$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa File: 0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa (raw, json) Hash identifier: k5lrwf2bPUsDqAP+nzhws64+KO7SPvE16UBFeyrYq1Y= Subject key identifier: BB:E5:29:86:B6:D4:2A:24:86:69:31:FA:23:18:34:38:E5:75:B5:22 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285847E35F78B4D3ACB37E165D5B60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa Signing time: Fri 15 Nov 2024 14:00:39 +0000 ROA not before: Fri 15 Nov 2024 14:00:39 +0000 ROA not after: Thu 13 Feb 2025 14:00:39 +0000 asID: 8070 IP address blocks: 2603:1063:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e3:5f:78:b4:d3:ac:b3:7e:16:5d:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 15 14:00:39 2024 GMT Not After : Feb 13 14:00:39 2025 GMT Subject: CN=d76358c3-ccee-45be-babe-7bcbe6f869a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:84:46:99:58:33:75:6e:e9:a3:8b:83:e7: b7:a5:35:f3:d9:46:fd:f0:5f:be:4c:0a:4f:97:6e: ea:78:45:60:32:3f:4d:6b:09:f1:f2:b0:59:a9:85: b4:c2:45:c6:95:99:27:6c:57:a0:30:d0:de:69:e7: 56:90:75:d8:d0:cc:67:4d:7f:e6:a2:9c:7b:d4:81: 91:14:36:c1:91:56:94:72:80:2d:06:a3:e7:21:5d: 95:aa:82:90:ff:22:05:df:6f:3a:be:88:ff:3e:41: 6f:91:2e:7f:80:44:40:0a:f3:85:1f:58:7e:1b:dd: 63:f4:1c:19:2f:c9:4e:e2:77:82:a0:f6:60:9f:ac: b0:94:b7:43:e6:d9:80:6f:4c:71:72:99:34:83:9a: ad:2b:c8:7d:86:44:06:07:93:c1:03:0a:bf:5f:cf: f9:15:75:6f:98:93:b8:e2:39:bb:0a:f8:33:05:87: 5c:6c:e1:9e:96:29:31:fd:ce:d3:15:c4:ad:80:78: 82:a2:e9:60:35:11:26:b4:7a:bc:3d:16:eb:89:4c: f7:1c:e8:36:2b:fb:48:1b:d6:b0:55:3c:69:b3:3d: 3c:0c:7c:bd:2e:57:96:34:8b:8d:7c:24:ca:6b:18: 8e:57:bd:c4:b9:da:05:61:24:e0:93:b6:55:4a:9b: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E5:29:86:B6:D4:2A:24:86:69:31:FA:23:18:34:38:E5:75:B5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0cfaa71b-a3b5-3d8e-8811-9989cca33b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2603:1063:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8e:3f:e3:18:d6:51:2f:76:30:7a:8e:88:2d:f1:a1:0f:be: a2:07:66:1a:4a:37:c6:6a:f5:f3:c2:87:d4:af:bd:4b:28:d3: 6b:1c:14:7b:80:e4:79:16:61:e0:0d:02:ea:07:de:59:cb:1a: aa:47:50:18:54:57:29:d9:bb:f9:df:20:e5:86:47:c3:55:83: e0:e6:b4:2a:21:14:20:34:50:81:d5:07:ed:bd:44:07:af:0f: f6:f8:cb:0b:26:5e:3b:e5:79:8b:02:9d:35:f6:29:10:c7:df: bf:10:6d:f0:b9:ff:37:a5:2a:0c:ee:26:d4:23:c5:75:b3:05: c0:f7:50:bc:d1:63:5d:00:77:ef:b2:51:3a:e6:4c:f0:12:2a: e5:4f:03:59:fa:c6:98:75:b5:73:55:23:be:54:77:b2:1e:a9: df:2b:d4:a2:c9:36:fb:08:9f:fe:a9:da:59:18:48:20:f4:4f: b5:7f:7f:c5:7c:4e:19:7b:57:30:66:87:ba:99:3b:0c:8f:b6: 8c:39:57:fe:0c:4f:1d:1b:7e:cc:74:b0:de:55:c0:31:c7:9f: c2:e3:27:65:ca:07:50:25:0f:4d:a9:3f:2a:2e:0c:c1:13:a7: 5c:22:34:c8:b3:56:71:d4:ca:22:ab:1c:e5:0e:4e:2d:c6:75: bc:47:e2:c7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfjX3i006yzfhZdW2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDc2MzU4YzMtY2NlZS00NWJlLWJhYmUtN2JjYmU2Zjg2OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uaERplYM3Vu6aOLg+e3pTXz2Ub98F++TApP l27qeEVgMj9Nawnx8rBZqYW0wkXGlZknbFegMNDeaedWkHXY0MxnTX/mopx71IGR FDbBkVaUcoAtBqPnIV2VqoKQ/yIF3286voj/PkFvkS5/gERACvOFH1h+G91j9BwZ L8lO4neCoPZgn6ywlLdD5tmAb0xxcpk0g5qtK8h9hkQGB5PBAwq/X8/5FXVvmJO4 4jm7CvgzBYdcbOGelikx/c7TFcStgHiCoulgNREmtHq8PRbriUz3HOg2K/tIG9aw VTxpsz08DHy9LleWNIuNfCTKaxiOV73EudoFYSTgk7ZVSptrRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLvlKYa21Cokhmkx+iMYNDjldbUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGNmYWE3MWItYTNiNS0z ZDhlLTg4MTEtOTk4OWNjYTMzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMQYyEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeo4/4xjWUS92MHqOiC3xoQ++ogdmGko3xmr188KH1K+9SyjTaxwU e4DkeRZh4A0C6gfeWcsaqkdQGFRXKdm7+d8g5YZHw1WD4Oa0KiEUIDRQgdUH7b1E B68P9vjLCyZeO+V5iwKdNfYpEMffvxBt8Ln/N6UqDO4m1CPFdbMFwPdQvNFjXQB3 77JROuZM8BIq5U8DWfrGmHW1c1UjvlR3sh6p3yvUosk2+wif/qnaWRhIIPRPtX9/ xXxOGXtXMGaHupk7DI+2jDlX/gxPHRt+zHSw3lXAMcefwuMnZcoHUCUPTak/Ki4M wROnXCI0yLNWcdTKIqsc5Q5OLcZ1vEfixw== -----END CERTIFICATE-----Generated at Sun Nov 24 23:10:22 2024 by rpki-client on console-ams.rpki-client.org