$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89df20a6-ace3-37e5-b230-192ae5eee438.roa File: 89df20a6-ace3-37e5-b230-192ae5eee438.roa (raw, json) Hash identifier: osNFt7aOo21vWrR7c2LQIPpeVBkSOKq5NX3kxw25DTY= Subject key identifier: 0C:A1:12:89:7D:5B:92:B9:1E:1F:FF:62:EC:6B:69:25:48:A7:C5:DC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D769EB2E696ED286A496A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89df20a6-ace3-37e5-b230-192ae5eee438.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 6167 IP address blocks: 2600:1004:b170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:9e:b2:e6:96:ed:28:6a:49:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=7b675d4c-1124-4b8f-9551-348b5df641a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ab:c9:a3:c3:06:d2:b2:d6:49:a2:07:c5:34: a1:9d:7d:b4:40:c3:0f:91:a9:a7:dd:cd:f4:4e:b5: f9:f1:d6:3b:ab:16:1e:3f:1b:e6:03:b9:c0:da:6a: 0c:95:30:0f:82:22:9b:90:75:e3:21:31:09:82:c8: cb:ba:53:33:b6:a8:69:3e:f1:6a:bd:08:a7:9e:70: 0b:bd:7b:d5:f3:2b:de:c2:35:47:d3:a2:60:40:6f: 49:8d:99:5c:01:72:b9:18:90:d1:95:e9:db:6d:47: 7d:6d:3e:9d:c8:c4:b9:9e:20:e0:10:5c:b7:ae:54: 00:e8:b1:e9:9c:ee:55:df:cf:e4:2e:62:49:52:f7: 86:72:2b:ff:ac:b5:e9:77:a2:3d:4d:88:21:0a:d7: d8:44:ab:0f:39:34:79:37:b1:75:0e:b2:de:8a:9c: e7:ea:74:99:ff:48:7b:a7:3e:28:cd:10:f9:a6:52: eb:33:46:45:71:14:92:99:47:73:8e:9f:c1:0e:7a: 23:15:29:30:a9:15:b9:4d:df:dd:59:1f:94:7c:67: 62:7c:87:66:fb:ed:76:91:0c:b6:73:02:79:95:1e: ed:8e:fe:cc:eb:f4:2f:58:e1:0f:5d:73:f8:ab:8c: 8d:12:cf:ea:8a:78:e2:3c:c5:41:44:18:21:ef:85: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A1:12:89:7D:5B:92:B9:1E:1F:FF:62:EC:6B:69:25:48:A7:C5:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89df20a6-ace3-37e5-b230-192ae5eee438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:b170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:99:83:c0:dd:91:b8:48:e2:aa:d7:b3:66:9d:8c:88:79:90: 1f:22:2d:fd:08:6f:7f:cd:ec:48:03:84:72:7e:81:ff:7a:de: 18:32:94:0a:d6:78:db:77:a7:f5:6b:ba:52:52:5c:3e:de:46: 09:31:0a:4b:e4:4a:bf:e7:aa:da:34:34:19:c4:7d:d2:86:66: 5c:e5:9b:b6:3c:e1:a5:16:10:46:43:3d:b8:ad:a5:88:1d:3c: 84:49:ac:3c:36:2a:da:48:8d:7d:2e:ee:92:8d:c5:40:cb:3a: 93:fb:6f:44:25:d8:19:64:ef:34:3b:e6:e8:e1:8f:22:3f:4a: 98:d4:a9:cc:b3:7e:29:21:b6:5c:dc:4c:2e:b2:ce:a1:2d:f4: 3a:23:38:22:fc:58:f9:80:0a:7a:64:03:17:4b:a1:83:42:05: dc:da:20:a1:1a:52:6a:44:56:81:55:ae:64:da:bd:23:11:43: 2c:2a:93:28:aa:96:c0:11:65:71:88:d0:17:90:b6:5b:55:51: 4a:3b:8d:e7:2d:ee:1f:92:32:b5:c5:09:ec:49:8d:bf:13:6f: a1:a1:01:f9:ef:37:a4:9f:07:ef:67:72:b1:8b:44:62:2d:03: 74:98:01:26:c5:e8:2e:05:9b:d5:2f:54:e5:70:74:39:2e:41: 82:52:4b:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddp6y5pbtKGpJaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk N2I2NzVkNGMtMTEyNC00YjhmLTk1NTEtMzQ4YjVkZjY0MWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgavJo8MG0rLWSaIHxTShnX20QMMPkamn3c30 TrX58dY7qxYePxvmA7nA2moMlTAPgiKbkHXjITEJgsjLulMztqhpPvFqvQinnnAL vXvV8yvewjVH06JgQG9JjZlcAXK5GJDRlenbbUd9bT6dyMS5niDgEFy3rlQA6LHp nO5V38/kLmJJUveGciv/rLXpd6I9TYghCtfYRKsPOTR5N7F1DrLeipzn6nSZ/0h7 pz4ozRD5plLrM0ZFcRSSmUdzjp/BDnojFSkwqRW5Td/dWR+UfGdifIdm++12kQy2 cwJ5lR7tjv7M6/QvWOEPXXP4q4yNEs/qinjiPMVBRBgh74VW/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAyhEol9W5K5Hh//YuxraSVIp8XcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODlkZjIwYTYtYWNlMy0z N2U1LWIyMzAtMTkyYWU1ZWVlNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCZg8DdkbhI4qrXs2adjIh5kB8iLf0Ib3/N7EgDhHJ+gf963hgy lArWeNt3p/VrulJSXD7eRgkxCkvkSr/nqto0NBnEfdKGZlzlm7Y84aUWEEZDPbit pYgdPIRJrDw2KtpIjX0u7pKNxUDLOpP7b0Ql2Blk7zQ75ujhjyI/SpjUqcyzfikh tlzcTC6yzqEt9DojOCL8WPmACnpkAxdLoYNCBdzaIKEaUmpEVoFVrmTavSMRQywq kyiqlsARZXGI0BeQtltVUUo7ject7h+SMrXFCexJjb8Tb6GhAfnvN6SfB+9ncrGL RGItA3SYASbF6C4Fm9UvVOVwdDkuQYJSS28= -----END CERTIFICATE-----Generated at Thu Nov 21 23:41:38 2024 by rpki-client on console-ams.rpki-client.org