$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/336a881d-84e9-3a29-adc9-b8e63239a63d.roa File: 336a881d-84e9-3a29-adc9-b8e63239a63d.roa (raw, json) Hash identifier: c/LK2+NRdXc50jLMFFpKSbwfbxouFwiG0q5cUnLtADU= Subject key identifier: 41:D4:31:6C:68:63:80:EB:16:B5:CE:A2:A9:32:AA:D3:4E:88:60:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D76AD74421D44768EF39380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/336a881d-84e9-3a29-adc9-b8e63239a63d.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 6167 IP address blocks: 2600:1008:b160::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:ad:74:42:1d:44:76:8e:f3:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=7bc09839-3f13-4080-a22e-7cc1ef3de549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:30:3b:8d:c7:74:f2:85:e8:46:9b:a4:78: 73:f7:f7:2e:a7:fa:6d:3b:ab:12:a5:2f:27:a4:e1: f8:7f:b7:ee:0b:c2:38:5d:ba:5f:54:c6:b0:76:5a: 61:70:a6:14:41:89:58:87:c6:5e:1f:34:eb:eb:5a: 3a:29:e4:43:ca:38:31:bb:a7:90:ca:f2:73:34:02: 6d:5e:e2:9b:e1:f2:b3:57:c5:52:ab:14:f4:39:8f: bd:e0:a1:28:41:17:f7:3a:76:61:cf:8e:a1:ad:e3: 0a:d6:b1:f2:9e:ec:07:b3:1e:39:ae:df:9f:e2:4f: 8e:0f:e6:09:49:9a:53:5f:09:1c:1f:0f:0d:fd:f4: 59:05:74:e1:32:27:fd:0a:d5:32:c1:d2:80:78:3a: 34:5f:5a:92:b1:0f:08:5a:32:66:f6:5f:1e:23:fb: 30:28:f9:3d:29:08:3b:92:04:9e:37:c6:4d:be:a6: 5d:54:67:0c:ad:fc:9e:10:31:40:a2:2a:f5:c3:ca: 8a:d5:b6:4a:7d:c3:cd:b4:fd:a3:63:13:f9:91:1b: da:00:04:94:b4:7b:4f:48:13:bb:d4:3e:9b:5c:4f: 2f:56:3c:a0:35:40:5f:c0:c7:90:ff:70:ed:f2:44: c1:fb:01:c5:b5:29:43:52:bf:dd:55:e9:fd:cf:06: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:31:6C:68:63:80:EB:16:B5:CE:A2:A9:32:AA:D3:4E:88:60:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/336a881d-84e9-3a29-adc9-b8e63239a63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:b160::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:aa:78:8d:af:28:1a:64:de:e8:c7:af:75:b3:81:5c:88:00: b7:f4:7a:b9:58:c9:66:eb:df:31:48:69:50:f1:03:4a:78:46: 48:bc:53:ef:37:9c:35:6d:5a:70:75:d5:02:c9:e6:d4:5b:5a: 82:0f:92:a4:b7:c9:07:03:02:99:71:ab:8d:57:11:82:32:13: a3:f6:2c:8f:0e:f6:c7:e3:e7:08:60:54:8d:95:42:41:92:6d: 63:28:02:53:e9:b4:57:fc:62:06:eb:62:77:28:15:b4:2c:33: 75:df:10:72:25:2c:1f:da:0d:25:f9:fb:07:60:fc:84:93:62: 5a:18:5f:aa:ae:7a:a8:92:b5:c8:f9:cb:7a:16:79:ba:2f:63: af:d9:62:8f:25:d4:a4:85:64:a5:fe:72:ff:60:12:11:80:b9: 01:17:e2:d7:b1:65:55:b3:85:21:b5:a9:98:fd:0c:ff:5e:b5: 5d:60:bb:fb:9e:f4:d7:52:c7:4a:0f:a2:0a:35:0a:92:97:a8: 1f:3b:46:e0:da:3a:25:eb:92:99:b3:2d:95:b8:64:d8:ac:59: da:a3:4d:64:6b:a2:e8:60:e8:be:be:34:cd:af:14:17:2a:9f: d1:0c:1d:b7:8e:1c:d6:b1:26:8a:0f:5e:5e:2e:05:d8:e6:e5: 2b:77:b1:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddq10Qh1Edo7zk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk N2JjMDk4MzktM2YxMy00MDgwLWEyMmUtN2NjMWVmM2RlNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3gwO43HdPKF6EabpHhz9/cup/ptO6sSpS8n pOH4f7fuC8I4XbpfVMawdlphcKYUQYlYh8ZeHzTr61o6KeRDyjgxu6eQyvJzNAJt XuKb4fKzV8VSqxT0OY+94KEoQRf3OnZhz46hreMK1rHynuwHsx45rt+f4k+OD+YJ SZpTXwkcHw8N/fRZBXThMif9CtUywdKAeDo0X1qSsQ8IWjJm9l8eI/swKPk9KQg7 kgSeN8ZNvqZdVGcMrfyeEDFAoir1w8qK1bZKfcPNtP2jYxP5kRvaAASUtHtPSBO7 1D6bXE8vVjygNUBfwMeQ/3Dt8kTB+wHFtSlDUr/dVen9zwbckQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEHUMWxoY4DrFrXOoqkyqtNOiGC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzM2YTg4MWQtODRlOS0z YTI5LWFkYzktYjhlNjMyMzlhNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLFg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJSqeI2vKBpk3ujHr3WzgVyIALf0erlYyWbr3zFIaVDxA0p4Rki8 U+83nDVtWnB11QLJ5tRbWoIPkqS3yQcDAplxq41XEYIyE6P2LI8O9sfj5whgVI2V QkGSbWMoAlPptFf8YgbrYncoFbQsM3XfEHIlLB/aDSX5+wdg/ISTYloYX6queqiS tcj5y3oWebovY6/ZYo8l1KSFZKX+cv9gEhGAuQEX4texZVWzhSG1qZj9DP9etV1g u/ue9NdSx0oPogo1CpKXqB87RuDaOiXrkpmzLZW4ZNisWdqjTWRrouhg6L6+NM2v FBcqn9EMHbeOHNaxJooPXl4uBdjm5St3sak= -----END CERTIFICATE-----Generated at Tue Oct 22 20:17:37 2024 by rpki-client on console-fra.rpki-client.org