$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/5f16948f-0e1f-3e3e-956a-9f85d8d567c2.roa File: 5f16948f-0e1f-3e3e-956a-9f85d8d567c2.roa (raw, json) Hash identifier: uPxa/7rKcXRtcTyu6XJJK5GmL1nqepg28TW7IyHCSIA= Subject key identifier: 54:F2:7C:BC:8A:2F:02:38:CC:62:4F:1C:B9:8B:05:F3:AD:22:78:B7 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F43285847E35F6E9033C5F26036B9F700 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/5f16948f-0e1f-3e3e-956a-9f85d8d567c2.roa Signing time: Fri 15 Nov 2024 14:00:39 +0000 ROA not before: Fri 15 Nov 2024 14:00:39 +0000 ROA not after: Thu 13 Feb 2025 14:00:39 +0000 asID: 395494 IP address blocks: 2605:2cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e3:5f:6e:90:33:c5:f2:60:36:b9:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Nov 15 14:00:39 2024 GMT Not After : Feb 13 14:00:39 2025 GMT Subject: CN=d7e39598-c16d-48f1-abe4-18152aa78a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fd:c7:2e:9c:27:c5:ed:a2:d1:01:24:56:58: e2:74:41:bd:9e:05:3c:c9:71:fe:6e:14:08:13:18: 1f:a6:22:c4:a9:d8:22:14:7a:93:85:99:96:c6:39: 0e:80:b4:20:c0:cd:42:c0:7b:1a:70:bf:b9:9c:2d: e1:82:14:d0:66:0a:75:f7:46:af:8d:20:e2:48:d2: 2e:53:7c:57:9a:ec:6c:82:cc:a1:b4:a0:46:b2:3a: 48:6a:4e:62:64:cc:a5:db:e7:5e:1e:31:c4:37:fc: ae:1b:2c:ef:36:b8:03:ec:8f:87:42:3d:ae:22:4f: 2d:3d:8f:d2:c2:0b:a8:b3:b9:84:4d:7b:2a:ae:b9: dc:42:a4:ca:15:84:81:04:52:5d:d7:3d:40:1f:5f: 6d:b6:b9:d2:48:2e:68:8c:e4:2f:b1:7d:b9:ee:60: 1e:13:11:7d:4f:ec:2e:e8:23:65:9c:a6:f2:b0:f9: ec:77:e2:51:a7:0c:a7:f7:6c:74:e2:03:54:8f:70: 3f:65:65:98:3c:eb:d1:54:62:e2:67:08:ef:6a:49: 46:6b:6f:aa:8c:b7:ab:9d:e7:7f:34:73:46:2c:66: c2:37:70:4a:f8:13:a3:e0:e8:5d:e8:3a:84:8d:c6: 40:c3:e7:04:44:cf:80:6c:b2:09:d2:55:e8:9a:c6: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F2:7C:BC:8A:2F:02:38:CC:62:4F:1C:B9:8B:05:F3:AD:22:78:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/5f16948f-0e1f-3e3e-956a-9f85d8d567c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv6: 2605:2cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0d:02:ec:7f:1c:9c:4e:b1:24:e3:3f:09:cb:94:07:24:39: 62:57:61:59:6e:05:8b:5a:7d:cd:b5:fe:1a:e6:42:e9:aa:eb: 87:9c:6a:e5:ea:74:7f:8e:4f:6f:81:97:11:1c:2d:1a:7b:79: d8:5c:ff:5b:38:e3:99:8a:ef:1a:ff:f6:cc:8b:f1:af:eb:cd: 4c:c6:29:4f:0f:61:34:2f:d3:35:6e:29:b0:2b:0a:12:37:c9: 6d:e3:71:10:dc:b0:13:9c:db:2f:e6:f7:ec:22:88:9a:62:e4: 26:37:fb:41:0a:47:95:cd:23:2a:d0:71:b9:43:0e:a1:ef:6d: 5c:a6:53:62:f8:4b:5a:e0:8c:cf:1b:ee:c4:1f:bb:0a:63:23: 2b:e1:f0:9b:fe:23:e8:cb:1d:1e:9b:5c:9e:fa:21:f3:1f:78: f0:2d:92:99:b2:f4:5f:bf:b9:ae:d1:da:09:15:3f:3a:42:43: e5:b3:98:64:c0:d5:2d:a2:01:10:f3:18:fc:06:e7:60:d4:bd: 08:2a:05:03:11:72:67:36:42:0c:72:bb:ad:bd:d9:14:4b:bb: e8:51:12:7b:25:6b:22:61:4f:76:92:7b:ad:97:d3:90:ec:c3: a7:a8:42:e7:a8:34:6b:d2:63:20:6d:40:a3:01:3a:4f:51:23: e3:3e:9a:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfjX26QM8XyYDa59wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDdlMzk1OTgtYzE2ZC00OGYxLWFiZTQtMTgxNTJhYTc4YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP3HLpwnxe2i0QEkVljidEG9ngU8yXH+bhQI ExgfpiLEqdgiFHqThZmWxjkOgLQgwM1CwHsacL+5nC3hghTQZgp190avjSDiSNIu U3xXmuxsgsyhtKBGsjpIak5iZMyl2+deHjHEN/yuGyzvNrgD7I+HQj2uIk8tPY/S wguos7mETXsqrrncQqTKFYSBBFJd1z1AH19ttrnSSC5ojOQvsX257mAeExF9T+wu 6CNlnKbysPnsd+JRpwyn92x04gNUj3A/ZWWYPOvRVGLiZwjvaklGa2+qjLerned/ NHNGLGbCN3BK+BOj4Ohd6DqEjcZAw+cERM+AbLIJ0lXomsZ9IQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFTyfLyKLwI4zGJPHLmLBfOtIni3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvNWYxNjk0OGYtMGUxZi0z ZTNlLTk1NmEtOWY4NWQ4ZDU2N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUswDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgDQLsfxycTrEk4z8Jy5QHJDliV2FZbgWLWn3Ntf4a5kLpquuHnGrl 6nR/jk9vgZcRHC0ae3nYXP9bOOOZiu8a//bMi/Gv681MxilPD2E0L9M1bimwKwoS N8lt43EQ3LATnNsv5vfsIoiaYuQmN/tBCkeVzSMq0HG5Qw6h721cplNi+Eta4IzP G+7EH7sKYyMr4fCb/iPoyx0em1ye+iHzH3jwLZKZsvRfv7mu0doJFT86QkPls5hk wNUtogEQ8xj8Budg1L0IKgUDEXJnNkIMcrutvdkUS7voURJ7JWsiYU92knutl9OQ 7MOnqELnqDRr0mMgbUCjATpPUSPjPpoV -----END CERTIFICATE-----Generated at Sun Nov 24 03:01:50 2024 by rpki-client on console-fra.rpki-client.org