$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa File: 28b58e9a-06a7-32cf-aa39-a353038ad25a.roa (raw, json) Hash identifier: 0LN9P+DX4v/pI465nLOcf6y5w/YO6WpA02vpFKejE5Y= Subject key identifier: 13:32:3A:A7:FA:97:D2:E7:00:F9:5B:AC:82:D5:F1:C2:3A:A4:56:91 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584789EBEE0648F5D6230203A740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa Signing time: Mon 14 Oct 2024 13:00:47 +0000 ROA not before: Mon 14 Oct 2024 13:00:47 +0000 ROA not after: Sun 12 Jan 2025 14:00:47 +0000 asID: 22394 IP address blocks: 2600:1010::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:89:eb:ee:06:48:f5:d6:23:02:03:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 14 13:00:47 2024 GMT Not After : Jan 12 14:00:47 2025 GMT Subject: CN=fa0e4c73-f32b-4c3b-9985-4b1cd2692d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:ae:7a:31:cb:d3:be:e1:35:52:4b:ab:a0: 98:ca:da:c4:13:fa:fc:2d:1e:a4:39:2e:3f:59:d3: ac:29:43:7f:7e:83:92:57:4e:f8:3e:37:40:b9:9d: 0b:b5:9e:b7:47:03:45:98:ae:67:a9:e7:31:6a:ef: 86:26:2a:bc:f9:15:9b:c5:29:ef:e2:c3:61:e5:3c: 18:67:ca:0f:45:50:38:90:56:7a:6a:a1:e2:cc:df: 7a:d8:a2:fc:f0:03:13:a9:10:a4:79:b0:b5:fc:fb: 09:1b:cd:2d:0f:1a:76:27:f2:4b:6a:8b:8a:da:72: b9:8b:42:0b:c7:71:c8:90:3e:20:de:7d:de:a3:c3: b9:5b:4b:d2:f7:9d:42:9f:c9:f3:6e:fc:6d:ac:18: 02:73:32:bc:c2:d6:68:80:d6:3c:e6:cf:ba:17:b0: 01:c2:d6:86:c1:f7:92:ac:df:4d:78:a9:ad:21:a2: 3d:44:07:86:cd:a3:42:be:47:ec:bf:68:4f:26:f8: 3a:b0:44:95:10:e3:e1:cb:50:e6:49:cc:0b:81:a9: a2:87:eb:a0:50:b1:09:9d:9a:ad:6f:bb:81:1a:5f: de:c3:09:d8:35:fa:26:7d:84:16:b6:aa:b3:ff:e6: 8c:cf:4d:f9:76:42:b8:42:4a:8f:c1:17:a4:d8:bf: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:3A:A7:FA:97:D2:E7:00:F9:5B:AC:82:D5:F1:C2:3A:A4:56:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1010::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bb:e3:e7:50:d9:87:df:14:d6:4e:db:fd:1b:ba:40:2d:cc: 6f:9d:a6:63:84:2b:46:34:20:21:a5:e1:93:68:7f:73:e2:68: d6:9d:d4:67:c4:19:2b:6e:5f:ae:1d:cc:11:b4:96:e0:5b:a4: a6:66:fc:45:c6:ef:cc:8f:16:43:2e:04:40:6a:41:25:8b:de: e8:fe:c6:2a:50:0e:31:12:53:86:21:bf:29:08:3c:3a:14:54: d3:57:20:04:e0:ba:57:4c:d2:a1:75:6b:eb:28:ad:5f:47:02: 13:83:76:f6:07:2d:c5:50:45:d6:33:db:27:d4:d3:fa:1f:c9: 13:b8:f7:0b:83:2e:a8:c2:5a:58:30:8c:06:55:4e:d1:48:5f: 57:d0:7c:b4:20:2e:2d:52:59:97:85:90:93:87:b3:28:32:03: 9e:cc:e7:07:ef:a9:fd:7f:26:97:1d:82:7f:d9:42:1e:77:40: 2c:63:40:12:88:e6:0b:e4:eb:4f:b6:00:03:64:63:97:c0:25: 42:26:de:ad:ef:0f:2f:c9:8e:4a:1f:b8:e5:3c:b0:76:0b:d2: ec:bb:b1:1b:5a:31:d1:35:3e:77:57:41:5b:43:06:13:f2:c0: b5:bc:16:65:8d:0f:33:43:d3:7c:e1:52:aa:fa:34:ed:e4:05: 4e:a6:f5:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeJ6+4GSPXWIwIDp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk ZmEwZTRjNzMtZjMyYi00YzNiLTk5ODUtNGIxY2QyNjkyZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu36uejHL077hNVJLq6CYytrEE/r8LR6kOS4/ WdOsKUN/foOSV074PjdAuZ0LtZ63RwNFmK5nqecxau+GJiq8+RWbxSnv4sNh5TwY Z8oPRVA4kFZ6aqHizN962KL88AMTqRCkebC1/PsJG80tDxp2J/JLaouK2nK5i0IL x3HIkD4g3n3eo8O5W0vS951Cn8nzbvxtrBgCczK8wtZogNY85s+6F7ABwtaGwfeS rN9NeKmtIaI9RAeGzaNCvkfsv2hPJvg6sESVEOPhy1DmScwLgamih+ugULEJnZqt b7uBGl/ewwnYNfomfYQWtqqz/+aMz035dkK4QkqPwRek2L/2QQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBMyOqf6l9LnAPlbrILV8cI6pFaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhiNThlOWEtMDZhNy0z MmNmLWFhMzktYTM1MzAzOGFkMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgAQEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvu+PnUNmH3xTWTtv9G7pALcxvnaZjhCtGNCAhpeGTaH9z4mjWndRn xBkrbl+uHcwRtJbgW6SmZvxFxu/MjxZDLgRAakEli97o/sYqUA4xElOGIb8pCDw6 FFTTVyAE4LpXTNKhdWvrKK1fRwITg3b2By3FUEXWM9sn1NP6H8kTuPcLgy6owlpY MIwGVU7RSF9X0Hy0IC4tUlmXhZCTh7MoMgOezOcH76n9fyaXHYJ/2UIed0AsY0AS iOYL5OtPtgADZGOXwCVCJt6t7w8vyY5KH7jlPLB2C9Lsu7EbWjHRNT53V0FbQwYT 8sC1vBZljQ8zQ9N84VKq+jTt5AVOpvW8 -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:17 2024 by rpki-client on console-ams.rpki-client.org