$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa File: 12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa (raw, json) Hash identifier: THQpqn9hvSWTpqspfE0oPFRXrK95lwcwV4MgOL7yhJs= Subject key identifier: D3:38:43:9B:09:82:0B:E6:3C:59:78:19:ED:DB:C0:2E:DC:7C:C2:D6 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F43285847924BDB99166D77ADC55B3D00 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa Signing time: Thu 17 Oct 2024 13:00:42 +0000 ROA not before: Thu 17 Oct 2024 13:00:42 +0000 ROA not after: Wed 15 Jan 2025 14:00:42 +0000 asID: 14618 IP address blocks: 2620:116:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:92:4b:db:99:16:6d:77:ad:c5:5b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 17 13:00:42 2024 GMT Not After : Jan 15 14:00:42 2025 GMT Subject: CN=73fc0fed-c188-4a3e-9743-5072780b0645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:71:cb:d5:7b:01:4f:fd:b4:06:65:7c:87:72: fe:99:03:6e:27:1c:06:40:50:4f:c9:96:3b:6c:f9: 84:93:f5:e1:8e:2b:92:55:31:ff:d6:4f:54:cc:11: b3:2b:33:de:bd:bd:ca:d5:38:27:89:76:cb:ba:fe: b3:0f:f4:17:67:5e:5d:fe:6b:f6:f1:31:e0:e1:d8: 50:e3:64:65:31:4a:dc:83:46:8e:7a:91:9b:9e:63: 4a:90:fd:40:c4:d4:36:08:9d:ac:ac:54:dc:70:18: dc:b8:58:32:cd:00:01:61:0e:3c:da:e3:21:66:7f: a3:4a:ed:0f:56:a1:22:83:ea:1e:62:91:3e:6a:19: bf:48:d9:74:bf:3e:8e:a1:d7:7d:13:af:1a:f9:87: 81:40:70:71:4a:09:69:e8:ca:4d:04:6c:0f:3c:08: 66:aa:aa:7d:02:8f:ab:55:db:a8:67:37:23:21:ae: 6c:bc:62:9f:c6:13:18:f4:92:51:13:a6:2b:cc:7b: 86:69:d3:da:b5:d5:78:70:80:42:29:8c:46:ed:cc: a4:df:ca:6c:07:22:4e:4b:69:91:0d:6c:84:40:a9: 00:1a:da:2f:6f:98:5a:b1:25:c1:25:e3:14:21:ae: d5:ae:41:e2:69:56:1a:73:48:67:b7:ab:ff:fb:28: d3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:38:43:9B:09:82:0B:E6:3C:59:78:19:ED:DB:C0:2E:DC:7C:C2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/12fd7a2a-fa17-3ec2-83e3-17b185260ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8e:26:64:e1:f9:d9:17:27:0a:4b:06:73:b0:78:19:40:ec: 75:06:21:d4:5b:72:9d:b6:53:69:08:f4:cd:c1:d5:a4:52:ea: e6:ae:8c:26:f5:f1:3a:bd:96:4e:94:b7:a6:c9:c5:97:0e:15: 7d:ff:d3:ae:21:66:35:c9:cf:17:54:b2:19:7a:88:d6:44:39: 22:32:50:a1:d3:07:40:99:52:58:a0:d8:06:eb:6f:ec:e9:d9: 8b:d3:9b:15:eb:73:32:c7:7e:c0:20:8a:6e:c7:8d:af:b8:ff: fd:21:37:26:5d:d3:36:ad:4e:00:c0:9a:47:37:3c:63:dd:d8: 29:7f:94:dd:94:27:d2:8e:e8:dc:ae:18:d6:25:71:92:8f:15: 7b:2d:c5:14:08:d8:22:c8:f1:96:51:8d:c3:59:c7:16:28:0e: 05:bb:3d:2a:f6:e0:f1:89:47:85:85:0d:4a:49:ea:ff:03:e3: 62:41:09:bd:ba:df:c6:05:e0:33:cd:9f:e2:53:06:0c:18:05: 49:d4:88:4b:6d:b3:cd:23:af:0e:8e:d0:3b:bb:13:83:dc:fa: fb:09:f0:9c:cb:be:48:e6:4d:50:36:64:7c:98:d9:58:fd:0b: 22:5e:43:93:f7:aa:4c:c4:d7:0d:e3:11:ee:81:fa:85:18:f3: cc:76:21:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeSS9uZFm13rcVbPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk NzNmYzBmZWQtYzE4OC00YTNlLTk3NDMtNTA3Mjc4MGIwNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknHL1XsBT/20BmV8h3L+mQNuJxwGQFBPyZY7 bPmEk/XhjiuSVTH/1k9UzBGzKzPevb3K1TgniXbLuv6zD/QXZ15d/mv28THg4dhQ 42RlMUrcg0aOepGbnmNKkP1AxNQ2CJ2srFTccBjcuFgyzQABYQ482uMhZn+jSu0P VqEig+oeYpE+ahm/SNl0vz6Oodd9E68a+YeBQHBxSglp6MpNBGwPPAhmqqp9Ao+r VduoZzcjIa5svGKfxhMY9JJRE6YrzHuGadPatdV4cIBCKYxG7cyk38psByJOS2mR DWyEQKkAGtovb5hasSXBJeMUIa7VrkHiaVYac0hnt6v/+yjTYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNM4Q5sJggvmPFl4Ge3bwC7cfMLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMTJmZDdhMmEtZmExNy0z ZWMyLTgzZTMtMTdiMTg1MjYwZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2OJmTh+dkXJwpLBnOweBlA7HUGIdRbcp22U2kI9M3B1aRS6uau jCb18Tq9lk6Ut6bJxZcOFX3/064hZjXJzxdUshl6iNZEOSIyUKHTB0CZUlig2Abr b+zp2YvTmxXrczLHfsAgim7Hja+4//0hNyZd0zatTgDAmkc3PGPd2Cl/lN2UJ9KO 6NyuGNYlcZKPFXstxRQI2CLI8ZZRjcNZxxYoDgW7PSr24PGJR4WFDUpJ6v8D42JB Cb2638YF4DPNn+JTBgwYBUnUiEtts80jrw6O0Du7E4Pc+vsJ8JzLvkjmTVA2ZHyY 2Vj9CyJeQ5P3qkzE1w3jEe6B+oUY88x2IWQ= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:08 2024 by rpki-client on console-ams.rpki-client.org