$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa File: 853c1aa1-1fc0-3639-b52e-955d1420a50c.roa (raw, json) Hash identifier: oixkTBnZLbhfUWaTr04pr2rw3U7Ug71HNh6dJ6PalFA= Subject key identifier: 6D:A9:FC:A0:00:A1:D3:73:0E:2F:F1:B2:DF:84:54:17:76:88:12:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CE6F43DF9970FE2E1A42B240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 9498 IP address blocks: 2600:140f:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:43:df:99:70:fe:2e:1a:42:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=c2a53d80-bbb4-4a42-8e4c-49fde4572a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:35:c5:30:59:94:c6:ac:d0:bc:76:c0:b4: e0:e3:ae:ff:bf:8a:da:fc:9d:0a:2c:32:39:56:22: b2:eb:91:4d:96:7f:cf:47:ca:e7:16:34:14:62:6c: 6b:db:23:34:45:c5:56:a5:7f:7a:19:01:30:46:e1: d2:8c:a7:74:dd:31:36:9e:9c:6f:55:7d:d4:2f:2a: 6b:1e:d4:d1:12:30:99:f3:ca:f7:30:fe:55:c1:8c: ec:5b:42:da:52:07:6d:92:cd:bb:63:0a:50:4c:55: c4:9f:fc:de:bb:64:f1:8f:61:b0:04:ec:f3:f2:49: 3d:88:b9:bf:8d:2c:ae:2d:f4:61:3b:d4:a1:d2:50: ce:8d:ef:d0:63:81:35:e3:fe:0a:dd:0a:14:46:8a: d4:ef:51:b9:db:bb:c8:80:88:e7:2f:7f:52:81:cd: 9b:05:13:e2:05:fd:cb:bb:51:4c:a9:47:12:5e:13: 4b:2d:35:ab:c9:e9:61:a8:8d:d6:dc:7e:eb:fd:80: cc:1b:2d:46:b1:74:90:61:4c:8f:1e:17:c3:74:a5: 29:70:cb:a1:0a:b6:b4:2d:8d:8f:94:59:4b:e4:87: 7e:65:37:34:27:e6:77:8e:33:22:31:d8:7b:0e:f2: 6a:05:d7:4c:ef:a9:aa:40:fe:d0:4a:8c:39:61:36: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A9:FC:A0:00:A1:D3:73:0E:2F:F1:B2:DF:84:54:17:76:88:12:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:3c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c9:24:6d:d2:d1:be:55:d3:65:b2:ec:23:5c:a7:6e:5b:9c: bb:44:12:ca:24:8c:cb:3d:c3:8c:bc:25:75:28:f6:b2:7f:79: f9:53:77:b5:00:dc:96:7a:59:77:71:ea:32:40:b9:6b:86:d9: d3:5a:6d:42:a3:0b:bf:64:e4:69:5c:6d:32:75:de:d8:40:ec: 12:95:ec:37:9e:eb:aa:ac:dc:5a:8d:2c:5c:43:55:5d:92:7c: 85:29:16:a7:70:a2:8a:48:ae:b9:4d:30:6f:60:ce:03:56:02: 18:67:7d:b1:8c:da:48:ce:37:cb:12:2f:9e:4e:6a:57:c6:eb: a6:77:0b:a4:4d:31:fb:d2:02:c3:88:79:3c:56:72:8e:c9:e1: 90:c6:3d:08:84:c4:9b:5d:27:63:f7:03:53:42:8d:50:70:14: 4d:46:e7:3e:7d:7b:4c:08:c2:f7:fa:2c:36:06:80:09:9a:69: 6f:c1:a4:a2:59:47:df:23:c5:75:2f:d8:19:d1:79:8d:f8:b2: 10:8f:95:eb:69:fa:5c:54:13:03:ab:51:3f:0b:25:6c:1e:3c: a5:cf:0b:ff:fc:ab:36:67:d7:b4:dd:38:be:be:43:e9:d5:06: 4b:df:aa:74:35:4e:a8:81:b4:57:27:0d:d0:95:2e:b5:7b:01: ce:4f:b7:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfOb0PfmXD+LhpCskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk YzJhNTNkODAtYmJiNC00YTQyLThlNGMtNDlmZGU0NTcyYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomY1xTBZlMas0Lx2wLTg467/v4ra/J0KLDI5 ViKy65FNln/PR8rnFjQUYmxr2yM0RcVWpX96GQEwRuHSjKd03TE2npxvVX3ULypr HtTREjCZ88r3MP5VwYzsW0LaUgdtks27YwpQTFXEn/zeu2Txj2GwBOzz8kk9iLm/ jSyuLfRhO9Sh0lDOje/QY4E14/4K3QoURorU71G527vIgIjnL39Sgc2bBRPiBf3L u1FMqUcSXhNLLTWryelhqI3W3H7r/YDMGy1GsXSQYUyPHhfDdKUpcMuhCra0LY2P lFlL5Id+ZTc0J+Z3jjMiMdh7DvJqBddM76mqQP7QSow5YTYSRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG2p/KAAodNzDi/xst+EVBd2iBJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODUzYzFhYTEtMWZjMC0z NjM5LWI1MmUtOTU1ZDE0MjBhNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDzwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvJJG3S0b5V02Wy7CNcp25bnLtEEsokjMs9w4y8JXUo9rJ/eflT d7UA3JZ6WXdx6jJAuWuG2dNabUKjC79k5GlcbTJ13thA7BKV7Dee66qs3FqNLFxD VV2SfIUpFqdwoopIrrlNMG9gzgNWAhhnfbGM2kjON8sSL55OalfG66Z3C6RNMfvS AsOIeTxWco7J4ZDGPQiExJtdJ2P3A1NCjVBwFE1G5z59e0wIwvf6LDYGgAmaaW/B pKJZR98jxXUv2BnReY34shCPletp+lxUEwOrUT8LJWwePKXPC//8qzZn17TdOL6+ Q+nVBkvfqnQ1TqiBtFcnDdCVLrV7Ac5Ptw8= -----END CERTIFICATE-----Generated at Tue Nov 26 05:30:44 2024 by rpki-client on console-ams.rpki-client.org