$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa File: 2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa (raw, json) Hash identifier: w0gL5K2bgfhRIIgL0J6qZVBkX7GC/vY602pPhWyZw2M= Subject key identifier: CA:47:42:43:39:4D:01:31:BB:0F:EA:BD:61:CA:AE:EB:DE:D1:C8:A8 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285847B3CC08772E0BCF1FF8A24580 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa Signing time: Tue 29 Oct 2024 13:00:40 +0000 ROA not before: Tue 29 Oct 2024 13:00:40 +0000 ROA not after: Mon 27 Jan 2025 14:00:40 +0000 asID: 5769 IP address blocks: 2607:fa4c::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:cc:08:77:2e:0b:cf:1f:f8:a2:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Oct 29 13:00:40 2024 GMT Not After : Jan 27 14:00:40 2025 GMT Subject: CN=19b42cfd-1724-4edd-9cf1-56e1abdbaacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:d5:c0:6f:ba:7c:db:74:5b:4e:82:98:d4: 6b:32:3f:bc:29:c6:cc:57:96:bb:d6:97:37:61:9a: 3c:3d:a5:15:c0:40:b2:e2:ca:c2:d4:d7:f4:c2:e0: 9e:13:83:cf:1e:fd:59:97:d1:d7:90:47:a2:84:ce: 1f:0d:32:9c:e0:a8:73:67:fd:60:65:32:f3:f5:d2: b0:1f:e2:ec:11:f0:c6:19:ca:b6:9e:e0:28:26:c2: 75:52:2e:6c:c7:f4:7c:7e:68:80:a9:d3:92:08:a5: 4a:e2:b3:d8:c8:d0:49:d4:3b:f0:c6:3b:cc:d1:b3: 61:6c:f8:89:91:09:68:54:a3:7a:47:a0:01:97:0e: f6:57:4d:20:29:65:77:64:a5:6a:f6:8c:f2:cb:de: 0b:dd:31:a8:93:8b:cb:85:fa:c9:54:a3:f9:0d:66: e2:ec:3c:18:c1:37:45:43:a6:89:96:9c:07:d3:57: a1:d9:e2:3f:f8:28:75:f0:80:80:00:cf:82:3b:cc: b5:35:1e:fb:b3:04:bb:5c:d9:ee:95:4d:3a:ab:89: 3f:df:7d:81:c9:13:fc:83:69:61:11:f8:31:b6:96: 68:4e:7d:85:34:69:0a:2c:9a:0e:6e:0b:a1:3d:30: d4:d2:1d:2d:80:70:27:2f:68:2a:81:5d:91:1a:b9: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:47:42:43:39:4D:01:31:BB:0F:EA:BD:61:CA:AE:EB:DE:D1:C8:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2aca9835-2362-3d49-9ba5-59ad5b0f72a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2607:fa4c::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:77:72:9c:65:7e:2b:e8:40:4f:a2:08:3d:5a:4e:27:f3:b2: 27:d3:97:8c:87:3a:c8:19:88:f3:b3:70:f8:bf:aa:37:c3:21: 68:18:88:a6:e9:06:3b:5e:a1:d6:ea:75:b6:8f:d2:8d:e5:f9: 94:7e:77:15:d3:de:3a:96:0f:6d:4d:9b:dc:d8:42:be:8f:fe: 32:7a:12:95:45:70:5f:4f:11:54:2f:58:57:df:42:50:61:3a: 34:74:44:90:ca:bd:0e:54:70:62:fb:d8:22:78:17:06:d9:f4: 3b:3b:15:f4:f2:fa:b4:f7:fd:74:9f:2a:4c:f1:01:fb:09:95: e8:56:f6:ab:d2:0c:7e:f4:87:b4:b3:5d:7e:d8:0d:bd:3c:c3: 42:59:86:7d:84:55:d8:a5:54:eb:09:c2:d8:9d:17:61:ac:ad: 6d:47:9c:1b:23:81:e0:6c:2a:22:d9:e4:cb:1f:44:aa:a7:a0: ed:bd:8b:4c:c2:ea:d0:27:71:ab:8d:56:01:ee:40:ea:5a:5f: 55:c1:99:b1:ef:bc:40:f4:c4:29:d4:8f:db:3e:82:39:4d:dd: 1c:62:b0:d6:9f:12:61:71:97:a4:d0:0a:c2:e6:0d:b5:ed:28: 83:f9:03:eb:9d:11:96:41:d3:da:04:9c:41:f3:df:3c:8b:22: 2d:4e:ed:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEezzAh3LgvPH/iiRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI0MTAyOTEzMDA0MFoXDTI1MDEyNzE0MDA0MFowLzEtMCsGA1UEAxMk MTliNDJjZmQtMTcyNC00ZWRkLTljZjEtNTZlMWFiZGJhYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS3VwG+6fNt0W06CmNRrMj+8KcbMV5a71pc3 YZo8PaUVwECy4srC1Nf0wuCeE4PPHv1Zl9HXkEeihM4fDTKc4KhzZ/1gZTLz9dKw H+LsEfDGGcq2nuAoJsJ1Ui5sx/R8fmiAqdOSCKVK4rPYyNBJ1DvwxjvM0bNhbPiJ kQloVKN6R6ABlw72V00gKWV3ZKVq9ozyy94L3TGok4vLhfrJVKP5DWbi7DwYwTdF Q6aJlpwH01eh2eI/+Ch18ICAAM+CO8y1NR77swS7XNnulU06q4k/332ByRP8g2lh EfgxtpZoTn2FNGkKLJoObguhPTDU0h0tgHAnL2gqgV2RGrkMdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpHQkM5TQExuw/qvWHKruve0cioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMmFjYTk4MzUtMjM2Mi0z ZDQ5LTliYTUtNTlhZDViMGY3MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6TDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbd3KcZX4r6EBPogg9Wk4n87In05eMhzrIGYjzs3D4v6o3wyFoGIim 6QY7XqHW6nW2j9KN5fmUfncV0946lg9tTZvc2EK+j/4yehKVRXBfTxFUL1hX30JQ YTo0dESQyr0OVHBi+9gieBcG2fQ7OxX08vq09/10nypM8QH7CZXoVvar0gx+9Ie0 s11+2A29PMNCWYZ9hFXYpVTrCcLYnRdhrK1tR5wbI4HgbCoi2eTLH0Sqp6DtvYtM wurQJ3GrjVYB7kDqWl9VwZmx77xA9MQp1I/bPoI5Td0cYrDWnxJhcZek0ArC5g21 7SiD+QPrnRGWQdPaBJxB8988iyItTu2V -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:37 2024 by rpki-client on console-fra.rpki-client.org