$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00d710ff-299b-3144-b9f6-e2a242b20dd7.roa File: 00d710ff-299b-3144-b9f6-e2a242b20dd7.roa (raw, json) Hash identifier: lPU5cXcBSfYXRQniZczzgpDcgl+WtrXJZTuIB3vskKM= Subject key identifier: 1F:9F:4F:1E:62:A3:CB:E0:8D:9D:2C:86:1B:E9:EF:17:78:F8:95:20 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285846FA257882BB1AB4A14B9D5D70 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00d710ff-299b-3144-b9f6-e2a242b20dd7.roa Signing time: Sat 24 Aug 2024 01:00:31 +0000 ROA not before: Sat 24 Aug 2024 01:00:31 +0000 ROA not after: Fri 22 Nov 2024 02:00:31 +0000 asID: 16509 IP address blocks: 2605:b040:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Sep 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:fa:25:78:82:bb:1a:b4:a1:4b:9d:5d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Aug 24 01:00:31 2024 GMT Not After : Nov 22 02:00:31 2024 GMT Subject: CN=5a17be38-0b18-46aa-9cf4-54c0ab3b99da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:db:40:50:77:6d:35:eb:78:ff:f4:4e:0f: 21:02:cf:54:8d:46:46:27:c6:ae:07:0a:48:f4:ec: 65:f1:89:ad:0b:6f:b0:d4:df:95:ae:e9:0e:15:c0: b7:27:42:69:91:6b:b1:b6:99:f8:87:83:5a:09:f5: 21:15:58:f9:c0:8c:d3:9a:22:cc:59:31:6a:d1:92: d4:fb:cf:11:4c:c8:17:3e:4a:88:fa:7e:72:39:16: aa:71:51:d3:a5:d5:25:e7:c3:f1:68:05:b2:75:9c: 9f:87:2d:b5:7b:81:4c:0f:8e:f3:8f:0c:2a:55:fa: e1:3a:e9:88:98:c3:05:c5:c1:b1:23:eb:75:6a:fe: 4f:63:7e:6a:aa:5a:d6:d6:f5:4d:18:f7:84:b2:b3: 23:67:22:cc:14:9f:10:e5:2d:e1:da:97:ac:af:13: c8:6f:f5:f8:4d:27:0a:b7:af:34:4f:31:b9:96:ed: 39:80:0f:12:60:2c:eb:5e:77:a5:b9:bf:af:9d:07: 47:27:95:fc:4f:0f:12:36:e2:07:40:d8:38:fe:42: 22:da:4b:82:65:63:74:a9:05:86:03:7d:c6:0c:d1: 2b:40:e7:5e:71:34:db:b2:f0:2f:05:76:6f:81:96: 3c:0e:c2:7e:0c:ac:ac:ae:b4:d4:43:54:db:d2:24: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9F:4F:1E:62:A3:CB:E0:8D:9D:2C:86:1B:E9:EF:17:78:F8:95:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/00d710ff-299b-3144-b9f6-e2a242b20dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:09:6f:91:01:3f:4b:90:b4:2d:6b:40:6f:80:2d:46:1b:6b: f4:6e:12:c7:4f:86:87:e3:a9:2c:c1:d8:c9:64:f8:85:79:bb: ea:dd:bf:ce:73:b9:2d:7c:35:df:8d:7f:8e:e2:13:e4:f1:25: 5a:50:37:03:85:da:f9:a3:7c:c9:c5:c1:1e:e5:b9:5e:f0:2d: d1:f2:14:85:02:ab:a1:1d:ba:d6:2c:7f:6f:9f:2b:91:51:cc: 05:37:86:de:f5:da:be:6c:fd:7b:5c:6b:33:b0:50:6d:8d:a7: 6d:88:41:e0:3c:5c:99:9d:64:13:cb:a4:dd:a5:76:5b:7b:e5: a1:0b:03:ab:d9:8d:62:86:bd:30:db:79:37:34:7a:b1:2b:cd: 82:f2:34:15:00:59:26:18:ef:48:a5:d8:cf:b2:1a:56:ed:65: ea:85:b4:8a:3a:93:ee:87:3f:67:6b:fe:49:bf:33:96:a6:b9: a0:a7:3c:35:c0:a4:76:f2:51:6e:f6:8e:95:d1:6b:84:85:ce: 2f:28:38:d3:58:b0:f3:7b:81:b7:cd:72:d1:6b:97:87:83:00: bd:82:26:3c:cd:6e:c1:a1:82:47:d3:12:e4:f3:6c:42:4e:a7: ac:97:ca:e3:ed:99:97:b5:4c:e1:7d:ac:25:cd:19:a0:3d:f5: dc:43:bd:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEb6JXiCuxq0oUudXXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI0MDgyNDAxMDAzMVoXDTI0MTEyMjAyMDAzMVowLzEtMCsGA1UEAxMk NWExN2JlMzgtMGIxOC00NmFhLTljZjQtNTRjMGFiM2I5OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRfbQFB3bTXreP/0Tg8hAs9UjUZGJ8auBwpI 9Oxl8YmtC2+w1N+VrukOFcC3J0JpkWuxtpn4h4NaCfUhFVj5wIzTmiLMWTFq0ZLU +88RTMgXPkqI+n5yORaqcVHTpdUl58PxaAWydZyfhy21e4FMD47zjwwqVfrhOumI mMMFxcGxI+t1av5PY35qqlrW1vVNGPeEsrMjZyLMFJ8Q5S3h2pesrxPIb/X4TScK t680TzG5lu05gA8SYCzrXnelub+vnQdHJ5X8Tw8SNuIHQNg4/kIi2kuCZWN0qQWG A33GDNErQOdecTTbsvAvBXZvgZY8DsJ+DKysrrTUQ1Tb0iTgnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB+fTx5io8vgjZ0shhvp7xd4+JUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvMDBkNzEwZmYtMjk5Yi0z MTQ0LWI5ZjYtZTJhMjQyYjIwZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMJb5EBP0uQtC1rQG+ALUYba/RuEsdPhofjqSzB2Mlk+IV5u+rd v85zuS18Nd+Nf47iE+TxJVpQNwOF2vmjfMnFwR7luV7wLdHyFIUCq6EdutYsf2+f K5FRzAU3ht712r5s/XtcazOwUG2Np22IQeA8XJmdZBPLpN2ldlt75aELA6vZjWKG vTDbeTc0erErzYLyNBUAWSYY70il2M+yGlbtZeqFtIo6k+6HP2dr/km/M5amuaCn PDXApHbyUW72jpXRa4SFzi8oONNYsPN7gbfNctFrl4eDAL2CJjzNbsGhgkfTEuTz bEJOp6yXyuPtmZe1TOF9rCXNGaA99dxDvRg= -----END CERTIFICATE-----Generated at Sat Sep 7 20:44:55 2024 by rpki-client on console-fra.rpki-client.org