$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa File: cfcc50c5-85a1-3171-9f0f-8655231e6995.roa (raw, json) Hash identifier: gSnevWai105D6QBql06bo4IoC2zAuxhDNjwrZO0amY8= Subject key identifier: A9:7D:A5:CE:07:7A:44:9A:A4:B0:68:0F:4E:72:60:41:F3:97:F4:A0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858479D7696E98F65A6451C609000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 6167 IP address blocks: 2600:1002:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:96:e9:8f:65:a6:45:1c:60:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=e6bb4f49-3fba-463f-9dd1-49c1b9007c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:45:a3:f9:aa:ca:51:35:02:82:a6:07:92: 17:e5:95:a1:75:7a:bc:90:dd:74:d3:55:7a:ef:c7: ce:6c:be:2c:2d:f5:e2:1d:4d:db:af:6e:3f:75:a7: 80:96:6b:57:4b:8f:5d:bc:02:c7:ad:7f:8c:20:c2: cf:f5:fd:19:48:fb:dd:fc:ab:91:d7:01:02:65:ea: 47:2d:1d:1a:f7:1a:13:39:b9:9c:28:c4:be:da:fb: 3a:20:02:c5:1f:40:61:2b:41:5c:6f:bc:c0:6b:75: f1:9f:83:58:62:aa:bd:fe:21:4c:c9:be:7f:4e:71: 90:a2:eb:3e:db:d4:7e:c2:4a:91:8d:65:22:79:81: 97:04:39:6b:56:22:76:fd:3e:9b:e1:38:a0:00:ac: 62:9b:d1:43:e3:e9:2f:9a:13:d8:07:70:07:3c:89: d9:ed:88:ef:c3:09:6e:d5:56:8b:12:ce:d4:0c:7e: a3:d2:43:5f:b5:6b:46:16:d5:39:26:d1:6e:07:89: a3:41:10:d7:8e:84:a3:ac:f4:a5:83:ef:e2:cd:e3: 8d:ae:d6:44:48:af:97:fe:d7:22:e2:a6:ba:33:18: ec:c5:47:b2:39:e5:6b:27:a5:d0:42:f3:5e:9b:70: 9b:32:43:21:4a:fd:87:b1:5a:78:49:fa:21:06:12: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7D:A5:CE:07:7A:44:9A:A4:B0:68:0F:4E:72:60:41:F3:97:F4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1002:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:82:9c:ee:9f:13:74:b3:92:09:0a:5b:6e:eb:19:bd:7d:fd: 22:dd:11:65:5a:9c:73:11:fc:f4:03:3a:9a:e9:51:0c:e8:c5: 94:27:0b:59:7d:89:47:d5:83:73:75:9a:cf:5e:35:ec:05:0a: 35:3e:c8:e8:45:10:1d:57:67:51:e8:a8:9a:63:91:0c:0d:4c: a4:69:4f:72:b1:ef:67:79:37:3c:24:d3:49:93:30:90:6d:38: a5:02:fc:5f:b9:86:4e:c6:e6:ed:70:bf:1e:00:61:a4:86:b6: 3b:ed:6c:a6:d4:7d:47:4a:78:e8:d8:cc:3c:c9:69:cc:11:5e: da:ed:5f:44:ad:3d:3b:25:c5:0e:22:66:29:db:e9:59:2e:a8: 8a:f5:d9:93:13:4d:8d:8e:fc:20:8c:09:30:08:99:3d:e1:79: 8f:0c:cd:79:11:15:ef:ee:b7:2e:d5:03:78:5b:a5:f2:94:77: d4:03:cb:92:cf:24:31:12:a5:80:e7:40:3c:0f:15:bd:77:c3: 46:18:15:d0:78:47:8b:b2:14:b3:c4:6e:8a:2c:ca:b1:68:91: 82:df:62:57:6a:91:19:4f:b7:c0:85:9d:f1:57:85:ab:82:8a: 30:9d:52:f3:24:7d:50:d0:91:25:bd:41:5a:b4:f0:e7:79:d8: b8:aa:82:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeddpbpj2WmRRxgkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTZiYjRmNDktM2ZiYS00NjNmLTlkZDEtNDljMWI5MDA3Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw9Fo/mqylE1AoKmB5IX5ZWhdXq8kN1001V6 78fObL4sLfXiHU3br24/daeAlmtXS49dvALHrX+MIMLP9f0ZSPvd/KuR1wECZepH LR0a9xoTObmcKMS+2vs6IALFH0BhK0Fcb7zAa3Xxn4NYYqq9/iFMyb5/TnGQous+ 29R+wkqRjWUieYGXBDlrViJ2/T6b4TigAKxim9FD4+kvmhPYB3AHPInZ7Yjvwwlu 1VaLEs7UDH6j0kNftWtGFtU5JtFuB4mjQRDXjoSjrPSlg+/izeONrtZESK+X/tci 4qa6MxjsxUeyOeVrJ6XQQvNem3CbMkMhSv2HsVp4SfohBhJRqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKl9pc4HekSapLBoD05yYEHzl/SgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2ZjYzUwYzUtODVhMS0z MTcxLTlmMGYtODY1NTIzMWU2OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQArAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqCnO6fE3SzkgkKW27rGb19/SLdEWVanHMR/PQDOprpUQzoxZQn C1l9iUfVg3N1ms9eNewFCjU+yOhFEB1XZ1HoqJpjkQwNTKRpT3Kx72d5Nzwk00mT MJBtOKUC/F+5hk7G5u1wvx4AYaSGtjvtbKbUfUdKeOjYzDzJacwRXtrtX0StPTsl xQ4iZinb6VkuqIr12ZMTTY2O/CCMCTAImT3heY8MzXkRFe/uty7VA3hbpfKUd9QD y5LPJDESpYDnQDwPFb13w0YYFdB4R4uyFLPEboosyrFokYLfYldqkRlPt8CFnfFX hauCijCdUvMkfVDQkSW9QVq08Od52Liqgko= -----END CERTIFICATE-----Generated at Tue Oct 22 20:18:21 2024 by rpki-client on console-fra.rpki-client.org