$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa File: 1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa (raw, json) Hash identifier: ENplEtYUUhX3TpGJJxCsyej+hsSQW2yYr35CGSBorDQ= Subject key identifier: 88:72:7B:99:69:01:D0:72:53:74:C5:B9:7A:EB:63:9E:93:61:F1:A5 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847C4E16DDB00C941BF3848E840 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa Signing time: Mon 04 Nov 2024 15:52:36 +0000 ROA not before: Mon 04 Nov 2024 15:52:36 +0000 ROA not after: Sun 02 Feb 2025 15:52:36 +0000 asID: 1239 IP address blocks: 2001:49f0:d13d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c4:e1:6d:db:00:c9:41:bf:38:48:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 4 15:52:36 2024 GMT Not After : Feb 2 15:52:36 2025 GMT Subject: CN=08df7954-8d70-4a8f-a25d-f1db303d6f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:8a:80:37:0e:cf:6a:c8:11:e2:c9:84:e7: 87:d2:52:63:6c:c5:73:66:5b:a8:25:92:74:69:6b: 19:8f:90:4d:67:7c:d4:f1:6a:69:18:f0:6d:ed:7b: a1:78:df:97:ff:4a:c5:a2:15:f4:c8:ed:ab:9f:3a: 8c:62:bc:99:22:18:3b:99:8b:00:d6:08:3f:e6:d2: 8e:43:d5:78:78:a6:83:03:0a:ee:18:de:ee:96:43: c3:73:12:49:ed:e1:a4:28:d1:8b:a6:5c:48:71:7d: cf:cb:f3:77:9c:21:9b:af:d7:c7:d8:04:07:c5:9b: 33:2b:41:e4:d6:7c:c0:e0:2a:03:ee:eb:be:a3:5f: c8:08:3d:b2:7a:e7:53:95:85:e7:1b:2d:f2:02:f6: a1:80:75:e7:95:03:00:11:6e:0f:c4:02:5d:f8:79: e7:39:b8:a3:80:a7:d2:93:57:c4:b6:9b:a2:73:5b: cb:95:8c:8a:f7:70:fa:d3:98:2b:73:31:35:be:58: 6b:39:8f:c3:1a:12:bd:96:4e:88:36:e8:e5:5d:54: 0c:b4:73:06:dd:d4:a9:0d:b6:f1:7f:c4:d2:a7:99: 07:87:77:94:56:1b:cc:db:8a:3b:22:c4:a4:72:7f: cb:23:1e:a1:63:80:5d:4e:6a:57:3a:a1:e0:63:c5: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:72:7B:99:69:01:D0:72:53:74:C5:B9:7A:EB:63:9E:93:61:F1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1d51f65f-4003-3b7d-80b2-50d69f9c5969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d13d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ce:ac:6f:44:78:2c:5e:4a:4e:c4:db:d7:cc:8e:ab:13:e3: ca:52:52:8f:7f:a4:00:66:fd:6c:2c:ec:bf:2e:74:14:ef:02: 9e:4f:59:22:ad:7f:a6:84:d9:28:e4:c6:41:3e:f2:c6:a9:32: c4:c1:35:f2:41:e0:e8:66:dc:ff:5d:43:f4:ec:a1:e7:fc:76: 97:89:cc:05:93:f3:10:cd:00:df:f9:9f:b4:f9:a8:d4:ec:8c: bf:e4:20:05:72:5c:50:48:30:40:24:f3:aa:34:ae:33:94:84: 10:a7:a7:c4:50:ba:50:6e:9b:c4:15:a9:37:77:c5:d8:91:84: de:3e:53:6d:55:d9:6b:34:c4:f5:ba:bf:2c:2f:e8:b3:65:cb: 84:f4:07:5f:51:63:71:61:39:3d:98:f9:61:9b:1b:f0:77:cf: 63:27:8f:48:75:e8:f9:fa:e8:c2:d7:09:bc:80:12:91:bd:36: 72:c9:5d:ee:ed:94:9b:0c:44:c1:a7:53:36:21:2a:7e:0d:55: f8:0e:97:3f:3b:86:cf:3c:19:44:7b:cc:96:89:05:be:47:c4: aa:21:dc:18:11:ce:1a:c1:5b:e9:89:ae:de:29:63:de:29:e5: 9d:cf:a3:73:df:cf:11:f4:0c:22:f7:78:f1:1e:30:47:6f:32: ac:af:ce:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfE4W3bAMlBvzhI6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTEwNDE1NTIzNloXDTI1MDIwMjE1NTIzNlowLzEtMCsGA1UEAxMk MDhkZjc5NTQtOGQ3MC00YThmLWEyNWQtZjFkYjMwM2Q2ZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwaKgDcOz2rIEeLJhOeH0lJjbMVzZluoJZJ0 aWsZj5BNZ3zU8WppGPBt7XuheN+X/0rFohX0yO2rnzqMYryZIhg7mYsA1gg/5tKO Q9V4eKaDAwruGN7ulkPDcxJJ7eGkKNGLplxIcX3Py/N3nCGbr9fH2AQHxZszK0Hk 1nzA4CoD7uu+o1/ICD2yeudTlYXnGy3yAvahgHXnlQMAEW4PxAJd+HnnObijgKfS k1fEtpuic1vLlYyK93D605grczE1vlhrOY/DGhK9lk6INujlXVQMtHMG3dSpDbbx f8TSp5kHh3eUVhvM24o7IsSkcn/LIx6hY4BdTmpXOqHgY8Ud9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhye5lpAdByU3TFuXrrY56TYfGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWQ1MWY2NWYtNDAwMy0z YjdkLTgwYjItNTBkNjlmOWM1OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJ8NE9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7OrG9EeCxeSk7E29fMjqsT48pSUo9/pABm/Wws7L8udBTvAp5P WSKtf6aE2SjkxkE+8sapMsTBNfJB4Ohm3P9dQ/Tsoef8dpeJzAWT8xDNAN/5n7T5 qNTsjL/kIAVyXFBIMEAk86o0rjOUhBCnp8RQulBum8QVqTd3xdiRhN4+U21V2Ws0 xPW6vywv6LNly4T0B19RY3FhOT2Y+WGbG/B3z2Mnj0h16Pn66MLXCbyAEpG9NnLJ Xe7tlJsMRMGnUzYhKn4NVfgOlz87hs88GUR7zJaJBb5HxKoh3BgRzhrBW+mJrt4p Y94p5Z3Po3PfzxH0DCL3ePEeMEdvMqyvzkY= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:06 2024 by rpki-client on console-ams.rpki-client.org