$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa File: 1da50353-f473-3027-9512-8f06238fa823.roa (raw, json) Hash identifier: 1+OUZRxtFYfLH6SItLWPDL7YCU5mL4uKQ61P3Rnc1Gc= Subject key identifier: 82:10:94:DC:62:0B:F1:56:8B:75:6B:6D:CF:EE:CB:8B:4B:B1:3A:71 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285847736CFB3CC084C55A5F258880 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa Signing time: Sun 06 Oct 2024 11:37:30 +0000 ROA not before: Sun 06 Oct 2024 11:37:30 +0000 ROA not after: Sat 04 Jan 2025 12:37:30 +0000 asID: 174 IP address blocks: 2001:49f0:d049::/48 maxlen: 48 2001:49f0:d04a::/48 maxlen: 48 2001:49f0:d077::/48 maxlen: 48 2001:49f0:d078::/48 maxlen: 48 2001:49f0:d07a::/48 maxlen: 48 2001:49f0:d07b::/48 maxlen: 48 2001:49f0:d07d::/48 maxlen: 48 2001:49f0:d07e::/48 maxlen: 48 2001:49f0:d07f::/48 maxlen: 48 2001:49f0:d081::/48 maxlen: 48 2001:49f0:d082::/48 maxlen: 48 2001:49f0:d083::/48 maxlen: 48 2001:49f0:d084::/48 maxlen: 48 2001:49f0:d087::/48 maxlen: 48 2001:49f0:d089::/48 maxlen: 48 2001:49f0:d08a::/48 maxlen: 48 2001:49f0:d08f::/48 maxlen: 48 2001:49f0:d097::/49 maxlen: 49 2001:49f0:d0a5::/48 maxlen: 48 2001:49f0:d0b2::/48 maxlen: 48 2001:49f0:d0b3::/48 maxlen: 48 2001:49f0:d0b4::/48 maxlen: 48 2001:49f0:d0b5::/48 maxlen: 48 2001:49f0:d0b6::/48 maxlen: 48 2001:49f0:d0d5::/48 maxlen: 48 2001:49f0:d0d6::/48 maxlen: 48 2001:49f0:d0d7::/48 maxlen: 48 2001:49f0:d0dd::/48 maxlen: 48 2001:49f0:d0e1::/48 maxlen: 48 2001:49f0:d0e2::/48 maxlen: 48 2001:49f0:d0e3::/48 maxlen: 48 2001:49f0:d105::/48 maxlen: 48 2001:49f0:d106::/48 maxlen: 48 2001:49f0:d107::/48 maxlen: 48 2001:49f0:d108::/48 maxlen: 48 2001:49f0:d109::/48 maxlen: 48 2001:49f0:d10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:6c:fb:3c:c0:84:c5:5a:5f:25:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 6 11:37:30 2024 GMT Not After : Jan 4 12:37:30 2025 GMT Subject: CN=f71cad21-ca99-4be2-b110-84dce019aee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:6f:0c:4e:67:e7:9b:e2:7b:c6:f2:12:e2: e9:fe:d4:ee:17:fa:24:2a:d1:6b:72:7c:2e:e5:71: d7:1c:72:96:65:91:16:6a:c9:ad:12:d8:54:a3:40: 03:e3:a2:98:17:d4:48:40:19:ae:9c:37:9d:78:82: 5f:c8:26:7d:7a:09:50:16:a6:63:53:26:d4:20:53: 0c:60:5c:c2:ee:0d:e4:2b:b3:96:1a:c3:44:ed:16: c7:45:3a:33:a4:6c:29:65:7b:d3:a7:4b:91:70:13: 53:e1:0e:07:fa:28:91:02:af:70:88:9b:e9:ef:05: fe:71:a2:5c:21:2e:81:ab:34:42:70:17:b9:e9:33: 66:84:e5:9e:79:96:b5:0b:6c:b1:b1:5f:41:ac:d4: 61:10:b5:82:3e:a0:2f:e8:7e:12:f3:a5:b5:c6:8c: 20:af:e1:fe:0a:1d:93:05:d6:62:05:60:ed:e5:4f: 51:30:9c:3d:4d:22:a3:6b:e7:72:4c:ee:26:a1:60: eb:7a:6e:d4:45:fe:37:79:f1:23:63:0e:93:13:fa: 87:e2:25:9f:ce:62:a1:d8:88:65:af:96:59:5f:2c: 63:33:44:64:80:b7:92:61:0a:52:1f:43:91:3a:69: 67:b4:79:fa:e1:1d:13:6b:6c:a5:0c:07:45:8d:a3: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:10:94:DC:62:0B:F1:56:8B:75:6B:6D:CF:EE:CB:8B:4B:B1:3A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1da50353-f473-3027-9512-8f06238fa823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff 