$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa File: 8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa (raw, json) Hash identifier: 8uv/1WsqQH1S39k7FXW/YFSYTm6djyZJ61QIZ1Ol31o= Subject key identifier: DA:BE:94:E3:9C:31:13:D1:AF:55:8F:BA:31:86:C7:54:B5:C7:AB:20 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584726D08EBC42FCBA14B719E780 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 16417 IP address blocks: 2620:101:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:8e:bc:42:fc:ba:14:b7:19:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=a540a271-6291-4b03-9fc8-a67004cf1a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:b8:a3:65:c2:90:7f:17:3f:f4:29:ff:4f: 45:04:b3:97:7d:94:75:98:ad:66:3f:0d:85:18:09: 36:42:c2:c6:16:20:22:ba:5c:54:8e:8a:95:e8:6d: fa:eb:b6:0d:1c:ad:56:37:23:f6:40:13:f4:38:53: b3:05:de:76:f8:d6:df:27:38:76:6c:9d:dd:d7:a2: cb:dc:f2:db:a8:5b:f2:23:8c:82:52:ab:54:f0:23: e4:37:89:d3:18:9d:7c:0f:15:c3:d8:70:a1:78:ae: c5:da:77:df:b9:ca:33:c0:79:b2:f3:98:54:d0:75: 9e:52:be:e5:b3:ee:b4:3e:3d:ec:48:0b:81:6a:78: 94:89:39:62:e3:9e:80:59:b9:b6:56:33:ab:9a:b3: f3:be:61:65:61:1e:5d:a7:3b:af:e8:f5:0d:96:19: f0:48:9e:19:ee:70:e2:22:a6:25:88:1c:89:f3:1e: c8:13:95:43:db:3b:20:f0:aa:31:68:b2:86:a1:fa: 19:5e:f6:a5:70:bd:5d:49:6b:78:19:f4:55:20:57: 54:40:7f:f6:de:d6:42:d2:2e:2f:c7:22:92:04:fc: 13:80:60:00:d3:da:11:48:ce:bb:13:62:a4:75:91: d9:33:aa:36:21:5a:63:cc:41:6f:23:b8:60:02:4d: 86:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BE:94:E3:9C:31:13:D1:AF:55:8F:BA:31:86:C7:54:B5:C7:AB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c4:7b:54:60:b7:30:28:0c:b2:88:85:8b:7d:ed:e1:50:c4: e6:7e:90:9a:5f:99:d4:43:2d:d2:ea:a5:ae:48:16:8f:52:5f: fb:3c:3d:56:e8:93:83:41:d2:c9:78:8f:e1:6c:43:05:53:26: 25:08:65:9a:c5:25:41:d0:61:f7:1f:9c:63:4c:e7:2f:e2:3e: c2:33:8d:1d:21:c8:6d:6b:19:48:97:05:dc:38:8a:3f:64:e1: e8:5c:32:b5:7e:ff:da:18:21:5e:85:7a:3e:3d:e0:1e:d7:1f: 07:85:7b:17:bb:11:5e:ab:a2:55:7f:8f:f5:60:1d:94:60:04: 96:b6:7b:c2:9f:71:9a:93:ba:df:19:e6:04:07:8c:24:a7:3e: c1:fb:44:cd:1c:c9:8e:4f:9a:78:ba:99:f6:8e:ce:4e:93:09: 3b:11:64:71:8c:1b:3f:b6:75:95:2b:38:4f:3d:06:fe:84:68: 28:16:bb:85:a2:55:0b:14:bb:81:06:a5:50:52:b2:3c:ac:8d: bc:b1:5e:9d:49:e2:8c:f0:d4:e4:5b:87:dd:15:36:d8:b4:66: ba:87:53:59:47:5d:6a:61:4b:09:07:68:43:22:79:85:80:04: af:f7:3a:c7:40:df:7c:11:6d:69:27:d2:2a:c4:01:24:32:66: 41:d2:92:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcm0I68Qvy6FLcZ54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk YTU0MGEyNzEtNjI5MS00YjAzLTlmYzgtYTY3MDA0Y2YxYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3da4o2XCkH8XP/Qp/09FBLOXfZR1mK1mPw2F GAk2QsLGFiAiulxUjoqV6G3667YNHK1WNyP2QBP0OFOzBd52+NbfJzh2bJ3d16LL 3PLbqFvyI4yCUqtU8CPkN4nTGJ18DxXD2HCheK7F2nffucozwHmy85hU0HWeUr7l s+60Pj3sSAuBaniUiTli456AWbm2VjOrmrPzvmFlYR5dpzuv6PUNlhnwSJ4Z7nDi IqYliByJ8x7IE5VD2zsg8KoxaLKGofoZXvalcL1dSWt4GfRVIFdUQH/23tZC0i4v xyKSBPwTgGAA09oRSM67E2KkdZHZM6o2IVpjzEFvI7hgAk2GwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNq+lOOcMRPRr1WPujGGx1S1x6sgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOGNlOWU2YmItYWMzNi0z Mjk1LTgzMWEtMDBlM2QxMDNlYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7Ee1RgtzAoDLKIhYt97eFQxOZ+kJpfmdRDLdLqpa5IFo9SX/s8 PVbok4NB0sl4j+FsQwVTJiUIZZrFJUHQYfcfnGNM5y/iPsIzjR0hyG1rGUiXBdw4 ij9k4ehcMrV+/9oYIV6Fej494B7XHweFexe7EV6rolV/j/VgHZRgBJa2e8KfcZqT ut8Z5gQHjCSnPsH7RM0cyY5Pmni6mfaOzk6TCTsRZHGMGz+2dZUrOE89Bv6EaCgW u4WiVQsUu4EGpVBSsjysjbyxXp1J4ozw1ORbh90VNti0ZrqHU1lHXWphSwkHaEMi eYWABK/3OsdA33wRbWkn0irEASQyZkHSkls= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org