$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa File: bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa (raw, json) Hash identifier: Iop2Jb3gN9zFVynAkZyWs+GdkTYs7wvnHHim9OE902U= Subject key identifier: 8B:4F:44:04:16:34:70:D9:F6:97:EC:04:B7:B9:2F:AD:EA:49:5A:B5 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F432858479AABE282A11FF1F02BEB3200 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 50842 IP address blocks: 2602:fb68:80::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:e2:82:a1:1f:f1:f0:2b:eb:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=d240dd67-d375-440d-8fc6-60ed00cc9ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:e6:59:59:36:da:7c:0d:ac:b9:c3:80:99: 85:61:3a:46:5c:54:3d:4c:67:a6:ce:52:5e:82:e2: e9:ba:f1:b3:e8:46:92:74:e2:7c:54:69:36:51:16: 8f:63:9f:48:bc:7f:c8:40:23:9a:67:55:9a:d9:70: ce:94:75:ed:a2:63:1f:4a:10:8c:83:1e:39:e3:d0: a2:44:6c:94:f2:7d:65:ab:39:88:79:a3:60:b3:0d: ed:d7:2b:3f:cc:33:f8:a7:64:d9:35:a3:cd:3f:55: c9:fa:c0:ef:92:79:08:07:f6:24:92:fc:44:07:1b: f9:41:21:b6:99:9b:f0:bc:68:07:26:49:43:ac:33: c4:81:e0:b5:9e:6a:9d:cb:f8:13:2e:b2:9c:45:3b: 79:02:e3:07:76:83:1c:6a:b4:e9:39:99:a9:a1:51: 40:53:86:76:90:91:33:89:58:43:14:94:da:57:e7: 41:5a:25:e2:7d:c5:01:f3:cc:2c:46:4e:68:ab:d3: 0b:05:75:17:c4:d3:0b:f8:48:c1:3d:88:89:91:34: 90:75:a5:11:20:8c:4b:4f:64:70:d9:a7:61:75:5e: 70:d8:37:4a:51:38:7f:96:57:e8:2b:00:e5:36:a3: a0:c6:6f:06:8f:58:df:8d:77:51:90:f8:9b:fb:67: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4F:44:04:16:34:70:D9:F6:97:EC:04:B7:B9:2F:AD:EA:49:5A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb68:80::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b0:b6:09:f1:60:33:c7:ab:e7:88:67:a7:b2:db:5b:f1:67: 4c:a6:06:72:b4:7a:26:8c:d6:b2:98:6b:85:96:77:ed:a9:55: ce:8b:90:1b:d6:12:78:9c:2a:62:51:b9:e4:22:72:98:0a:48: 57:73:c1:d6:69:02:16:b9:a4:83:f4:bf:83:38:d4:51:10:78: 9b:b5:31:b6:a9:c1:1a:dd:e7:98:29:92:f9:98:dc:e2:52:05: 3f:6c:4d:3c:46:ef:1e:0e:18:f9:82:e7:39:32:82:91:4e:51: 86:0a:5d:c2:36:44:93:6a:77:58:26:17:34:70:8f:f9:72:ba: a1:7b:3c:e6:48:e6:75:ea:30:e5:7d:9c:76:93:7d:14:98:f6: e7:7e:50:03:df:9d:61:31:ea:45:1c:9d:cd:36:23:50:7d:7a: 2a:0b:6e:93:21:c7:8b:c0:6c:0e:57:7e:21:c6:25:42:0b:d6: a6:ca:95:72:fe:e1:f1:25:4a:bb:97:d6:b7:0e:a3:d3:4f:c4: a0:bd:8d:82:75:b1:7d:e8:4d:99:86:68:7f:12:a8:c9:dc:e7: 84:21:7f:e7:fa:dc:b7:04:6c:39:dc:ee:99:5f:aa:63:b1:95: f8:1b:14:c0:fd:ca:95:ff:1e:f0:ae:79:db:34:af:d8:8f:ad: 8c:8a:8f:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeaq+KCoR/x8CvrMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk ZDI0MGRkNjctZDM3NS00NDBkLThmYzYtNjBlZDAwY2M5Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSPmWVk22nwNrLnDgJmFYTpGXFQ9TGemzlJe guLpuvGz6EaSdOJ8VGk2URaPY59IvH/IQCOaZ1Wa2XDOlHXtomMfShCMgx4549Ci RGyU8n1lqzmIeaNgsw3t1ys/zDP4p2TZNaPNP1XJ+sDvknkIB/YkkvxEBxv5QSG2 mZvwvGgHJklDrDPEgeC1nmqdy/gTLrKcRTt5AuMHdoMcarTpOZmpoVFAU4Z2kJEz iVhDFJTaV+dBWiXifcUB88wsRk5oq9MLBXUXxNML+EjBPYiJkTSQdaURIIxLT2Rw 2adhdV5w2DdKUTh/llfoKwDlNqOgxm8Gj1jfjXdRkPib+2eI1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFItPRAQWNHDZ9pfsBLe5L63qSVq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvYmM3ZGE3YTYtNDNjYi0z MjQ3LWE1YzYtNjA3NWMzNmVjNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6wtgnxYDPHq+eIZ6ey21vxZ0ymBnK0eiaM1rKYa4WWd+2pVc6L kBvWEnicKmJRueQicpgKSFdzwdZpAha5pIP0v4M41FEQeJu1MbapwRrd55gpkvmY 3OJSBT9sTTxG7x4OGPmC5zkygpFOUYYKXcI2RJNqd1gmFzRwj/lyuqF7POZI5nXq MOV9nHaTfRSY9ud+UAPfnWEx6kUcnc02I1B9eioLbpMhx4vAbA5XfiHGJUIL1qbK lXL+4fElSruX1rcOo9NPxKC9jYJ1sX3oTZmGaH8SqMnc54Qhf+f63LcEbDnc7plf qmOxlfgbFMD9ypX/HvCueds0r9iPrYyKj1k= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:28 2024 by rpki-client on console-ams.rpki-client.org