$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa File: 2909e0dc-bd8d-38dc-bae9-335626f3845e.roa (raw, json) Hash identifier: WThFoWbat65/r5GGJXZwAcVt29z4RHXHwNrUpCk/jJQ= Subject key identifier: 2C:36:3A:CB:16:FC:41:3B:E8:97:1A:7A:D3:C9:38:BD:8C:E1:E0:0D Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F43285847DA9303F2C7D7BF5A55938980 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa Signing time: Tue 12 Nov 2024 10:22:23 +0000 ROA not before: Tue 12 Nov 2024 10:22:23 +0000 ROA not after: Mon 10 Feb 2025 10:22:23 +0000 asID: 36007 IP address blocks: 2604:bc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:da:93:03:f2:c7:d7:bf:5a:55:93:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Nov 12 10:22:23 2024 GMT Not After : Feb 10 10:22:23 2025 GMT Subject: CN=ffbe3623-c0e0-49ef-b430-eeecc5687f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:56:11:c7:06:cd:9d:34:e2:6f:92:37:38: e4:ed:3d:8c:86:ec:9e:bf:91:33:e4:09:a5:66:4e: a5:87:fd:5b:bc:8f:ab:3b:8e:62:23:7c:67:5a:b5: 26:2d:b9:bd:a5:9d:2c:50:fb:97:dc:fa:a2:a4:9d: 71:3f:b6:bd:37:59:42:f2:ea:d5:72:4e:21:e6:38: 52:5d:f6:9b:60:87:25:a7:e3:38:8c:da:58:7a:16: 92:3d:85:f8:0b:fe:16:8a:17:32:a3:38:4a:dc:8a: 7b:37:10:c8:bb:fd:70:4c:28:cc:7e:48:66:b1:be: 54:27:3e:59:c3:02:12:7b:a9:2a:91:3c:b7:5c:0e: 0e:be:0a:34:d3:f8:5b:cf:55:9c:95:78:16:97:52: 21:6d:85:b3:cd:f4:6e:c3:7f:6c:d8:c8:f6:94:6e: dd:fb:6f:da:30:12:61:67:44:f3:27:25:0b:f0:ac: ae:52:5a:ce:75:4c:3b:b2:74:21:25:39:a0:30:40: 75:f7:0c:1c:79:00:ad:e9:88:e4:0d:62:55:c4:43: a5:a4:f3:5f:ca:3f:2c:20:d5:e7:f5:4e:77:bf:b2: 85:dd:58:72:6f:ad:ae:6e:45:c3:40:13:bc:94:17: 82:4e:68:83:84:71:fd:f5:a6:2c:8e:3b:c9:da:d2: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:36:3A:CB:16:FC:41:3B:E8:97:1A:7A:D3:C9:38:BD:8C:E1:E0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv6: 2604:bc0:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ba:36:96:8d:12:66:91:a0:6a:6a:c3:46:1a:a6:91:f8:76: 72:9d:7e:46:5a:4d:73:9e:4a:01:a1:57:8b:df:3a:10:f6:d3: df:0b:8c:77:47:1f:6e:d6:f0:46:e5:bb:09:d8:31:44:3f:a8: 39:52:f2:7c:c6:29:0d:c8:34:4e:7e:7f:61:27:1c:8e:2d:4d: a9:76:cd:c8:26:f6:44:46:d0:ef:87:a2:c7:95:bf:c1:62:29: 73:20:9b:57:a4:7a:1b:9e:aa:b7:00:a3:5d:2b:c5:bb:84:39: 80:9b:5a:be:1d:cb:65:67:fc:d4:1a:ba:92:48:7e:7c:45:cb: 69:4b:d8:66:50:33:cc:7b:34:18:a8:68:b2:af:55:e0:40:7a: cd:13:98:8d:49:4c:56:78:e6:e1:e6:57:68:b6:9d:77:17:b1: a1:84:05:94:01:01:19:e7:3b:c0:b3:a0:50:a7:29:02:19:ba: 03:f5:09:5c:6f:4f:44:79:59:d6:63:9b:90:bf:3c:29:4a:bb: 9b:5c:79:2e:8d:00:df:04:f6:e2:67:e5:6d:ad:ad:84:fe:e0: 84:5a:93:0b:80:d5:14:c3:fb:9e:7b:89:ca:d4:41:40:33:d3: f5:41:ce:b0:8d:f9:e7:21:d5:86:be:55:77:b2:8e:64:f7:93: 5e:8e:50:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfakwPyx9e/WlWTiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI0MTExMjEwMjIyM1oXDTI1MDIxMDEwMjIyM1owLzEtMCsGA1UEAxMk ZmZiZTM2MjMtYzBlMC00OWVmLWI0MzAtZWVlY2M1Njg3ZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl5WEccGzZ004m+SNzjk7T2Mhuyev5Ez5Aml Zk6lh/1bvI+rO45iI3xnWrUmLbm9pZ0sUPuX3PqipJ1xP7a9N1lC8urVck4h5jhS XfabYIclp+M4jNpYehaSPYX4C/4WihcyozhK3Ip7NxDIu/1wTCjMfkhmsb5UJz5Z wwISe6kqkTy3XA4Ovgo00/hbz1WclXgWl1IhbYWzzfRuw39s2Mj2lG7d+2/aMBJh Z0TzJyUL8KyuUlrOdUw7snQhJTmgMEB19wwceQCt6YjkDWJVxEOlpPNfyj8sINXn 9U53v7KF3Vhyb62ubkXDQBO8lBeCTmiDhHH99aYsjjvJ2tLLyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCw2OssW/EE76JcaetPJOL2M4eANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMjkwOWUwZGMtYmQ4ZC0z OGRjLWJhZTktMzM1NjI2ZjM4NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQLwAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFu6NpaNEmaRoGpqw0YappH4dnKdfkZaTXOeSgGhV4vfOhD2098L jHdHH27W8EbluwnYMUQ/qDlS8nzGKQ3INE5+f2EnHI4tTal2zcgm9kRG0O+HoseV v8FiKXMgm1ekehueqrcAo10rxbuEOYCbWr4dy2Vn/NQaupJIfnxFy2lL2GZQM8x7 NBioaLKvVeBAes0TmI1JTFZ45uHmV2i2nXcXsaGEBZQBARnnO8CzoFCnKQIZugP1 CVxvT0R5WdZjm5C/PClKu5tceS6NAN8E9uJn5W2trYT+4IRakwuA1RTD+557icrU QUAz0/VBzrCN+ech1Ya+VXeyjmT3k16OUOQ= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org