$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa File: 30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa (raw, json) Hash identifier: YSsIUAj/dpOtpka18IYOPHZFsruSAaQ9zAZPAwhtDhc= Subject key identifier: 1F:11:79:DD:C8:04:FF:02:A7:70:15:5E:FA:72:5B:D7:99:78:2C:74 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584780268D8FB080A3C4DF7C4900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa Signing time: Fri 11 Oct 2024 01:00:31 +0000 ROA not before: Fri 11 Oct 2024 01:00:31 +0000 ROA not after: Thu 09 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 2607:8940:49e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:80:26:8d:8f:b0:80:a3:c4:df:7c:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 11 01:00:31 2024 GMT Not After : Jan 9 02:00:31 2025 GMT Subject: CN=5b507a89-e64e-459d-b07e-50c25e616e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:30:ce:a1:b7:8f:3a:89:cd:94:66:a0:9d: cb:e8:a2:43:52:53:54:a6:fe:78:89:5a:1e:d1:e9: 55:82:3e:e6:6d:1e:d7:17:04:01:19:3c:3c:04:8b: de:cb:1d:78:19:ab:fe:c5:bf:99:9c:3f:16:eb:ab: 6d:14:39:13:73:46:48:47:45:5a:ff:e0:2e:a0:ba: 98:17:17:af:60:f1:8b:ea:eb:d1:fe:86:a1:d8:1f: df:ad:c9:d3:87:2c:30:23:ea:bf:2e:08:d2:a9:c4: 66:30:7e:4a:52:c7:54:6c:2a:df:1b:18:db:2f:d7: 13:1b:3a:f9:47:6e:09:f6:3a:ce:61:d2:bc:ee:41: cf:2c:48:32:a2:83:55:93:81:b6:a1:f7:cf:3d:7b: 15:bb:22:0a:b2:0c:24:f5:f6:db:bb:09:f3:d8:04: 4f:97:52:39:a3:0d:63:bc:fd:bc:cf:a1:41:a3:6f: f6:21:38:f6:4b:44:49:5b:51:e2:8a:ac:16:fe:e6: bb:0d:67:14:c8:6d:5b:bc:65:21:bb:dd:75:36:88: ea:78:fb:44:d2:4d:db:6e:0a:b6:c1:73:06:c6:5e: f8:06:1c:26:7d:75:c7:f2:d5:04:f3:d2:20:b4:8b: 00:da:d2:f9:4f:8f:79:3a:c6:90:03:03:54:9f:40: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:11:79:DD:C8:04:FF:02:A7:70:15:5E:FA:72:5B:D7:99:78:2C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:49e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:51:42:a7:ba:f9:ed:fe:53:6a:58:88:a9:9f:bc:50:92:1a: 68:22:45:68:dd:62:0e:fc:4b:6e:fc:59:3a:4f:8e:56:1d:ff: aa:ab:9c:0b:37:ef:6a:01:fb:23:5a:2a:cf:db:fb:53:3d:a6: f8:12:3b:8d:9a:37:18:13:b7:3f:a4:47:f0:6d:85:6e:c4:d0: 9f:3e:1e:b1:f9:60:98:3d:a3:dc:07:57:81:44:ea:82:ad:1c: fb:ec:7c:73:64:be:ad:75:57:86:32:4f:a2:0d:30:44:b1:42: 1e:d2:7f:ed:e4:62:64:b9:84:12:cf:f3:1d:72:b5:ed:f3:7b: ab:32:45:9c:aa:f7:45:f6:2e:61:11:20:68:cd:9b:0a:e7:d6: 0b:82:77:4d:9c:53:a3:1b:8b:13:60:7f:60:8f:77:68:9e:57: f1:83:58:27:7e:99:50:dd:bd:b4:d0:4f:6e:2d:c1:00:f2:f3: 8a:99:f3:ca:53:64:28:ab:0f:dc:af:81:3f:2a:6e:d5:5d:e9: f6:7d:a6:de:e8:3e:e4:91:4a:89:56:27:61:f4:7b:4b:4c:99: 2e:d5:33:07:2a:2b:46:98:1e:02:42:2d:d6:8b:45:50:57:34: 58:5b:38:8a:22:81:87:c5:23:d4:bc:f4:52:6e:c3:b0:43:5f: 37:62:f4:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJo2PsICjxN98SQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk NWI1MDdhODktZTY0ZS00NTlkLWIwN2UtNTBjMjVlNjE2ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj64wzqG3jzqJzZRmoJ3L6KJDUlNUpv54iVoe 0elVgj7mbR7XFwQBGTw8BIveyx14Gav+xb+ZnD8W66ttFDkTc0ZIR0Va/+AuoLqY FxevYPGL6uvR/oah2B/frcnThywwI+q/LgjSqcRmMH5KUsdUbCrfGxjbL9cTGzr5 R24J9jrOYdK87kHPLEgyooNVk4G2offPPXsVuyIKsgwk9fbbuwnz2ARPl1I5ow1j vP28z6FBo2/2ITj2S0RJW1HiiqwW/ua7DWcUyG1bvGUhu911NojqePtE0k3bbgq2 wXMGxl74BhwmfXXH8tUE89IgtIsA2tL5T495OsaQAwNUn0AOYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB8Red3IBP8Cp3AVXvpyW9eZeCx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzBjOThmMTctMTlhYi0z YTRjLTg1ZTQtYzE0YjRmZjY3YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEng MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACBRQqe6+e3+U2pYiKmfvFCSGmgiRWjdYg78S278WTpPjlYd/6qr nAs372oB+yNaKs/b+1M9pvgSO42aNxgTtz+kR/BthW7E0J8+HrH5YJg9o9wHV4FE 6oKtHPvsfHNkvq11V4YyT6INMESxQh7Sf+3kYmS5hBLP8x1yte3ze6syRZyq90X2 LmERIGjNmwrn1guCd02cU6MbixNgf2CPd2ieV/GDWCd+mVDdvbTQT24twQDy84qZ 88pTZCirD9yvgT8qbtVd6fZ9pt7oPuSRSolWJ2H0e0tMmS7VMwcqK0aYHgJCLdaL RVBXNFhbOIoigYfFI9S89FJuw7BDXzdi9IM= -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:45 2024 by rpki-client on console-fra.rpki-client.org