$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa File: 5ae8d069-51b9-321a-86ca-e763e30e9468.roa (raw, json) Hash identifier: kpIZj5oZ2jBIeeUyi2QBhrdPKlcCtYD5kUiCfuhHFGg= Subject key identifier: 99:21:7D:63:39:3E:70:15:48:0B:10:7A:D5:0C:8A:4C:9D:0F:6F:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847AE36C8F3B72879DE3F693E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa Signing time: Sun 27 Oct 2024 13:00:41 +0000 ROA not before: Sun 27 Oct 2024 13:00:41 +0000 ROA not after: Sat 25 Jan 2025 14:00:41 +0000 asID: 20940 IP address blocks: 2600:1409:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ae:36:c8:f3:b7:28:79:de:3f:69:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:41 2024 GMT Not After : Jan 25 14:00:41 2025 GMT Subject: CN=a230082d-2597-460c-a882-864f4d00cfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:c6:51:e7:28:8c:92:96:fb:0e:2c:16:d8: 88:21:5c:ad:31:c2:67:2e:1a:f2:15:0f:84:6c:dc: a9:27:12:8d:7f:1a:97:70:1c:76:45:43:26:13:93: ed:b1:10:12:19:b8:ef:48:1e:98:bc:2b:16:ba:60: 36:35:37:1f:64:8c:ba:62:02:2a:9c:7a:14:a8:2e: d6:10:5d:f3:6d:3b:0b:3a:a2:cb:36:9d:30:8e:4a: f2:38:14:6b:27:d0:63:ea:b6:00:cc:bf:50:a6:c5: c4:19:3a:e3:c8:ec:02:7a:48:1f:21:db:a2:7a:bd: f6:d7:72:8e:59:32:2c:d7:4f:42:04:3a:20:b7:d2: 56:9a:2d:0c:98:1e:f3:f4:ae:39:bc:42:12:60:c5: e2:16:38:9d:62:2d:8d:54:bc:dd:6b:bb:a5:df:33: b9:3b:bb:b8:ce:8e:1a:38:16:0b:72:f9:5e:17:fb: 26:e0:ef:78:33:fa:1f:9c:df:8a:9a:e0:b5:b2:22: 07:39:1f:dd:46:1d:09:89:a6:62:b0:96:4d:bb:e8: f1:4d:0a:11:0a:7e:5b:09:92:2c:c1:cb:e1:28:d9: 9c:82:5b:3e:b4:50:c4:0f:23:51:83:5b:6a:34:da: 0b:14:7e:a8:88:7d:e4:24:fd:b8:2a:da:2a:52:ae: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:21:7D:63:39:3E:70:15:48:0B:10:7A:D5:0C:8A:4C:9D:0F:6F:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a2:2d:7e:b4:75:93:c0:d9:47:8f:12:67:37:fb:e6:4c:d0: 16:f7:fd:4d:5e:16:9b:8e:08:5c:e4:32:4f:88:3a:22:6a:93: 8c:69:09:dc:5c:fc:a6:6b:7c:1b:2d:70:bf:46:98:1d:eb:e7: 17:5b:8e:c9:87:0d:65:47:29:a1:e3:c7:0a:43:66:e9:b3:b0: 91:87:b5:b6:bc:3f:ad:3e:b3:cf:e3:6e:34:a5:99:22:c6:3c: 58:5a:a9:8f:86:e2:18:52:c5:98:a1:1b:1c:e8:05:4c:ac:f3: 82:b5:79:b5:5d:3f:e6:7d:7f:0e:59:6b:32:ef:2f:3a:8b:03: 4e:86:48:82:5e:08:b5:c5:3d:23:01:0c:a9:d5:d0:ea:21:99: 9e:ec:52:5d:78:d8:2c:dd:22:59:59:44:d0:99:b3:95:dd:a5: ba:50:8d:9c:cf:49:7b:3f:6e:12:5f:9b:03:88:ea:ea:65:96: 14:fc:d0:46:d2:b6:37:5c:d1:69:62:d4:86:4e:9e:9e:fc:e8: 52:4b:02:d1:bd:7f:6c:92:be:19:c5:6e:2c:a6:73:14:e2:ea: 2a:1e:5c:23:9f:be:3e:84:56:50:1c:63:00:fb:a4:f5:90:cc: 5c:8d:0a:f6:56:b3:57:99:14:a3:e1:f8:a1:13:d0:6a:cd:71: f8:b1:f5:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeuNsjztyh53j9pPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YTIzMDA4MmQtMjU5Ny00NjBjLWE4ODItODY0ZjRkMDBjZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn/GUecojJKW+w4sFtiIIVytMcJnLhryFQ+E bNypJxKNfxqXcBx2RUMmE5PtsRASGbjvSB6YvCsWumA2NTcfZIy6YgIqnHoUqC7W EF3zbTsLOqLLNp0wjkryOBRrJ9Bj6rYAzL9QpsXEGTrjyOwCekgfIduier3213KO WTIs109CBDogt9JWmi0MmB7z9K45vEISYMXiFjidYi2NVLzda7ul3zO5O7u4zo4a OBYLcvleF/sm4O94M/ofnN+KmuC1siIHOR/dRh0JiaZisJZNu+jxTQoRCn5bCZIs wcvhKNmcgls+tFDEDyNRg1tqNNoLFH6oiH3kJP24KtoqUq6IWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkhfWM5PnAVSAsQetUMikydD28UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFlOGQwNjktNTFiOS0z MjFhLTg2Y2EtZTc2M2UzMGU5NDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCQAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABqiLX60dZPA2UePEmc3++ZM0Bb3/U1eFpuOCFzkMk+IOiJqk4xp Cdxc/KZrfBstcL9GmB3r5xdbjsmHDWVHKaHjxwpDZumzsJGHtba8P60+s8/jbjSl mSLGPFhaqY+G4hhSxZihGxzoBUys84K1ebVdP+Z9fw5ZazLvLzqLA06GSIJeCLXF PSMBDKnV0OohmZ7sUl142CzdIllZRNCZs5XdpbpQjZzPSXs/bhJfmwOI6upllhT8 0EbStjdc0Wli1IZOnp786FJLAtG9f2ySvhnFbiymcxTi6ioeXCOfvj6EVlAcYwD7 pPWQzFyNCvZWs1eZFKPh+KET0GrNcfix9QQ= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:33 2024 by rpki-client on console-ams.rpki-client.org