$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa File: dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa (raw, json) Hash identifier: uE2T45uCyQ5WigyCh8svkhjDmUTJdK1IVgOr9PnXDlQ= Subject key identifier: 5C:94:90:7F:31:9A:05:39:08:AD:D1:FE:09:05:87:7E:52:50:4F:A0 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F43285847B2669A5236D0EFE1708EA080 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa Signing time: Tue 29 Oct 2024 01:00:32 +0000 ROA not before: Tue 29 Oct 2024 01:00:32 +0000 ROA not after: Mon 27 Jan 2025 02:00:32 +0000 asID: 400745 IP address blocks: 2607:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:66:9a:52:36:d0:ef:e1:70:8e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Oct 29 01:00:32 2024 GMT Not After : Jan 27 02:00:32 2025 GMT Subject: CN=3565949a-c334-4172-abc0-cbb693c1b69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:d5:3b:08:74:ff:c6:9c:1b:92:d9:9c:9a: d3:90:90:dd:8e:0f:53:17:66:ad:74:a6:02:a5:aa: 62:96:00:89:ea:e9:2c:3d:3d:9a:b6:32:37:d3:1a: 04:91:70:ca:5c:17:94:c2:18:42:fd:0a:48:13:67: ac:b7:9d:d1:ed:37:6a:c5:2b:5b:bd:18:1d:e7:3f: d4:a0:aa:41:dc:33:92:a6:69:c7:10:39:74:8c:cc: 44:57:3e:a7:92:9b:2d:6e:83:a1:13:f5:ef:46:39: 39:7d:2f:94:de:8e:2c:8e:ce:39:b2:62:a3:7d:20: 67:c8:9d:18:6f:36:25:29:56:19:3c:6b:81:15:b2: 49:91:b9:e5:65:61:eb:16:ef:13:7b:b9:b4:11:7b: 23:85:76:d2:be:67:5f:fd:86:b7:a0:aa:6f:bc:37: f9:fb:d4:97:a3:d1:b9:ce:a7:b8:de:2a:94:3a:be: 83:00:6c:20:bb:1d:34:d6:80:60:25:ad:65:06:9c: 3b:a4:43:3f:20:3c:f1:6d:28:3d:1c:37:d8:42:73: 37:11:a1:1f:17:36:f9:5e:9b:66:0c:0f:2c:28:ae: f4:19:fa:5e:b3:82:50:bd:0d:1f:06:6e:b6:b9:9b: 4b:5d:55:ec:c6:9f:74:00:c3:93:b1:c9:13:87:20: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:94:90:7F:31:9A:05:39:08:AD:D1:FE:09:05:87:7E:52:50:4F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv6: 2607:bac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d2:3e:42:2e:0d:15:3e:bf:dd:74:93:ee:78:f9:e9:92:14: 18:b9:bc:3b:6f:02:d6:eb:86:f5:bb:d6:5b:4b:c5:13:92:c6: fb:11:f2:00:db:6f:a3:f4:3b:59:fc:78:86:14:07:ff:32:c3: 3b:32:6a:a5:68:f5:d1:c0:fd:5e:06:be:31:07:ee:a7:c2:59: e8:13:46:7a:58:ea:1e:73:56:86:93:04:c1:43:fd:b9:cb:70: 41:18:e9:11:08:e2:a7:c8:b6:18:d5:b0:cd:b9:d7:30:38:0b: b3:f5:18:51:55:6b:25:2c:dc:36:a7:3e:33:b3:ef:c0:a5:26: f5:72:cb:fe:f3:9b:3d:44:d3:68:73:0b:2f:c3:21:66:1f:d3: b9:8d:83:c9:c6:7c:d0:f0:01:79:88:6b:87:39:0f:1e:16:74: a3:4f:3f:d6:d0:78:2b:c4:2b:70:bd:de:e9:27:ec:2e:49:4e: 72:59:54:59:51:4b:d8:db:56:66:eb:dd:2e:f7:95:59:95:42: 47:95:3e:70:79:69:58:00:e9:e3:ce:cd:7e:ad:fe:27:c7:ac: 61:b4:0e:e5:d2:c7:1e:79:cf:35:8f:7f:b2:62:66:cc:82:f8: 5c:0f:fd:85:54:1d:8d:f7:a7:fd:89:fb:e7:5f:b5:08:16:49: 1e:76:fe:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeyZppSNtDv4XCOoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI0MTAyOTAxMDAzMloXDTI1MDEyNzAyMDAzMlowLzEtMCsGA1UEAxMk MzU2NTk0OWEtYzMzNC00MTcyLWFiYzAtY2JiNjkzYzFiNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiDVOwh0/8acG5LZnJrTkJDdjg9TF2atdKYC papilgCJ6uksPT2atjI30xoEkXDKXBeUwhhC/QpIE2est53R7TdqxStbvRgd5z/U oKpB3DOSpmnHEDl0jMxEVz6nkpstboOhE/XvRjk5fS+U3o4sjs45smKjfSBnyJ0Y bzYlKVYZPGuBFbJJkbnlZWHrFu8Te7m0EXsjhXbSvmdf/Ya3oKpvvDf5+9SXo9G5 zqe43iqUOr6DAGwgux001oBgJa1lBpw7pEM/IDzxbSg9HDfYQnM3EaEfFzb5Xptm DA8sKK70Gfpes4JQvQ0fBm62uZtLXVXsxp90AMOTsckThyAMGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFyUkH8xmgU5CK3R/gkFh35SUE+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZGZiZTM0YTAtNzZlMi0z NDgwLWFjZTktMGVkYWEzODc4ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA30j5CLg0VPr/ddJPuePnpkhQYubw7bwLW64b1u9ZbS8UTksb7EfIA 22+j9DtZ/HiGFAf/MsM7MmqlaPXRwP1eBr4xB+6nwlnoE0Z6WOoec1aGkwTBQ/25 y3BBGOkRCOKnyLYY1bDNudcwOAuz9RhRVWslLNw2pz4zs+/ApSb1csv+85s9RNNo cwsvwyFmH9O5jYPJxnzQ8AF5iGuHOQ8eFnSjTz/W0HgrxCtwvd7pJ+wuSU5yWVRZ UUvY21Zm690u95VZlUJHlT5weWlYAOnjzs1+rf4nx6xhtA7l0sceec81j3+yYmbM gvhcD/2FVB2N96f9ifvnX7UIFkkedv5a -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:47 2024 by rpki-client on console-ams.rpki-client.org