$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa File: baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa (raw, json) Hash identifier: dvUIhW9HEpHMr3cQDhV9YmWckxQjfT0R1S4ax0fR/Es= Subject key identifier: D5:98:2F:78:F5:EA:2E:D8:DE:FD:68:16:BC:54:3D:DC:16:43:81:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847CE6F4571D0BFABE1A9789640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 24319 IP address blocks: 2600:1417:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:45:71:d0:bf:ab:e1:a9:78:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=4c245855-1079-45d2-b586-00493b9d29b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:91:46:aa:5b:b6:08:3a:78:41:25:ce:9b: 42:12:8a:53:03:d4:95:4b:ec:fa:b0:12:81:da:b1: 1f:70:88:2a:03:f3:b6:ef:42:22:60:c3:aa:48:10: 72:46:47:3b:5f:a6:c1:a2:94:3a:34:5c:76:57:c8: 9b:60:2c:62:25:28:ae:64:af:e3:ca:53:a8:e8:f3: fb:87:96:03:8d:cc:30:80:e7:01:3e:7b:d4:25:76: c3:76:cc:ab:8f:69:ca:41:63:ff:31:84:31:98:c1: 5b:50:8a:45:b6:14:38:97:41:a8:d4:cc:dd:12:44: 57:5e:0d:bf:95:fa:dd:90:79:85:0b:8a:be:87:7e: ad:fa:04:c7:d5:de:32:86:95:d7:da:11:db:4e:4c: 99:4f:be:4e:97:84:28:ab:ae:87:24:d5:3f:80:ad: 1e:83:b1:17:47:92:13:39:4d:52:bd:6c:ac:7a:0a: 4b:26:17:df:c0:c3:40:1b:cf:ba:ad:f4:0a:52:77: b4:85:2c:d5:e7:56:6e:09:c6:14:a9:a3:1d:3b:52: cc:7a:42:8f:bf:5b:a9:6b:e5:69:6e:37:e2:26:96: 1d:e2:53:1b:26:d6:f1:b9:b8:44:12:4d:c1:29:93: f1:ed:26:2d:2c:35:7c:db:18:f6:e7:8c:37:70:d1: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:98:2F:78:F5:EA:2E:D8:DE:FD:68:16:BC:54:3D:DC:16:43:81:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baba3473-ce08-30d0-91dd-6c4ab8d7701f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b3:b1:f9:ec:a1:04:c8:ec:62:ce:b3:f0:90:d7:5c:94:29: 9b:95:a8:c4:1e:6d:c7:46:d8:1e:8c:69:54:ce:25:00:ec:21: cb:16:73:75:ff:72:83:be:df:a2:5d:6e:1a:74:35:5e:1c:a3: 92:54:20:6b:6f:8a:ba:10:0e:54:07:0d:fa:f3:b9:70:7c:ed: 71:66:71:a0:61:71:49:a8:5d:a7:d8:7c:a2:35:9c:af:52:dc: ed:d8:e7:b2:ea:38:12:2f:1c:55:8e:80:7a:55:b8:8d:04:84: 9f:b9:55:31:d2:64:d5:b9:71:1d:ed:dd:64:d8:5a:8f:45:95: 9f:2e:94:c5:9d:49:02:1c:bd:07:8d:a3:1e:af:aa:26:11:5f: df:db:2a:25:88:14:ba:a1:26:67:3a:83:9b:a2:bf:f5:0b:bf: c3:ed:3d:07:a6:ae:7d:9d:fc:2e:28:fa:17:a1:55:77:07:1b: 53:d7:1c:23:33:c4:fb:44:2f:f5:7d:a4:f0:18:a4:9b:dd:4b: 73:62:74:40:41:7d:a4:f2:e6:f7:97:f6:8b:2b:97:b7:25:99: 85:c3:81:b8:a0:a9:e8:74:cc:18:1e:a4:d7:e4:cd:e5:f1:2c: fd:53:b0:80:35:ff:ce:8f:d6:3d:e3:d2:ed:df:29:d5:b6:19: e5:cb:0b:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfOb0Vx0L+r4al4lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk NGMyNDU4NTUtMTA3OS00NWQyLWI1ODYtMDA0OTNiOWQyOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVuRRqpbtgg6eEElzptCEopTA9SVS+z6sBKB 2rEfcIgqA/O270IiYMOqSBByRkc7X6bBopQ6NFx2V8ibYCxiJSiuZK/jylOo6PP7 h5YDjcwwgOcBPnvUJXbDdsyrj2nKQWP/MYQxmMFbUIpFthQ4l0Go1MzdEkRXXg2/ lfrdkHmFC4q+h36t+gTH1d4yhpXX2hHbTkyZT75Ol4Qoq66HJNU/gK0eg7EXR5IT OU1SvWysegpLJhffwMNAG8+6rfQKUne0hSzV51ZuCcYUqaMdO1LMekKPv1upa+Vp bjfiJpYd4lMbJtbxubhEEk3BKZPx7SYtLDV82xj254w3cNFujQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNWYL3j16i7Y3v1oFrxUPdwWQ4HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFiYTM0NzMtY2UwOC0z MGQwLTkxZGQtNmM0YWI4ZDc3MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADazsfnsoQTI7GLOs/CQ11yUKZuVqMQebcdG2B6MaVTOJQDsIcsW c3X/coO+36Jdbhp0NV4co5JUIGtviroQDlQHDfrzuXB87XFmcaBhcUmoXafYfKI1 nK9S3O3Y57LqOBIvHFWOgHpVuI0EhJ+5VTHSZNW5cR3t3WTYWo9FlZ8ulMWdSQIc vQeNox6vqiYRX9/bKiWIFLqhJmc6g5uiv/ULv8PtPQemrn2d/C4o+hehVXcHG1PX HCMzxPtEL/V9pPAYpJvdS3NidEBBfaTy5veX9osrl7clmYXDgbigqeh0zBgepNfk zeXxLP1TsIA1/86P1j3j0u3fKdW2GeXLC/c= -----END CERTIFICATE-----Generated at Fri Nov 22 22:27:37 2024 by rpki-client on console-fra.rpki-client.org