$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4652994e-67bf-3996-b0f4-45e676421927.roa File: 4652994e-67bf-3996-b0f4-45e676421927.roa (raw, json) Hash identifier: gDaTmDgDXNJDuzVpdN1Tc27P2IfOzLnsPr3M2+qDB3w= Subject key identifier: 7A:06:EF:96:70:54:2B:DE:16:05:35:D1:A5:9B:14:0B:DD:7A:61:B8 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F43285847C7749055BEF9D83A681EC920 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4652994e-67bf-3996-b0f4-45e676421927.roa Signing time: Tue 05 Nov 2024 14:00:38 +0000 ROA not before: Tue 05 Nov 2024 14:00:38 +0000 ROA not after: Mon 03 Feb 2025 14:00:38 +0000 asID: 13778 IP address blocks: 2602:282::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c7:74:90:55:be:f9:d8:3a:68:1e:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Nov 5 14:00:38 2024 GMT Not After : Feb 3 14:00:38 2025 GMT Subject: CN=67ab4c13-716a-4b8d-a557-ce3b0c4f966c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:63:06:a9:ad:87:c1:07:42:08:58:45:7f: ee:ec:42:8f:72:e9:2c:92:37:83:31:73:a9:f5:74: c6:d0:b7:8b:23:c7:a8:45:43:f2:97:10:3d:d6:c6: 0b:fb:21:ed:51:9f:9c:62:bd:cc:01:1e:0c:39:5c: 26:52:82:73:4d:fb:6b:a7:86:b8:8f:b3:79:57:ba: b6:81:d8:0d:48:f8:6a:f4:77:69:cf:ec:2f:cd:fc: 35:2b:0f:ac:d1:c3:bf:a6:cf:e3:26:c7:13:0e:e1: e9:c5:96:53:fb:2b:c1:fc:b0:6d:3f:d1:f1:1b:80: 2d:c3:25:df:4a:c0:8b:29:ae:eb:1f:62:7c:e4:78: 16:6a:17:56:c9:10:e6:60:00:7e:71:c7:35:9b:87: bf:f6:46:ae:55:33:d0:13:d9:25:c7:3b:ae:f5:e0: d7:e2:9d:b0:d9:f5:8f:25:5f:82:eb:4d:96:54:31: 78:de:db:0e:f1:54:9d:49:4d:1a:4f:a9:28:00:e3: a1:53:ab:62:13:bb:e9:1f:66:38:47:4b:3c:ee:e9: 4d:53:66:1d:f6:10:3e:40:55:e5:e2:be:c0:bf:d5: 33:ef:59:fa:51:5a:fa:bc:a4:0b:d2:b8:45:9f:bf: 7d:3c:d9:d5:e0:2e:ca:b6:94:7d:83:b1:61:7e:ae: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:06:EF:96:70:54:2B:DE:16:05:35:D1:A5:9B:14:0B:DD:7A:61:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4652994e-67bf-3996-b0f4-45e676421927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:282::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:59:a6:d9:60:36:cd:6d:51:27:d9:84:5d:d7:d2:1a:f5:eb: 8a:38:fe:d9:d5:05:85:a4:21:e9:5c:2f:28:22:7d:83:1a:95: c2:68:bd:3c:08:59:0f:05:1b:d0:a0:70:b5:05:99:1c:40:87: e5:e2:cf:19:83:0a:7b:c9:ec:7e:5c:74:e5:fc:59:67:bd:ea: 36:a6:cf:75:ac:47:42:ac:37:4e:6b:9f:6a:b2:b2:ea:b4:3a: d4:d6:b2:ac:a6:2a:94:e2:1d:74:ec:02:e4:25:f0:c8:d9:c2: 5f:20:27:fb:86:b5:d0:1e:56:9f:49:57:cb:f4:a4:8a:45:53: 8a:3a:13:45:f6:bc:62:31:29:62:f1:0c:92:ff:fc:66:04:c0: 72:84:f7:39:1f:c7:0d:4f:ea:bf:3a:8b:85:d1:a7:9d:5e:67: ef:f4:80:39:8a:cd:0e:da:b4:71:9f:b2:fe:04:ca:e2:a8:76: 96:9b:f2:ed:e7:ea:5b:37:7d:60:46:89:aa:c0:48:2a:3e:1d: 96:22:8c:08:43:8c:73:ea:69:2a:69:76:b7:51:c3:2a:00:9c: bd:0d:1e:e9:7b:81:52:50:a5:a4:98:81:9c:ab:1a:cf:55:b8: 4a:2a:84:dc:a5:56:5f:98:06:3f:3b:56:8f:ff:f0:c2:dd:d2: 88:7f:80:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfHdJBVvvnYOmgeySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI0MTEwNTE0MDAzOFoXDTI1MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NjdhYjRjMTMtNzE2YS00YjhkLWE1NTctY2UzYjBjNGY5NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm09jBqmth8EHQghYRX/u7EKPcukskjeDMXOp 9XTG0LeLI8eoRUPylxA91sYL+yHtUZ+cYr3MAR4MOVwmUoJzTftrp4a4j7N5V7q2 gdgNSPhq9Hdpz+wvzfw1Kw+s0cO/ps/jJscTDuHpxZZT+yvB/LBtP9HxG4AtwyXf SsCLKa7rH2J85HgWahdWyRDmYAB+ccc1m4e/9kauVTPQE9klxzuu9eDX4p2w2fWP JV+C602WVDF43tsO8VSdSU0aT6koAOOhU6tiE7vpH2Y4R0s87ulNU2Yd9hA+QFXl 4r7Av9Uz71n6UVr6vKQL0rhFn799PNnV4C7KtpR9g7Fhfq6WrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHoG75ZwVCveFgU10aWbFAvdemG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNDY1Mjk5NGUtNjdiZi0z OTk2LWIwZjQtNDVlNjc2NDIxOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICgjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjWabZYDbNbVEn2YRd19Ia9euKOP7Z1QWFpCHpXC8oIn2DGpXCaL08 CFkPBRvQoHC1BZkcQIfl4s8Zgwp7yex+XHTl/Flnveo2ps91rEdCrDdOa59qsrLq tDrU1rKspiqU4h107ALkJfDI2cJfICf7hrXQHlafSVfL9KSKRVOKOhNF9rxiMSli 8QyS//xmBMByhPc5H8cNT+q/OouF0aedXmfv9IA5is0O2rRxn7L+BMriqHaWm/Lt 5+pbN31gRomqwEgqPh2WIowIQ4xz6mkqaXa3UcMqAJy9DR7pe4FSUKWkmIGcqxrP VbhKKoTcpVZfmAY/O1aP//DC3dKIf4Dq -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org