$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa File: 20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa (raw, json) Hash identifier: P0NeI6DwXL+qI4ZjQ/kYrj8QvHd428eYFdwm4HjzXA8= Subject key identifier: 0E:F4:DE:37:EC:31:C3:AE:54:21:1C:53:E0:DC:64:82:8E:52:CC:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C1DF6B3ADC80BABEB59D4140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 20940 IP address blocks: 2600:1406:2e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:6b:3a:dc:80:ba:be:b5:9d:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=e975d1c7-302d-4a58-b769-ec1337adbf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:ef:e1:21:ac:32:e4:9e:a0:33:fa:0e:76: 1e:7b:0f:d5:54:b7:52:d7:66:54:23:54:34:ed:84: 44:db:a1:b3:dc:aa:28:ea:dc:e6:3d:8f:04:0e:a9: 3b:37:1d:fb:44:63:bc:0c:fb:8e:9b:eb:05:96:d6: 07:f7:2e:bf:7a:50:60:41:ae:7a:b3:9f:19:63:58: 6b:b3:9b:ae:f3:ac:ab:0b:10:85:e0:c7:da:64:bf: f7:8e:b0:31:0f:aa:04:16:47:25:86:12:22:46:c9: 3f:79:a3:64:89:d5:80:d4:70:d6:1b:bd:a0:a4:d9: 2a:9a:50:1e:d4:c0:4b:93:c1:d7:19:e3:e1:81:dc: 8e:4b:43:8d:68:bf:48:3d:e5:4b:7b:1c:d8:0d:ff: 71:e3:88:a9:50:2d:3c:f5:3b:f2:1e:99:e5:c2:a2: aa:89:45:95:e7:ff:ad:5b:d4:0f:5b:ec:63:08:88: 8e:92:32:96:52:a5:df:4d:13:33:bb:5a:8e:15:b3: 16:c0:3e:92:c0:e8:a8:c7:f9:fd:36:80:5a:46:30: 2b:fa:86:04:a5:ec:22:c0:70:87:0d:ed:ba:1b:05: 9b:09:84:01:a4:4a:a1:5d:51:93:ab:fe:18:3c:46: 17:b1:4a:d8:9e:d0:95:1c:10:b3:92:d4:f3:26:4e: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:DE:37:EC:31:C3:AE:54:21:1C:53:E0:DC:64:82:8E:52:CC:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:2e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:41:a4:f1:a7:b0:7d:a0:5a:73:ca:e7:5e:7d:38:ce:b6:ce: 3c:56:0e:fc:37:70:b8:0f:12:53:64:97:96:a8:f3:47:0f:bf: 22:cc:60:f7:9a:95:dc:62:53:a4:b7:fd:d4:71:a2:1c:fa:94: f6:c5:ba:27:ea:70:79:6e:b3:90:87:8a:42:79:0e:26:34:d2: c3:a7:31:19:b1:9b:3f:b4:a6:a4:ae:c8:ee:66:6e:7f:0a:08: 3b:a1:98:6f:77:67:19:1c:05:a1:bd:99:69:cf:c5:62:8b:95: 1c:46:00:a0:39:4a:44:a5:9a:19:f9:14:a6:2a:96:b2:ac:35: af:cd:6e:be:ff:5f:bf:0d:ea:76:9e:cb:67:5f:ff:b4:88:d9: 5a:0e:2b:fe:fc:f6:56:37:6c:85:02:91:ed:39:0a:61:1a:2f: d8:63:94:79:e2:93:29:9c:fd:9a:77:b0:20:a4:ae:94:5b:41: 15:d1:86:ac:e1:bb:bb:f5:fb:af:79:20:44:1d:23:a3:32:f1: 6e:8c:3c:4b:d1:98:fb:97:8b:52:15:a0:9a:15:00:df:7b:69: 52:e9:93:61:ba:cd:cb:24:f7:62:d2:9f:73:4e:c6:36:ec:40: 89:89:7a:e2:bd:79:c3:1e:4a:c1:4c:04:04:ea:86:d1:ba:86: da:ac:71:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB32s63IC6vrWdQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk ZTk3NWQxYzctMzAyZC00YTU4LWI3NjktZWMxMzM3YWRiZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR3v4SGsMuSeoDP6DnYeew/VVLdS12ZUI1Q0 7YRE26Gz3Koo6tzmPY8EDqk7Nx37RGO8DPuOm+sFltYH9y6/elBgQa56s58ZY1hr s5uu86yrCxCF4MfaZL/3jrAxD6oEFkclhhIiRsk/eaNkidWA1HDWG72gpNkqmlAe 1MBLk8HXGePhgdyOS0ONaL9IPeVLexzYDf9x44ipUC089TvyHpnlwqKqiUWV5/+t W9QPW+xjCIiOkjKWUqXfTRMzu1qOFbMWwD6SwOiox/n9NoBaRjAr+oYEpewiwHCH De26GwWbCYQBpEqhXVGTq/4YPEYXsUrYntCVHBCzktTzJk5CSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA703jfsMcOuVCEcU+DcZIKOUswsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBiNmNmNTctYmNmMy0z ZGQ2LTg1ZmUtYjJhYWEyYTU5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBi4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVBpPGnsH2gWnPK5159OM62zjxWDvw3cLgPElNkl5ao80cPvyLM YPealdxiU6S3/dRxohz6lPbFuifqcHlus5CHikJ5DiY00sOnMRmxmz+0pqSuyO5m bn8KCDuhmG93ZxkcBaG9mWnPxWKLlRxGAKA5SkSlmhn5FKYqlrKsNa/Nbr7/X78N 6naey2df/7SI2VoOK/789lY3bIUCke05CmEaL9hjlHnikymc/Zp3sCCkrpRbQRXR hqzhu7v1+695IEQdI6My8W6MPEvRmPuXi1IVoJoVAN97aVLpk2G6zcsk92LSn3NO xjbsQImJeuK9ecMeSsFMBATqhtG6htqscXs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:06 2024 by rpki-client on console-ams.rpki-client.org