dd:c5:97:d9:04:81:e0:7b:33:59:d8:8e:c5:5f: 70:65:f4:75:7b:02:62:e6:d6:87:f3:38:61:56:36: 9b:60:8f:3f:f4:b0:01:22:a4:b7:77:36:bb:f5:59: 8a:81:50:6c:2d:84:6b:7f:de:d8:12:60:46:28:99: 88:7c:c9:89:c4:5d:36:6b:a6:1e:60:95:38:8a:62: 0d:d6:53:9f:b3:f3:9c:ae:0d:23:14:5e:31:16:db: ef:83:78:cb:1c:f8:5b:1e:9a:b3:52:3f:c2:12:8c: e5:ff:6b:30:87:4c:12:56:88:84:3e:9d:5c:a4:35: 84:5f:d8:56:5d:9d:7b:f0:f3:63:44:f5:c7:fe:5a: a5:a9:9a:59:e7:04:6c:2c:29:02:87:50:10:2a:da: b4:1a:81:f4:3e:f0:f1:6c:b5:4e:be:dc:f5:f7:de: 22:33:2d:dc:bd:3e:38:32:44:f8:16:bc:b0:56:c2: 1a:03:b0:72:80:37:7e:07:77:2b:c9:8b:fb:8a:60: 06:52:52:d8:46:17:fc:e3:7a:cf:13:81:b6:ce:5b: fd:08:9a:4d:0c:0c:4f:e0:8c:8d:6e:df:45:ab:22: 9b:f9:9c:56:0c:b8:43:4f:47:24:fe:e9:36:a6:e0: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:80:08:E1:AB:54:F5:A9:C5:0B:99:EB:74:69:6E:70:6C:50:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1d:b8:ed:0e:db:3c:58:9e:e6:cf:5e:bf:04:92:8e:79:3d: 6f:4d:26:fb:ec:b2:ca:88:fa:b0:b4:34:73:13:86:1b:59:5d: 0b:aa:dc:f2:64:87:35:d4:72:0c:68:68:e2:81:37:61:4f:49: f2:54:22:f2:61:6d:1d:1b:11:29:f8:72:be:aa:76:ee:33:9c: b3:f7:65:9e:50:a9:38:75:fe:89:73:eb:bc:c8:09:24:18:ba: 41:1b:3a:03:46:e7:8c:8f:d5:9b:a7:0d:fb:fd:9b:86:b3:40: cf:36:37:3f:0e:38:67:a6:b7:4b:6f:9b:66:16:56:fb:ad:81: 98:8a:de:e0:aa:59:b3:87:81:0d:6b:07:71:02:0c:66:5e:a9: c9:50:cd:65:9f:4a:db:3b:42:cd:0a:ec:d9:ad:b2:53:40:bd: 12:a4:28:36:4b:90:c6:02:5b:72:6a:13:cc:ae:88:f0:1d:13: 78:36:78:97:bf:0a:e1:fe:34:6c:11:08:cb:7b:78:17:56:f6: 88:b6:b3:06:ef:88:7d:9a:8f:cd:dd:84:08:0d:12:ac:24:51: d2:5c:df:5f:3d:c2:0c:c7:3a:92:16:d6:1a:64:09:63:c4:68: 08:3d:1c:67:39:6e:d9:6e:f3:59:2f:a0:02:e8:15:d3:5f:17: e1:f0:e5:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfOb0fzsLLnLW0teAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk Njg0ZTljZWItYTczNS00NTVkLThiNDEtMTA5NzBiMThhM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOv43kd2AHlligtlCtpM3cWX2QSB4HszWdiO xV9wZfR1ewJi5taH8zhhVjabYI8/9LABIqS3dza79VmKgVBsLYRrf97YEmBGKJmI fMmJxF02a6YeYJU4imIN1lOfs/Ocrg0jFF4xFtvvg3jLHPhbHpqzUj/CEozl/2sw h0wSVoiEPp1cpDWEX9hWXZ178PNjRPXH/lqlqZpZ5wRsLCkCh1AQKtq0GoH0PvDx bLVOvtz1994iMy3cvT44MkT4FrywVsIaA7BygDd+B3cryYv7imAGUlLYRhf843rP E4G2zlv9CJpNDAxP4IyNbt9FqyKb+ZxWDLhDT0ck/uk2puD2/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC3RgAjhq1T1qcULmet0aW5wbFCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVjMzFhZmQtYTIyYy0z Y2ZlLWFhMDktYWUxYTcyOGM5MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUduO0O2zxYnubPXr8Eko55PW9NJvvsssqI+rC0NHMThhtZXQuq 3PJkhzXUcgxoaOKBN2FPSfJUIvJhbR0bESn4cr6qdu4znLP3ZZ5QqTh1/olz67zI CSQYukEbOgNG54yP1ZunDfv9m4azQM82Nz8OOGemt0tvm2YWVvutgZiK3uCqWbOH gQ1rB3ECDGZeqclQzWWfSts7Qs0K7NmtslNAvRKkKDZLkMYCW3JqE8yuiPAdE3g2 eJe/CuH+NGwRCMt7eBdW9oi2swbviH2aj83dhAgNEqwkUdJc3189wgzHOpIW1hpk CWPEaAg9HGc5btlu81kvoALoFdNfF+Hw5QY= -----END CERTIFICATE-----Generated at Tue Nov 26 05:30:09 2024 by rpki-client on console-ams.rpki-client.org