$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa File: 785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa (raw, json) Hash identifier: aoDc0nJJ2UVeANkK3GQJ5OjAxGq2FcCoYSCJ4yi5TiA= Subject key identifier: AF:02:84:AD:B9:0C:3B:46:D4:A0:B4:1A:04:37:D0:FC:33:27:11:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858473D25F43F6DD6F44EAE0EDF10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 12222 IP address blocks: 2001:4878:4164::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:f4:3f:6d:d6:f4:4e:ae:0e:df:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=928a55f8-032c-4b1a-9128-a86f3e22ef45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:b1:3f:8a:82:20:2d:f2:64:a4:aa:cc:c2: bb:b6:73:79:7e:5f:0b:72:46:69:dd:10:8f:0a:86: 52:7a:d8:c1:dc:55:bd:67:65:f2:ce:fc:3d:0e:1a: c0:a4:91:b5:1e:d6:14:ad:7c:1f:41:ce:51:4e:0d: 03:5f:0d:e8:5c:2b:60:44:c5:03:f1:e2:dd:0f:44: 33:90:d7:81:dd:c3:36:74:aa:e1:8d:ba:ce:4c:58: 3e:f0:5d:a0:7a:a5:c5:f1:c4:b6:e7:8b:47:99:05: ba:34:df:51:8f:a9:e6:8b:fe:ca:82:64:de:7c:12: a0:66:b3:b2:03:62:e0:5c:0b:74:77:74:77:01:66: bf:ba:57:96:cf:9a:d5:3a:a4:b8:0d:05:9b:1f:d9: 20:82:95:3d:2a:87:4d:ae:02:82:a6:09:42:ed:3d: 2a:c9:da:0d:10:60:2f:ed:5a:d5:ec:22:ab:a5:6b: db:78:fe:0b:fa:92:e7:2e:20:eb:36:a8:53:19:16: 70:2d:61:49:e6:4a:0a:d2:e4:86:96:3d:ec:03:33: 1d:90:cf:9e:64:83:18:4b:55:ee:8b:d8:5f:2a:69: 33:cd:8f:e3:3e:20:c3:a4:a2:ba:5e:a0:3c:cb:19: d5:2f:be:0a:66:dd:66:58:c2:15:7a:e6:98:0d:a4: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:02:84:AD:B9:0C:3B:46:D4:A0:B4:1A:04:37:D0:FC:33:27:11:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/785be0d6-b6b2-3d03-8aa7-73c6efab9060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4164::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6f:a9:aa:fa:d4:e3:c5:e0:8d:50:69:4f:b2:e6:bb:79:4a: c9:7d:1f:dd:5e:b7:37:16:bc:33:0c:3a:9d:51:f5:f6:9a:f8: e0:a3:63:74:86:99:0f:2b:8d:7c:bd:fa:b6:1f:c4:eb:3d:08: be:5c:33:f0:86:62:25:7f:4a:62:e7:6d:84:c6:b1:70:4f:55: 8e:8d:65:a1:90:47:bc:09:31:26:99:78:39:ba:eb:20:3d:0d: 67:cc:40:63:0a:7f:4a:34:40:06:58:eb:b7:03:55:d3:c6:47: 38:a0:0a:15:9a:5f:77:9b:d3:dd:c6:09:af:23:bd:cd:3a:3b: db:b7:97:16:cd:08:e8:6e:f8:17:41:af:18:84:c9:89:74:79: 83:7f:e3:0f:11:46:8d:6e:c8:78:3a:c0:aa:e7:83:af:3a:7c: b1:43:a8:63:c3:2a:ea:cc:b2:d6:3d:af:f9:32:80:fa:5b:13: 53:2e:f1:7f:00:fb:4d:78:66:63:28:f7:2f:a2:55:49:19:cc: 7b:6d:36:a6:fa:34:94:c0:bd:91:b0:6b:18:49:6d:ac:27:d0: f9:a2:f5:38:48:27:a8:fc:ac:c6:64:54:18:fa:45:a3:62:61: ce:3d:bc:13:d8:ce:9b:d6:91:ce:b2:66:9c:99:c7:73:fa:97: 20:5a:07:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc9JfQ/bdb0Tq4O3xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk OTI4YTU1ZjgtMDMyYy00YjFhLTkxMjgtYTg2ZjNlMjJlZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eixP4qCIC3yZKSqzMK7tnN5fl8LckZp3RCP CoZSetjB3FW9Z2Xyzvw9DhrApJG1HtYUrXwfQc5RTg0DXw3oXCtgRMUD8eLdD0Qz kNeB3cM2dKrhjbrOTFg+8F2geqXF8cS254tHmQW6NN9Rj6nmi/7KgmTefBKgZrOy A2LgXAt0d3R3AWa/uleWz5rVOqS4DQWbH9kggpU9KodNrgKCpglC7T0qydoNEGAv 7VrV7CKrpWvbeP4L+pLnLiDrNqhTGRZwLWFJ5koK0uSGlj3sAzMdkM+eZIMYS1Xu i9hfKmkzzY/jPiDDpKK6XqA8yxnVL74KZt1mWMIVeuaYDaSOjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK8ChK25DDtG1KC0GgQ30PwzJxFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg1YmUwZDYtYjZiMi0z ZDAzLThhYTctNzNjNmVmYWI5MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEFk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFvqar61OPF4I1QaU+y5rt5Ssl9H91etzcWvDMMOp1R9faa+OCj Y3SGmQ8rjXy9+rYfxOs9CL5cM/CGYiV/SmLnbYTGsXBPVY6NZaGQR7wJMSaZeDm6 6yA9DWfMQGMKf0o0QAZY67cDVdPGRzigChWaX3eb093GCa8jvc06O9u3lxbNCOhu +BdBrxiEyYl0eYN/4w8RRo1uyHg6wKrng686fLFDqGPDKurMstY9r/kygPpbE1Mu 8X8A+014ZmMo9y+iVUkZzHttNqb6NJTAvZGwaxhJbawn0Pmi9ThIJ6j8rMZkVBj6 RaNiYc49vBPYzpvWkc6yZpyZx3P6lyBaBzA= -----END CERTIFICATE-----Generated at Mon Nov 25 22:17:05 2024 by rpki-client on console-fra.rpki-client.org