$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf4e82d-fac9-37ca-8129-a4d33843361c.roa File: ddf4e82d-fac9-37ca-8129-a4d33843361c.roa (raw, json) Hash identifier: Jdyg88OwIm6ODjf/BDm3X4dcuFu4a8jZ6XGFnaKUh60= Subject key identifier: 62:91:93:FB:F2:89:A6:AA:9E:67:A9:AE:DB:46:BA:FF:7B:10:A5:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847C1DF69C55F44B7C688EF5C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf4e82d-fac9-37ca-8129-a4d33843361c.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 20940 IP address blocks: 2600:1488:4181::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:69:c5:5f:44:b7:c6:88:ef:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=cc87efc7-217b-4be5-92ac-c0d96882b897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:cf:42:70:87:b7:01:24:95:f0:49:4c:d3: 25:ad:25:ac:29:1f:36:b2:5e:63:ef:83:60:4e:23: 7c:74:b8:4f:97:5d:ee:38:ea:c5:64:c9:d5:ae:3a: 72:81:cb:b3:c4:66:ad:42:d6:c3:46:f6:57:e5:0c: d5:3f:d8:12:ac:11:24:4a:04:b1:78:dd:6b:cb:cf: 52:57:3b:8c:94:2a:d4:01:51:13:c8:4c:a5:b5:39: 00:e8:6d:21:2f:73:b0:75:f3:73:76:ce:0b:67:2d: 8a:6d:01:f1:c0:99:24:5c:78:30:df:14:51:e7:0e: 76:06:b2:17:5e:5e:61:7b:1c:d4:ee:29:94:ad:3a: be:3a:b6:76:bf:de:65:7b:05:fe:22:37:c8:19:61: 07:ae:1f:19:13:67:1c:5e:cd:e5:1c:2f:3c:99:4a: 19:c7:e3:4b:4b:93:a1:4c:db:25:88:63:59:53:c0: e4:94:dd:57:26:6d:d8:bf:2c:1c:c3:c3:10:ae:6d: 5f:1c:0c:c1:bb:08:30:83:96:dc:91:fc:ef:16:c3: af:c0:f3:f3:65:b9:70:3c:c7:dd:c9:20:bf:82:95: 6f:4d:b6:31:36:30:5f:8d:d4:51:36:3d:f1:50:94: c2:27:74:16:65:9c:0f:ad:f6:50:48:e3:8d:22:c3: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:91:93:FB:F2:89:A6:AA:9E:67:A9:AE:DB:46:BA:FF:7B:10:A5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf4e82d-fac9-37ca-8129-a4d33843361c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:4181::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2f:d5:c6:4f:49:68:3a:8d:b9:7e:b6:80:56:f7:43:a1:cd: 7e:74:67:92:ca:d0:52:64:7a:e8:a8:c1:9c:ae:e3:41:1b:43: 16:bd:fb:f1:89:e5:2e:c4:33:5d:a9:46:7f:c3:61:c7:e7:ab: f1:c8:fa:8b:4c:cb:13:f6:c9:0f:b3:12:e1:23:de:53:e2:99: c0:2c:c8:e0:bf:57:0b:78:6e:ef:68:af:65:a1:d5:f5:cb:f1: e9:4f:ef:f5:35:b5:ad:0e:e4:52:ee:e6:61:dc:0b:55:dc:82: 3e:54:ec:d0:a3:df:34:49:f9:ec:8c:b4:99:b1:88:4e:f1:b2: 2c:b3:da:59:4a:03:6d:ad:b9:ef:fa:3f:e6:5e:c6:a2:8c:f1: aa:3f:e0:d2:72:44:06:73:e7:5b:7e:40:f5:9b:14:3c:06:4b: bf:7e:61:96:e5:71:80:00:7a:09:bc:77:ae:bf:16:0e:92:98: dc:e4:bc:71:5b:16:a0:05:e1:73:29:07:b7:15:3f:a7:78:0c: 7f:0b:0c:f3:64:8a:2e:8b:4c:77:4e:f2:47:a2:57:bb:aa:32: f9:11:cc:73:16:1b:ba:40:61:75:59:1a:e8:1e:c7:71:26:d4: 35:c4:22:99:25:32:67:43:9a:ce:3d:e8:c6:3f:34:40:8e:85: 9c:1c:d6:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfB32nFX0S3xojvXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk Y2M4N2VmYzctMjE3Yi00YmU1LTkyYWMtYzBkOTY4ODJiODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw/PQnCHtwEklfBJTNMlrSWsKR82sl5j74Ng TiN8dLhPl13uOOrFZMnVrjpygcuzxGatQtbDRvZX5QzVP9gSrBEkSgSxeN1ry89S VzuMlCrUAVETyEyltTkA6G0hL3OwdfNzds4LZy2KbQHxwJkkXHgw3xRR5w52BrIX Xl5hexzU7imUrTq+OrZ2v95lewX+IjfIGWEHrh8ZE2ccXs3lHC88mUoZx+NLS5Oh TNsliGNZU8DklN1XJm3Yvywcw8MQrm1fHAzBuwgwg5bckfzvFsOvwPPzZblwPMfd ySC/gpVvTbYxNjBfjdRRNj3xUJTCJ3QWZZwPrfZQSOONIsN4LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGKRk/vyiaaqnmeprttGuv97EKVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGRmNGU4MmQtZmFjOS0z N2NhLTgxMjktYTRkMzM4NDMzNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiEGB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAQv1cZPSWg6jbl+toBW90OhzX50Z5LK0FJkeuiowZyu40EbQxa9 +/GJ5S7EM12pRn/DYcfnq/HI+otMyxP2yQ+zEuEj3lPimcAsyOC/Vwt4bu9or2Wh 1fXL8elP7/U1ta0O5FLu5mHcC1Xcgj5U7NCj3zRJ+eyMtJmxiE7xsiyz2llKA22t ue/6P+ZexqKM8ao/4NJyRAZz51t+QPWbFDwGS79+YZblcYAAegm8d66/Fg6SmNzk vHFbFqAF4XMpB7cVP6d4DH8LDPNkii6LTHdO8keiV7uqMvkRzHMWG7pAYXVZGuge x3Em1DXEIpklMmdDms496MY/NECOhZwc1i8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:40:33 2024 by rpki-client on console-ams.rpki-client.org