$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a868a44-be29-37e3-a095-93596375a3c6.roa File: 8a868a44-be29-37e3-a095-93596375a3c6.roa (raw, json) Hash identifier: L8dzY1bnRYNW3sUByFGFJJaA64EcOfVBqtU0m6PFUo0= Subject key identifier: 9B:D1:1E:EA:23:5C:3B:6A:23:68:AC:FF:CD:F4:A7:B1:A4:32:1E:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858474850A90AD00F5F08125567C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a868a44-be29-37e3-a095-93596375a3c6.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 24319 IP address blocks: 2600:140b:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:a9:0a:d0:0f:5f:08:12:55:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=7db5ce33-5fde-41c8-83f1-3b4607570039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:e2:fb:e2:ae:d0:2d:b7:f8:2a:03:56:5f: 82:7b:48:84:51:94:c1:ee:c2:4e:7e:46:d4:a1:2f: 40:a7:0b:fe:26:af:46:a4:47:c7:f4:ce:df:4d:3a: 8a:15:45:a8:d5:5e:16:64:d0:06:56:5e:b7:d9:3f: 11:73:92:b5:92:19:30:7c:5e:f1:bd:19:97:09:f9: bd:e9:ae:43:32:56:fa:e1:40:8e:32:e3:d3:d8:19: 0f:88:8e:52:f8:35:95:f1:7e:df:b4:45:be:30:3e: bd:f1:30:0b:c0:4c:a9:1e:05:8a:20:e7:7b:03:45: db:3a:07:a7:ac:49:87:8c:76:2c:bd:2b:c5:d8:d1: f5:8c:01:05:1c:7b:12:09:18:34:1c:e1:b1:34:86: 7c:12:ce:4e:89:a7:71:ba:9a:8e:3c:91:91:da:55: f1:1e:ea:c9:94:08:05:1f:09:ae:57:2b:87:15:40: 0d:fa:39:98:ec:f2:e5:9e:7f:54:42:85:bb:34:f6: ae:44:e7:a8:6f:a1:ef:ca:9c:ca:da:57:a5:b0:f7: d2:5f:11:fb:9e:1c:cc:f3:23:00:05:56:22:7a:05: d2:e3:34:7a:0b:45:5f:74:35:9d:ca:08:74:f8:9e: 49:38:34:ef:53:8c:71:6d:aa:2e:91:7e:fb:39:80: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:1E:EA:23:5C:3B:6A:23:68:AC:FF:CD:F4:A7:B1:A4:32:1E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a868a44-be29-37e3-a095-93596375a3c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f2:4c:ed:3a:fc:e7:7b:c9:5f:20:53:97:34:5b:45:8f:82: 16:f2:32:af:b7:72:94:ce:bf:db:a0:f9:c6:7c:98:ed:9c:e8: 2a:c4:ab:76:35:68:bc:8a:78:31:da:11:bd:ac:e9:17:db:3a: 85:da:43:61:7b:14:a7:b8:22:49:46:33:78:53:f4:45:45:bd: 86:a9:ac:2a:98:28:ef:98:46:46:2d:2f:fc:53:70:d2:e8:30: aa:74:e0:99:4d:29:57:53:9b:bb:19:7e:4b:dd:ce:7d:9c:5a: c1:b5:bd:cb:bd:88:24:b1:53:da:56:e3:0f:43:21:18:02:d9: 9a:1c:51:35:62:a3:64:4c:00:ef:a2:30:4e:c5:68:ad:88:16: d9:4a:79:6b:55:e4:00:53:d9:72:da:01:45:08:78:af:2c:a1: c5:bc:ca:87:d7:1d:59:fe:97:a5:dc:68:12:ed:1e:e1:87:05: db:27:55:22:94:e6:2e:80:e5:28:17:32:40:42:44:29:c1:f3: 2a:64:0a:db:4b:2b:ff:ab:f4:f8:f8:c1:ab:9b:3d:8c:50:42: 24:ed:fc:55:7b:56:c9:ac:3b:fd:da:46:9c:6d:73:0b:87:cc: 81:fe:bc:94:0d:6f:dd:4b:5d:46:65:ce:81:62:7d:5d:ed:bc: 26:ea:e7:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdIUKkK0A9fCBJVZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk N2RiNWNlMzMtNWZkZS00MWM4LTgzZjEtM2I0NjA3NTcwMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmni++Ku0C23+CoDVl+Ce0iEUZTB7sJOfkbU oS9Apwv+Jq9GpEfH9M7fTTqKFUWo1V4WZNAGVl632T8Rc5K1khkwfF7xvRmXCfm9 6a5DMlb64UCOMuPT2BkPiI5S+DWV8X7ftEW+MD698TALwEypHgWKIOd7A0XbOgen rEmHjHYsvSvF2NH1jAEFHHsSCRg0HOGxNIZ8Es5OiadxupqOPJGR2lXxHurJlAgF HwmuVyuHFUAN+jmY7PLlnn9UQoW7NPauROeob6HvypzK2lelsPfSXxH7nhzM8yMA BVYiegXS4zR6C0VfdDWdygh0+J5JODTvU4xxbaoukX77OYAfCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJvRHuojXDtqI2is/830p7GkMh7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE4NjhhNDQtYmUyOS0z N2UzLWEwOTUtOTM1OTYzNzVhM2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCwAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjyTO06/Od7yV8gU5c0W0WPghbyMq+3cpTOv9ug+cZ8mO2c6CrE q3Y1aLyKeDHaEb2s6RfbOoXaQ2F7FKe4IklGM3hT9EVFvYaprCqYKO+YRkYtL/xT cNLoMKp04JlNKVdTm7sZfkvdzn2cWsG1vcu9iCSxU9pW4w9DIRgC2ZocUTVio2RM AO+iME7FaK2IFtlKeWtV5ABT2XLaAUUIeK8socW8yofXHVn+l6XcaBLtHuGHBdsn VSKU5i6A5SgXMkBCRCnB8ypkCttLK/+r9Pj4waubPYxQQiTt/FV7VsmsO/3aRpxt cwuHzIH+vJQNb91LXUZlzoFifV3tvCbq51o= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:46 2024 by rpki-client on console-ams.rpki-client.org