$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa File: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (raw, json) Hash identifier: Y7D3HpecmztjHZt/ywX8haacBGqeD7EyMzwHVC1PwEk= Subject key identifier: 32:1A:C8:62:B8:41:1A:9F:29:4F:25:9C:4B:B8:40:60:35:29:1D:95 Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Certificate serial: 010D0C9F43285847570D9A72CDC2A03172FBF900 Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa Signing time: Thu 26 Sep 2024 07:42:41 +0000 ROA not before: Thu 26 Sep 2024 07:42:41 +0000 ROA not after: Wed 25 Dec 2024 08:42:41 +0000 asID: 394086 IP address blocks: 2607:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:57:0d:9a:72:cd:c2:a0:31:72:fb:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Validity Not Before: Sep 26 07:42:41 2024 GMT Not After : Dec 25 08:42:41 2024 GMT Subject: CN=2f600b42-10bb-4aed-8057-2aa253ed21f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:92:3d:ed:fd:53:e3:ed:80:fd:20:78:37:8f: a0:cf:ce:50:d0:29:f8:c9:38:ba:0c:d9:51:6b:7e: e5:a7:e2:c9:c4:63:30:2b:7d:c0:d2:60:4a:cc:3f: 86:6c:7c:87:af:a9:2b:a7:69:b5:a4:74:03:3a:dd: d4:48:cf:17:42:7d:2a:b1:6a:42:96:4a:cf:11:cd: af:34:03:d2:15:e1:15:20:f7:be:67:28:e4:3c:fe: 67:82:ca:f8:ea:fd:5f:07:a3:a0:20:a7:de:36:a1: 62:88:14:89:d5:4d:d1:1f:87:00:e7:3e:1a:1f:10: 52:b1:8c:64:25:4e:ca:cf:d7:33:ed:6c:4b:91:e3: 28:34:67:86:76:03:4c:f2:33:d8:f8:22:e0:00:25: a7:5c:01:c2:93:96:12:21:df:4a:42:27:87:a3:0c: 04:7b:20:10:12:91:29:3d:b9:94:75:b7:4d:80:12: 40:d8:1b:9c:76:e8:12:15:0a:66:0f:74:65:1f:6f: 24:bb:b6:64:3c:a7:5e:0e:4e:a4:93:a9:af:0e:de: 4a:1e:66:af:d3:bb:6f:3f:ff:97:c7:74:d2:ee:b1: 46:50:e1:c4:53:1f:4b:18:50:b5:03:d1:be:a8:94: d4:bc:d7:84:b2:02:a0:b9:e6:0f:bc:07:b2:25:05: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1A:C8:62:B8:41:1A:9F:29:4F:25:9C:4B:B8:40:60:35:29:1D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl X509v3 Authority Key Identifier: keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:77:31:03:1d:01:b0:1a:9e:13:ea:82:c2:44:9b:9e:73:4f: 94:a1:ee:2f:f3:44:13:e2:26:11:4b:ee:37:c9:0e:dd:72:9c: 54:e6:01:c2:0e:4a:0a:89:12:3f:63:d2:b0:62:4b:1f:30:78: 9b:2f:28:94:44:0c:74:61:a7:ca:fe:5b:ab:ae:03:a4:d9:00: e8:83:34:be:97:dc:ff:c6:08:b2:b9:4f:61:26:bc:1f:99:a0: 10:08:6b:49:04:3c:3b:8b:fa:11:cd:bb:ea:a6:8d:67:08:3b: c0:46:0b:af:61:30:62:5f:fd:e4:f5:bc:9f:f7:9b:8f:4a:7f: 55:51:0e:ee:43:89:b7:42:fa:22:27:cc:ab:cb:44:31:cd:6b: 8c:af:80:36:f7:85:80:e4:fc:63:df:b6:ed:6b:5c:06:3d:69: 82:1a:3a:dc:70:3c:df:12:a8:47:1f:eb:de:9c:56:83:03:05: 44:ab:1a:d3:a8:f5:88:34:d2:07:6d:be:01:04:ed:de:26:12: 02:fe:8f:9e:f7:ee:aa:d7:80:01:e2:32:0d:eb:4a:23:55:25: ac:61:db:7f:b4:50:eb:c6:63:15:3a:10:cd:a5:5b:55:73:fb: ab:49:d7:b8:a6:a3:b6:49:b7:5f:7d:2e:86:11:75:3d:aa:fa: f1:90:ae:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdXDZpyzcKgMXL7+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3 YjRmMB4XDTI0MDkyNjA3NDI0MVoXDTI0MTIyNTA4NDI0MVowLzEtMCsGA1UEAxMk MmY2MDBiNDItMTBiYi00YWVkLTgwNTctMmFhMjUzZWQyMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJI97f1T4+2A/SB4N4+gz85Q0Cn4yTi6DNlR a37lp+LJxGMwK33A0mBKzD+GbHyHr6krp2m1pHQDOt3USM8XQn0qsWpClkrPEc2v NAPSFeEVIPe+ZyjkPP5ngsr46v1fB6OgIKfeNqFiiBSJ1U3RH4cA5z4aHxBSsYxk JU7Kz9cz7WxLkeMoNGeGdgNM8jPY+CLgACWnXAHCk5YSId9KQieHowwEeyAQEpEp PbmUdbdNgBJA2BucdugSFQpmD3RlH28ku7ZkPKdeDk6kk6mvDt5KHmav07tvP/+X x3TS7rFGUOHEUx9LGFC1A9G+qJTUvNeEsgKgueYPvAeyJQVnIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDIayGK4QRqfKU8lnEu4QGA1KR2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2 NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMGE4YmYzMmUtNWNkMS0z MTIyLTk2M2EtOTExMjU0NTg2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3 OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2 Y2IwZDdiNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvdzEDHQGwGp4T6oLCRJuec0+Uoe4v80QT4iYRS+43yQ7dcpxU5gHC DkoKiRI/Y9KwYksfMHibLyiURAx0YafK/lurrgOk2QDogzS+l9z/xgiyuU9hJrwf maAQCGtJBDw7i/oRzbvqpo1nCDvARguvYTBiX/3k9byf95uPSn9VUQ7uQ4m3Qvoi J8yry0QxzWuMr4A294WA5Pxj37bta1wGPWmCGjrccDzfEqhHH+venFaDAwVEqxrT qPWINNIHbb4BBO3eJhIC/o+e9+6q14AB4jIN60ojVSWsYdt/tFDrxmMVOhDNpVtV c/urSde4pqO2SbdffS6GEXU9qvrxkK6q -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:45 2024 by rpki-client on console-fra.rpki-client.org