$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa File: 7d91392f-83f2-35b7-b65b-48348b34691a.roa (raw, json) Hash identifier: BOj72pTCBZ6a9z2wSY+2gEjhqW2oBwIvdvvbhqOU/Mc= Subject key identifier: D4:4E:B6:3F:54:1C:7D:62:E5:96:63:02:8E:CE:5A:06:AE:9C:97:88 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F432858476B36436AB3DA97682F8D86A0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 3477 IP address blocks: 2601:a005::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:43:6a:b3:da:97:68:2f:8d:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=f83b1177-aa9d-416e-8498-7af863a0d00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:03:bc:4a:f6:75:ce:64:0a:f7:08:08:30:21: 4e:b1:d0:3d:73:49:f9:e4:cc:b8:7c:f4:41:1b:df: 38:e2:ae:20:0e:64:00:af:e1:de:eb:1a:79:d6:fa: cd:cd:5b:8d:e9:f9:51:d7:94:18:59:0a:01:52:44: 86:2d:7f:fe:d4:69:71:d3:50:79:39:ee:59:59:33: 06:54:12:a8:8c:88:4f:3e:1b:ae:28:12:3e:33:7a: 50:f7:50:b6:4d:e8:04:c8:92:60:34:7f:0e:df:39: 91:4a:a4:fa:13:c9:3c:7d:78:3b:43:d2:13:c7:80: ad:a1:e1:70:55:e0:76:84:41:2e:97:db:ec:94:b8: 54:5d:be:26:31:d4:57:e3:d8:af:ca:8b:f1:94:da: 07:89:dd:d2:7d:97:d1:76:45:4d:c0:1d:7b:75:3e: 7c:0b:cf:a7:22:ba:77:d0:04:c7:fa:6c:60:a2:e6: 79:e5:a4:cb:b0:f5:61:6c:07:fd:24:b2:92:c9:12: 45:87:11:26:b7:0c:e1:1e:50:86:27:c4:c1:a7:90: f2:9a:93:9a:a7:13:69:9b:00:17:d3:d4:d5:ff:79: 75:da:23:1a:ed:b1:ab:49:2a:0b:71:38:84:37:2d: 39:3b:cc:2e:55:f4:97:eb:33:2a:89:06:72:44:33: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4E:B6:3F:54:1C:7D:62:E5:96:63:02:8E:CE:5A:06:AE:9C:97:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a005::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:62:23:74:bf:4f:83:92:bf:63:13:7c:22:65:c6:d5:85:47: c5:6a:4c:bc:d0:f5:75:93:2f:0c:f8:eb:fd:dd:c9:56:a0:b4: 59:c1:43:ae:bf:ad:55:eb:81:18:d5:ac:18:8e:a1:b9:3a:15: 31:32:50:70:fe:c5:96:3d:11:73:a7:9b:e9:8e:e2:62:06:97: be:43:e0:25:43:d8:a7:25:da:10:8e:64:cb:1e:47:93:13:42: 82:02:40:41:61:12:34:0b:d3:56:64:b5:de:72:03:8a:b0:3d: b6:e9:38:df:dc:9f:86:78:f0:a4:50:45:f9:82:1a:e5:27:fc: f9:ba:72:37:ee:f3:13:6d:6c:19:22:57:2a:6a:2f:e6:28:9e: f8:f8:71:c5:a4:b1:f3:c0:d0:ee:1f:d2:27:e7:19:25:6d:f0: 4a:91:29:e6:04:c4:8f:e7:e8:0c:5e:5f:a6:af:15:83:6d:a2: 6a:d6:ac:58:83:f8:99:8b:cf:58:0b:3a:b0:37:cb:65:79:82: 8a:14:30:1e:1c:66:67:9a:70:00:66:61:74:ed:cb:7b:c4:74: bd:0f:5b:4e:4f:2b:aa:0c:78:2d:62:88:e6:83:fb:54:9a:01: ba:e9:4f:71:51:57:cb:d9:3c:26:96:a2:98:3a:d2:f7:af:07: 99:ef:9d:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdrNkNqs9qXaC+NhqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjgzYjExNzctYWE5ZC00MTZlLTg0OTgtN2FmODYzYTBkMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAO8SvZ1zmQK9wgIMCFOsdA9c0n55My4fPRB G9844q4gDmQAr+He6xp51vrNzVuN6flR15QYWQoBUkSGLX/+1Glx01B5Oe5ZWTMG VBKojIhPPhuuKBI+M3pQ91C2TegEyJJgNH8O3zmRSqT6E8k8fXg7Q9ITx4CtoeFw VeB2hEEul9vslLhUXb4mMdRX49ivyovxlNoHid3SfZfRdkVNwB17dT58C8+nIrp3 0ATH+mxgouZ55aTLsPVhbAf9JLKSyRJFhxEmtwzhHlCGJ8TBp5DympOapxNpmwAX 09TV/3l12iMa7bGrSSoLcTiENy05O8wuVfSX6zMqiQZyRDOtuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNROtj9UHH1i5ZZjAo7OWgaunJeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvN2Q5MTM5MmYtODNmMi0z NWI3LWI2NWItNDgzNDhiMzQ2OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfYiN0v0+Dkr9jE3wiZcbVhUfFaky80PV1ky8M+Ov93clWoLRZwUOu v61V64EY1awYjqG5OhUxMlBw/sWWPRFzp5vpjuJiBpe+Q+AlQ9inJdoQjmTLHkeT E0KCAkBBYRI0C9NWZLXecgOKsD226Tjf3J+GePCkUEX5ghrlJ/z5unI37vMTbWwZ Ilcqai/mKJ74+HHFpLHzwNDuH9In5xklbfBKkSnmBMSP5+gMXl+mrxWDbaJq1qxY g/iZi89YCzqwN8tleYKKFDAeHGZnmnAAZmF07ct7xHS9D1tOTyuqDHgtYojmg/tU mgG66U9xUVfL2TwmlqKYOtL3rweZ752F -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:07 2024 by rpki-client on console-fra.rpki-client.org