$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa File: 8578d02e-2574-3397-9850-67ab5fdce8b7.roa (raw, json) Hash identifier: xDLKqAdgkd1bVok4aa78EqXuGpK8H2Ny4PumuxMI/OI= Subject key identifier: 4E:7F:3A:4F:A2:FE:29:E2:A1:48:DF:9F:36:68:20:DA:F7:BB:1E:2F Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F432858476B364343B7049D3136264D80 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa Signing time: Thu 03 Oct 2024 13:00:41 +0000 ROA not before: Thu 03 Oct 2024 13:00:41 +0000 ROA not after: Wed 01 Jan 2025 14:00:41 +0000 asID: 3477 IP address blocks: 2601:a002::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:36:43:43:b7:04:9d:31:36:26:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Oct 3 13:00:41 2024 GMT Not After : Jan 1 14:00:41 2025 GMT Subject: CN=3ac2ef2a-e1d2-462e-9e22-bbebbfb323d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:a2:05:d3:aa:95:4c:e7:f6:74:fc:60:54: 23:1d:99:30:b4:0b:c9:19:70:83:04:fc:bc:8d:99: 2b:ea:4b:d3:79:49:97:42:0b:cc:d7:0f:2e:81:1f: 8b:9d:94:ee:73:54:53:65:bd:c4:d9:0f:66:aa:9a: 1a:10:a8:c4:f9:71:ee:02:1c:7f:4f:af:45:a3:ef: cc:4a:ba:24:d0:eb:44:cb:5a:0c:46:e8:e4:44:25: 83:e5:52:05:cd:9f:22:7f:48:8f:fa:c0:bd:e1:f1: d9:aa:f8:f5:e8:16:e5:43:2b:41:88:cd:ef:0e:a0: 18:c3:10:fe:e8:75:52:7d:cf:68:1c:df:dd:31:f6: 09:f2:1d:a9:37:9d:4e:cc:c1:f2:04:5a:1a:f9:8e: f5:ea:64:c3:02:95:85:85:15:a9:f2:7b:ad:54:11: b2:62:ce:a0:6a:3f:2d:f9:29:dc:30:bb:45:84:42: a8:8f:24:65:3a:a2:b2:5e:df:04:fe:a5:f8:df:d2: 72:8c:cb:c4:14:8e:45:f2:2d:91:11:73:ce:cb:de: bd:33:67:a5:7c:c2:d1:dd:27:bd:65:69:44:b3:64: df:7d:1f:e5:0d:08:4f:c3:22:fc:2e:bc:42:0c:07: 9e:7e:eb:59:b9:c2:69:a3:76:c5:d8:60:db:0b:1f: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7F:3A:4F:A2:FE:29:E2:A1:48:DF:9F:36:68:20:DA:F7:BB:1E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a002::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cd:54:d2:cc:92:37:d1:f0:52:3c:ea:4a:c3:97:a8:89:1e: d1:2e:f3:2e:21:76:61:92:e6:55:dc:68:b1:28:1e:5d:87:d1: 50:68:5c:55:5a:5b:51:75:55:bc:d8:68:a6:18:2d:cb:53:ff: ad:8f:64:5a:02:b9:08:25:fb:3a:66:1b:ab:31:d0:b3:3a:22: bd:91:ba:8e:1f:96:f3:35:73:60:3c:7d:6c:7c:77:e8:85:42: 98:e2:93:cb:39:26:11:3d:78:ce:27:91:65:2e:04:5b:bd:19: 6a:c6:c4:d9:f9:c9:2c:af:9e:54:08:4c:8e:7a:e5:2a:f8:81: b8:18:69:62:da:a5:2e:f1:8b:b2:90:6a:2e:14:4b:75:6d:31: 1f:22:ff:ca:f2:16:bc:26:ab:2e:fc:6e:80:32:3b:d7:ba:8e: 8c:4d:4c:a2:ae:b5:d7:d4:06:76:52:12:6b:34:c2:15:64:8e: 55:ab:4e:19:11:0f:94:60:09:10:38:7a:19:73:4f:75:a7:83: 77:8f:85:91:e2:9b:a1:9b:08:cb:f6:57:27:7a:d4:dc:98:30: 0e:bc:37:14:2a:87:85:7f:5e:63:5f:3a:25:39:35:2c:9e:1b: a5:11:bd:90:8a:5e:61:f6:ee:5c:f3:68:35:05:00:ec:29:0f: c8:36:73:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdrNkNDtwSdMTYmTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk M2FjMmVmMmEtZTFkMi00NjJlLTllMjItYmJlYmJmYjMyM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs82iBdOqlUzn9nT8YFQjHZkwtAvJGXCDBPy8 jZkr6kvTeUmXQgvM1w8ugR+LnZTuc1RTZb3E2Q9mqpoaEKjE+XHuAhx/T69Fo+/M Srok0OtEy1oMRujkRCWD5VIFzZ8if0iP+sC94fHZqvj16BblQytBiM3vDqAYwxD+ 6HVSfc9oHN/dMfYJ8h2pN51OzMHyBFoa+Y716mTDApWFhRWp8nutVBGyYs6gaj8t +SncMLtFhEKojyRlOqKyXt8E/qX439JyjMvEFI5F8i2REXPOy969M2elfMLR3Se9 ZWlEs2TffR/lDQhPwyL8LrxCDAeefutZucJpo3bF2GDbCx+0uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE5/Ok+i/inioUjfnzZoINr3ux4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvODU3OGQwMmUtMjU3NC0z Mzk3LTk4NTAtNjdhYjVmZGNlOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgAjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBazVTSzJI30fBSPOpKw5eoiR7RLvMuIXZhkuZV3GixKB5dh9FQaFxV WltRdVW82GimGC3LU/+tj2RaArkIJfs6ZhurMdCzOiK9kbqOH5bzNXNgPH1sfHfo hUKY4pPLOSYRPXjOJ5FlLgRbvRlqxsTZ+cksr55UCEyOeuUq+IG4GGli2qUu8Yuy kGouFEt1bTEfIv/K8ha8Jqsu/G6AMjvXuo6MTUyirrXX1AZ2UhJrNMIVZI5Vq04Z EQ+UYAkQOHoZc091p4N3j4WR4puhmwjL9lcnetTcmDAOvDcUKoeFf15jXzolOTUs nhulEb2Qil5h9u5c82g1BQDsKQ/INnOi -----END CERTIFICATE-----Generated at Mon Nov 25 02:49:14 2024 by rpki-client on console-ams.rpki-client.org