$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/eb34832d-0f32-31fe-b196-22a1fa986e5e.roa File: eb34832d-0f32-31fe-b196-22a1fa986e5e.roa (raw, json) Hash identifier: v0ttsnEcwnKTQoAFIyAM7ndrWGrhfKwI3SJrnkxx9Ew= Subject key identifier: AE:AD:72:21:5C:F5:39:EE:DA:D0:EF:D1:D7:EE:C0:37:1C:5B:A6:E4 Certificate issuer: /CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41 Certificate serial: 010D0C9F432858477EC104B392979AE3BCFF6300 Authority key identifier: 71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/eb34832d-0f32-31fe-b196-22a1fa986e5e.roa Signing time: Thu 10 Oct 2024 13:00:41 +0000 ROA not before: Thu 10 Oct 2024 13:00:41 +0000 ROA not after: Wed 08 Jan 2025 14:00:41 +0000 asID: 398257 IP address blocks: 2620:a5:6000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:c1:04:b3:92:97:9a:e3:bc:ff:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41 Validity Not Before: Oct 10 13:00:41 2024 GMT Not After : Jan 8 14:00:41 2025 GMT Subject: CN=52f3897a-53c6-4f35-92e4-2a9971fd16bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:8f:f5:fc:b5:7a:79:49:1c:1a:3a:a4:46: 3c:a4:a2:91:b9:fa:26:5f:44:e4:9f:68:bd:1b:71: b6:3b:9a:a6:4e:2d:05:64:7f:da:64:a6:cb:1a:2f: 09:5b:51:db:ec:b5:81:d0:07:bc:e9:13:d4:5a:3c: e7:6b:1f:73:0b:67:5f:84:84:68:8f:aa:1e:1c:71: 1d:ca:4c:59:77:24:89:67:12:18:bd:3e:4b:7c:b7: 8f:4f:75:cb:89:87:86:56:63:c6:ff:70:bb:9c:fd: b1:7f:63:02:47:a2:8d:03:0a:c7:24:04:ab:b8:6c: fc:5d:8c:36:8c:31:8d:44:0c:a4:20:e5:d0:5c:cd: c9:36:ed:35:dd:1b:9c:82:ad:8e:37:eb:d2:d2:c1: 7a:34:df:73:a9:d1:4d:c9:8a:38:c5:bd:02:08:aa: 2e:54:bd:17:21:0f:01:43:a5:3b:41:26:55:fa:03: b3:82:c4:99:1f:41:f3:34:62:d5:10:a7:2d:4f:22: 98:74:3f:79:84:b9:55:a1:50:dc:7e:78:70:04:7b: 6a:37:5b:0e:d9:50:db:34:da:6d:1a:53:6e:7b:27: f3:12:e5:8f:ae:77:f2:86:4d:c8:aa:dc:7c:cc:94: 1c:52:44:f4:cd:fa:4e:6a:ef:4b:c2:b6:9c:f3:b0: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AD:72:21:5C:F5:39:EE:DA:D0:EF:D1:D7:EE:C0:37:1C:5B:A6:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/eb34832d-0f32-31fe-b196-22a1fa986e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl X509v3 Authority Key Identifier: keyid:71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer sbgp-ipAddrBlock: critical IPv6: 2620:a5:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:99:35:fe:5d:d3:c3:51:7c:97:35:e2:8a:95:5a:db:80:29: c1:f3:c0:45:80:40:bb:8e:f3:ea:9b:ac:1e:2c:c8:83:fc:f2: 