$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa File: d9ff0c2e-878a-3253-8f86-4d25cba06841.roa (raw, json) Hash identifier: ZDjCCJp0EFkQHjYsfbbi7IGX6gFVx/z03YTrd7v2jrI= Subject key identifier: 09:A9:D8:25:0A:AA:BF:33:EB:DE:9B:02:F0:6B:FA:D7:59:DB:D3:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858473D25F5161B65712931D47CE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa Signing time: Tue 17 Sep 2024 01:00:31 +0000 ROA not before: Tue 17 Sep 2024 01:00:31 +0000 ROA not after: Mon 16 Dec 2024 02:00:31 +0000 asID: 12222 IP address blocks: 2001:4878:4347::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:25:f5:16:1b:65:71:29:31:d4:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:31 2024 GMT Not After : Dec 16 02:00:31 2024 GMT Subject: CN=891f6009-1dfe-417e-9cf4-3daedfad060e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:be:cb:16:a6:08:76:bb:59:b7:82:82:bb: ef:54:4c:59:cb:ec:1a:1d:ac:ed:b7:e1:60:71:8a: 03:01:82:72:a5:bf:26:9f:7d:e4:83:b7:cf:51:bf: 2f:9c:30:34:7a:8f:ee:09:2d:49:e6:4a:37:df:9e: 6e:9b:08:03:7b:cf:7b:c3:90:e5:c3:72:34:78:fa: 4f:cb:cc:16:82:7c:2f:6a:4c:18:8e:f9:66:d5:40: 56:5b:a6:4d:f9:4b:a4:90:a7:a6:2b:24:83:b3:bc: ab:95:d2:cd:2b:a7:54:21:25:bc:ef:98:00:6c:d5: 40:5b:d5:0e:48:8f:0a:67:fc:49:de:43:4c:87:77: 81:00:aa:39:7a:5c:cb:4c:ea:98:29:47:ac:e9:0e: 25:59:a2:17:0a:3f:e9:a4:33:cb:6c:f1:8f:e4:2e: d8:c0:4c:82:82:7f:a0:d1:99:de:b0:c8:70:ed:89: 34:26:da:21:d2:51:97:fe:ae:a1:20:09:64:08:80: 69:fd:f2:7f:5f:d5:95:39:dc:c2:19:0b:7d:22:ff: 1e:53:32:ed:50:24:4a:19:99:49:49:9a:71:1e:92: b6:79:e1:5b:ae:ec:34:02:56:0a:78:4a:53:cd:d6: 0d:64:d4:ef:11:f5:2e:ee:50:dd:15:d1:bb:a8:72: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A9:D8:25:0A:AA:BF:33:EB:DE:9B:02:F0:6B:FA:D7:59:DB:D3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ff0c2e-878a-3253-8f86-4d25cba06841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4347::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a5:76:c6:fe:3a:cb:0e:6c:2f:21:5f:a2:de:2b:81:9f:c9: 8e:65:5c:2d:d5:73:21:18:e9:98:ce:0b:5b:77:25:64:a9:b3: 9f:49:32:c9:6f:6d:0a:45:9a:7b:e3:65:e6:92:ba:d3:ba:96: cf:50:4a:26:f6:0d:d0:ce:93:f5:11:0a:b3:34:e3:d3:29:e5: b9:fa:cf:3e:c0:79:76:fe:d6:f2:0a:f9:2e:cd:6a:8a:7d:f0: ce:e6:f6:aa:73:04:53:fa:e9:c5:d8:09:4b:fe:c7:4d:7c:74: 68:9c:6a:fd:66:48:e4:2e:e5:ac:57:1d:e0:84:97:89:61:d9: 80:d7:7e:fa:33:44:f2:2e:2f:ef:33:bd:f3:f1:6f:5a:c0:46: c6:83:f2:31:55:a4:f2:0c:a4:81:47:b0:06:f8:ac:ef:e2:65: 0f:1f:f9:ed:2a:d0:bc:33:11:49:5f:03:c8:74:9c:83:5c:1d: 49:12:82:bc:3f:8d:40:74:69:86:1f:e4:78:ec:63:1f:ed:d6: 10:e8:91:b9:cb:a4:f8:10:5c:0c:eb:c5:18:14:cb:70:da:d3: b5:af:65:ad:c2:36:e3:6d:2d:7a:37:91:ac:ea:29:bd:3f:05: 9b:09:f6:94:0f:f6:5f:c0:a0:90:13:b8:b4:91:4a:0a:9c:9d: a3:0a:9a:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc9JfUWG2VxKTHUfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDkxNzAxMDAzMVoXDTI0MTIxNjAyMDAzMVowLzEtMCsGA1UEAxMk ODkxZjYwMDktMWRmZS00MTdlLTljZjQtM2RhZWRmYWQwNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+a+yxamCHa7WbeCgrvvVExZy+waHaztt+Fg cYoDAYJypb8mn33kg7fPUb8vnDA0eo/uCS1J5ko3355umwgDe897w5Dlw3I0ePpP y8wWgnwvakwYjvlm1UBWW6ZN+UukkKemKySDs7yrldLNK6dUISW875gAbNVAW9UO SI8KZ/xJ3kNMh3eBAKo5elzLTOqYKUes6Q4lWaIXCj/ppDPLbPGP5C7YwEyCgn+g 0ZnesMhw7Yk0Jtoh0lGX/q6hIAlkCIBp/fJ/X9WVOdzCGQt9Iv8eUzLtUCRKGZlJ SZpxHpK2eeFbruw0AlYKeEpTzdYNZNTvEfUu7lDdFdG7qHKgYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmp2CUKqr8z696bAvBr+tdZ29N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDlmZjBjMmUtODc4YS0z MjUzLThmODYtNGQyNWNiYTA2ODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeENH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+ldsb+OssObC8hX6LeK4GfyY5lXC3VcyEY6ZjOC1t3JWSps59J MslvbQpFmnvjZeaSutO6ls9QSib2DdDOk/URCrM049Mp5bn6zz7AeXb+1vIK+S7N aop98M7m9qpzBFP66cXYCUv+x018dGicav1mSOQu5axXHeCEl4lh2YDXfvozRPIu L+8zvfPxb1rARsaD8jFVpPIMpIFHsAb4rO/iZQ8f+e0q0LwzEUlfA8h0nINcHUkS grw/jUB0aYYf5HjsYx/t1hDokbnLpPgQXAzrxRgUy3Da07WvZa3CNuNtLXo3kazq Kb0/BZsJ9pQP9l/AoJATuLSRSgqcnaMKmv0= -----END CERTIFICATE-----Generated at Mon Nov 25 21:44:55 2024 by rpki-client on console-ams.rpki-client.org