2001:49f0:d07a::/47 2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff 2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff 2001:49f0:d087::/48 2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff 2001:49f0:d08f::/48 2001:49f0:d097::/49 2001:49f0:d0a5::/48 2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0dd::/48 2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff 2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:f2:de:8f:a3:06:66:51:1e:5b:e7:76:c9:02:80:59:62:87: c3:60:f0:9f:87:1c:13:a9:7a:44:65:0e:72:0a:1d:88:e6:81: 84:30:5b:89:2c:01:8e:84:aa:64:c1:71:0e:6f:a6:dc:f6:ef: 0f:94:90:c7:81:d2:53:32:7c:40:23:80:0b:48:da:84:74:0d: e1:98:34:96:4a:13:fb:fd:6d:79:10:e2:0e:f8:a5:d7:d5:79: 6e:c3:c7:de:c8:f0:71:2b:2e:15:f4:79:3b:29:8f:e5:b1:35: 85:41:10:e6:31:14:68:3d:bd:2f:99:c3:dd:d6:11:37:2b:52: 6f:2f:94:40:d1:af:67:7d:c4:29:a1:c8:59:bc:21:96:66:41: 39:c9:27:c5:3f:16:e6:e4:ed:1c:09:e9:03:af:e1:7b:6a:59: 89:9d:00:41:4f:ab:96:50:55:e1:1d:0b:ac:d0:d5:a7:48:41: 99:10:59:bf:c4:e1:c9:07:02:fc:7e:f4:3b:03:ef:b6:21:79: dc:d3:bd:de:28:ff:2d:84:62:ff:3b:70:1b:e2:fd:8f:fe:29: b1:b9:a2:8e:c9:29:2a:7a:31:86:0e:01:36:f0:32:93:5e:76: 53:96:35:88:a3:57:1d:fa:e6:b2:40:c5:15:11:fa:da:25:dd: c3:ff:95:7d -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEdzbPs8wITFWl8liIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTAwNjExMzczMFoXDTI1MDEwNDEyMzczMFowLzEtMCsGA1UEAxMk ZjcxY2FkMjEtY2E5OS00YmUyLWIxMTAtODRkY2UwMTlhZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUVvDE5n55vie8byEuLp/tTuF/okKtFrcnwu 5XHXHHKWZZEWasmtEthUo0AD46KYF9RIQBmunDedeIJfyCZ9eglQFqZjUybUIFMM YFzC7g3kK7OWGsNE7RbHRTozpGwpZXvTp0uRcBNT4Q4H+iiRAq9wiJvp7wX+caJc IS6BqzRCcBe56TNmhOWeeZa1C2yxsV9BrNRhELWCPqAv6H4S86W1xowgr+H+Ch2T BdZiBWDt5U9RMJw9TSKja+dyTO4moWDrem7URf43efEjYw6TE/qH4iWfzmKh2Ihl r5ZZXyxjM0RkgLeSYQpSH0OROmlntHn64R0Ta2ylDAdFjaPD/wIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFIIQlNxiC/FWi3Vrbc/uy4tLsTpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWRhNTAzNTMtZjQ3My0z MDI3LTk1MTItOGYwNjIzOGZhODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgACMIHrMBID BwAgAUnw0EkDBwAgAUnw0EowEgMHACABSfDQdwMHACABSfDQeAMHASABSfDQejAS AwcAIAFJ8NB9AwcHIAFJ8NAAMBIDBwAgAUnw0IEDBwAgAUnw0IQDBwAgAUnw0Icw EgMHACABSfDQiQMHACABSfDQigMHACABSfDQjwMIByABSfDQlwADBwAgAUnw0KUw EgMHASABSfDQsgMHACABSfDQtjASAwcAIAFJ8NDVAwcDIAFJ8NDQAwcAIAFJ8NDd MBIDBwAgAUnw0OEDBwIgAUnw0OAwEgMHACABSfDRBQMHACABSfDRCjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQDa8t6PowZmUR5b53bJAoBZYofDYPCfhxwTqXpEZQ5yCh2I5oGEMFuJLAGOhKpk wXEOb6bc9u8PlJDHgdJTMnxAI4ALSNqEdA3hmDSWShP7/W15EOIO+KXX1Xluw8fe yPBxKy4V9Hk7KY/lsTWFQRDmMRRoPb0vmcPd1hE3K1JvL5RA0a9nfcQpochZvCGW ZkE5ySfFPxbm5O0cCekDr+F7almJnQBBT6uWUFXhHQus0NWnSEGZEFm/xOHJBwL8 fvQ7A++2IXnc073eKP8thGL/O3Ab4v2P/imxuaKOySkqejGGDgE28DKTXnZTljWI o1cd+uayQMUVEfraJd3D/5V9 -----END CERTIFICATE-----Generated at Tue Oct 22 18:55:13 2024 by rpki-client on console-ams.rpki-client.org