39:a9:af:44:c3:52:5b:4a:50:26:cc:22:5f:34:4e:7d:72:0f: 56:d5:65:91:05:05:e9:90:8b:4d:89:2a:49:34:a5:fb:48:24: f8:e9:e9:ad:27:54:42:83:e1:87:09:e7:3b:33:4f:68:03:18: 32:aa:54:ac:6e:6f:a7:2d:70:f8:8a:a2:58:9b:67:9d:42:f0: 37:13:45:16:82:d1:dd:de:34:22:84:e5:19:e6:3a:76:fa:60: e6:10:19:e4:72:80:9e:56:d8:9c:22:32:0b:db:c5:e2:97:96: 77:7b:96:1a:e9:d1:59:ad:31:4b:d5:4b:1e:e4:11:f4:4f:43: 7f:59:8c:36:de:09:6e:c4:3a:be:a5:2f:26:fe:78:58:ea:bd: 5a:66:68:3c:80:af:9c:1e:3c:92:aa:28:8d:97:1e:a6:d9:0c: 6a:f5:d0:65:83:1f:fd:9a:d6:17:48:21:ad:ea:c0:07:c1:e0: ef:29:11:31:6d:a4:9d:d1:2f:41:33:1f:29:86:d6:72:ee:80: 60:93:f8:86:43:54:1a:bf:24:d6:5e:ef:c0:df:a0:e6:b7:fa: 63:66:b3:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd+wQSzkpea47z/YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkMmIxNjItZGI3Ny00NDIyLTlmODctYzBhZTBhYmU5 ZDQxMB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk NTJmMzg5N2EtNTNjNi00ZjM1LTkyZTQtMmE5OTcxZmQxNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqqP9fy1enlJHBo6pEY8pKKRufomX0Tkn2i9 G3G2O5qmTi0FZH/aZKbLGi8JW1Hb7LWB0Ae86RPUWjznax9zC2dfhIRoj6oeHHEd ykxZdySJZxIYvT5LfLePT3XLiYeGVmPG/3C7nP2xf2MCR6KNAwrHJASruGz8XYw2 jDGNRAykIOXQXM3JNu013Rucgq2ON+vS0sF6NN9zqdFNyYo4xb0CCKouVL0XIQ8B Q6U7QSZV+gOzgsSZH0HzNGLVEKctTyKYdD95hLlVoVDcfnhwBHtqN1sO2VDbNNpt GlNueyfzEuWPrnfyhk3Iqtx8zJQcUkT0zfpOau9Lwrac87DEfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6tciFc9Tnu2tDv0dfuwDccW6bkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGQy YjE2Mi1kYjc3LTQ0MjItOWY4Ny1jMGFlMGFiZTlkNDEvZWIzNDgzMmQtMGYzMi0z MWZlLWIxOTYtMjJhMWZhOTg2ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRkMmIxNjItZGI3Ny00NDIyLTlm ODctYzBhZTBhYmU5ZDQxLzVkZDJiMTYyLWRiNzctNDQyMi05Zjg3LWMwYWUwYWJl OWQ0MS5jcmwwHwYDVR0jBBgwFoAUcShM8N2A0Ki50PAHPVtY/soIXCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGQyYjE2Mi1kYjc3LTQ0MjItOWY4Ny1jMGFl MGFiZTlkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAApWAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESZNf5d08NRfJc14oqVWtuAKcHzwEWAQLuO8+qbrB4syIP88jmp r0TDUltKUCbMIl80Tn1yD1bVZZEFBemQi02JKkk0pftIJPjp6a0nVEKD4YcJ5zsz T2gDGDKqVKxub6ctcPiKolibZ51C8DcTRRaC0d3eNCKE5RnmOnb6YOYQGeRygJ5W 2JwiMgvbxeKXlnd7lhrp0VmtMUvVSx7kEfRPQ39ZjDbeCW7EOr6lLyb+eFjqvVpm aDyAr5wePJKqKI2XHqbZDGr10GWDH/2a1hdIIa3qwAfB4O8pETFtpJ3RL0EzHymG 1nLugGCT+IZDVBq/JNZe78DfoOa3+mNms9c= -----END CERTIFICATE-----Generated at Sun Nov 24 22:14:38 2024 by rpki-client on console-fra.rpki-client.org