$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa File: d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa (raw, json) Hash identifier: gBhpQQOHSNG7BI2SD/XgCvzMbz/NbBvgbtGBF3MBTpw= Subject key identifier: 2A:BF:92:58:1E:9D:58:45:A5:EA:15:58:D3:F4:45:CD:47:A6:3D:9D Certificate issuer: /CN=58eef8b8-39c9-495c-b889-44faff13a8aa Certificate serial: 010D0C9F43285847A5D6A409227A1305AC475080 Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 397016 IP address blocks: 2606:aa40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:a4:09:22:7a:13:05:ac:47:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=37f26c01-098a-49e4-9ac7-8e9365f93bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:00:f8:6d:08:2a:ea:21:c6:13:26:94:d5: 9d:bf:cc:7a:12:1c:35:7c:85:10:45:33:1c:43:02: 03:74:8c:02:87:db:db:6d:d6:a4:32:9d:90:82:bf: f5:9e:82:5d:ea:3e:fd:1f:cc:2d:fe:5c:da:4f:4c: ae:47:e8:d7:1d:e2:bc:fe:10:a0:a3:a6:62:a0:3e: 15:d1:e2:cb:3b:1a:b5:f1:c9:83:01:15:b9:df:6a: 08:04:f0:12:9a:40:81:83:8b:f0:bd:8d:10:d8:ca: 45:17:ce:75:5a:f7:e6:7c:29:f5:c7:1c:70:d1:b1: 8e:45:af:9f:61:3f:5c:4b:2c:05:bd:35:19:d5:ff: db:fe:f2:44:19:55:11:99:b9:30:8d:63:69:2e:61: 18:37:05:a2:99:94:4d:63:74:20:08:f8:88:f8:68: 72:63:2e:1c:d2:de:4e:e0:47:28:f3:af:68:f5:23: cc:8a:85:5f:2c:af:84:23:fe:2b:d8:7e:7a:40:96: a4:79:4c:ab:a7:27:07:66:e5:1c:e1:57:29:30:47: 80:7b:b0:b1:cf:d4:dd:86:67:61:f2:82:76:60:b8: 16:bf:bc:95:22:fa:cc:f4:21:b6:a0:49:db:f3:bd: c0:99:4c:8b:ea:e3:e0:96:0f:3a:b6:1c:71:85:7c: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BF:92:58:1E:9D:58:45:A5:EA:15:58:D3:F4:45:CD:47:A6:3D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/d7c0a3e5-ce7d-36ad-b1be-ece4e08b6d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl X509v3 Authority Key Identifier: keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer sbgp-ipAddrBlock: critical IPv6: 2606:aa40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:49:36:1b:a0:05:6e:fc:b4:17:11:8c:08:4b:5b:ad:3d:aa: 97:a7:6e:0c:f1:5c:15:ed:12:ea:f9:7b:3a:af:3a:bb:69:03: 72:ff:0c:54:c5:cc:9c:d2:d5:44:7d:00:e2:0b:d7:6a:9c:a6: ab:0d:d4:31:5d:58:13:2b:47:ac:30:48:f7:ba:9e:bb:1d:1b: bb:bd:9e:6b:ee:97:e1:bc:60:a7:b3:47:6c:3f:e1:5c:3c:d0: 15:f1:84:48:8c:52:d2:b4:c3:7d:19:7e:7a:29:1e:49:7e:60: b2:30:5a:60:2c:5e:f4:c0:69:ee:31:b7:7e:50:9c:15:1f:8a: a4:da:87:1f:67:18:f8:73:49:ac:4b:d3:6c:af:3e:e2:21:9c: 4a:e9:99:43:79:b3:92:41:66:c0:bd:65:af:cd:53:c1:cc:d8: c7:b9:69:57:97:7f:56:0c:40:4b:2d:0d:50:85:47:0c:fb:7f: 30:50:a8:a3:39:94:00:ee:c9:ba:3a:b5:53:cd:0f:58:81:aa: 97:32:ca:1f:89:3d:6c:96:64:1b:ea:6d:01:9c:ae:6b:6d:1c: 27:e6:f1:ce:fb:50:a1:24:16:0b:44:d3:e0:9c:a5:df:b7:51: 8d:df:40:15:66:91:0d:08:80:c0:fd:da:c6:67:07:37:4e:de: 25:01:6d:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEel1qQJInoTBaxHUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh OGFhMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MzdmMjZjMDEtMDk4YS00OWU0LTlhYzctOGU5MzY1ZjkzYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NQA+G0IKuohxhMmlNWdv8x6Ehw1fIUQRTMc QwIDdIwCh9vbbdakMp2Qgr/1noJd6j79H8wt/lzaT0yuR+jXHeK8/hCgo6ZioD4V 0eLLOxq18cmDARW532oIBPASmkCBg4vwvY0Q2MpFF851WvfmfCn1xxxw0bGORa+f YT9cSywFvTUZ1f/b/vJEGVURmbkwjWNpLmEYNwWimZRNY3QgCPiI+GhyYy4c0t5O 4Eco869o9SPMioVfLK+EI/4r2H56QJakeUyrpycHZuUc4VcpMEeAe7Cxz9Tdhmdh 8oJ2YLgWv7yVIvrM9CG2oEnb873AmUyL6uPglg86thxxhXwBHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCq/klgenVhFpeoVWNP0Rc1Hpj2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvZDdjMGEzZTUtY2U3ZC0z NmFkLWIxYmUtZWNlNGUwOGI2ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4 ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh ZmYxM2E4YWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaqQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNSTYboAVu/LQXEYwIS1utPaqXp24M8VwV7RLq+Xs6rzq7aQNy/wxU xcyc0tVEfQDiC9dqnKarDdQxXVgTK0esMEj3up67HRu7vZ5r7pfhvGCns0dsP+Fc PNAV8YRIjFLStMN9GX56KR5JfmCyMFpgLF70wGnuMbd+UJwVH4qk2ocfZxj4c0ms S9Nsrz7iIZxK6ZlDebOSQWbAvWWvzVPBzNjHuWlXl39WDEBLLQ1QhUcM+38wUKij OZQA7sm6OrVTzQ9YgaqXMsofiT1slmQb6m0BnK5rbRwn5vHO+1ChJBYLRNPgnKXf t1GN30AVZpENCIDA/drGZwc3Tt4lAW1t -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:03 2024 by rpki-client on console-fra.rpki-client.org